Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52aa227e-0d58-33ed-9c6d-b5e693d206b8.roa
File:                     52aa227e-0d58-33ed-9c6d-b5e693d206b8.roa (raw, json)
Hash identifier:          dMlWUX5QuZOvgBcm1VTfV8guFZ/4Vi2H/VCTxZU/Y6c=
Subject key identifier:   A1:F6:ED:5D:56:0C:CB:2F:C2:D8:D7:A6:60:71:8F:9E:6A:36:C0:5A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849DDF4DE2C55F508AF1D67FC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52aa227e-0d58-33ed-9c6d-b5e693d206b8.roa
Signing time:             Fri 16 May 2025 01:00:46 +0000
ROA not before:           Fri 16 May 2025 01:00:46 +0000
ROA not after:            Thu 14 Aug 2025 01:00:46 +0000
asID:                     4804
IP address blocks:        2600:1415:2400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dd:f4:de:2c:55:f5:08:af:1d:67:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 16 01:00:46 2025 GMT
            Not After : Aug 14 01:00:46 2025 GMT
        Subject: CN=81ef35c0-33e7-451b-98b0-7ba06861338c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f6:d7:93:e6:37:31:d0:29:b6:83:e7:11:cb:
                    76:57:8f:1c:e8:88:ac:f8:67:b6:42:10:30:27:7f:
                    74:53:d0:ae:10:95:a9:ea:e2:96:d6:35:a9:14:0c:
                    63:46:a3:7e:68:9c:0c:66:78:5e:6f:ef:9c:a7:5d:
                    9c:6f:77:21:41:91:22:4f:25:16:2f:fc:7b:39:75:
                    b5:fd:b9:43:ac:2e:b1:e2:73:93:72:a6:e2:09:fe:
                    59:8d:05:48:33:56:97:c8:86:e2:11:29:69:49:7d:
                    ca:bc:14:09:89:20:08:78:f8:25:06:1c:c8:10:ef:
                    c6:27:c1:45:ad:14:b7:bd:17:9a:3c:8f:a2:f9:28:
                    26:dc:1e:74:ac:84:11:90:f7:10:41:9f:9f:86:0b:
                    c2:a2:47:87:e3:0d:7b:f5:b7:70:02:dd:d0:65:30:
                    6f:dd:19:00:b5:8d:64:9a:59:be:36:3f:65:da:f7:
                    01:0c:b5:22:90:a6:f5:8c:b4:61:86:73:1a:63:db:
                    ed:b5:98:2a:07:a2:c3:a4:fd:86:5f:82:7b:41:91:
                    ca:2b:f3:e7:e0:08:a5:f6:40:4e:c4:3b:eb:89:6c:
                    95:42:d1:e1:f6:cd:eb:dd:58:1c:78:74:4e:f1:c9:
                    1f:5d:a8:1b:63:a4:a6:92:ee:81:c2:65:43:af:7f:
                    88:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F6:ED:5D:56:0C:CB:2F:C2:D8:D7:A6:60:71:8F:9E:6A:36:C0:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52aa227e-0d58-33ed-9c6d-b5e693d206b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1415:2400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:cd:e8:a1:27:90:17:4a:8b:01:be:95:9e:ca:dc:ea:7e:88:
         ff:06:c3:f3:a7:c4:34:c5:b9:40:38:f2:af:57:79:9f:12:14:
         99:8e:f4:d0:62:16:f3:be:9c:70:8f:3c:a2:17:e4:5f:23:50:
         d2:03:97:96:86:4c:d8:5b:c5:de:b9:08:3c:53:f3:bc:73:a8:
         5c:c9:25:30:02:00:96:e4:e6:d1:ea:d3:95:78:cb:2a:65:c6:
         ba:61:38:1d:d4:75:11:47:10:03:a3:51:59:90:f3:a4:e1:28:
         a1:8b:25:2e:ef:e3:60:b6:74:43:20:4c:ec:61:5f:89:37:f9:
         b8:9f:c6:ce:f2:5f:df:32:11:a4:f7:93:39:19:99:24:7b:3b:
         67:60:d1:43:48:10:4e:c4:c1:92:a3:ac:fc:17:5e:8a:c9:9e:
         89:65:d7:c0:ae:93:4d:59:dc:e0:b9:fc:1c:86:13:94:e3:ef:
         0b:8d:65:01:9f:d6:69:a5:e4:e2:cd:a8:29:b5:16:c5:fc:cb:
         17:75:fd:f9:71:4f:a6:1e:13:ed:b8:1e:58:21:80:3d:a9:cf:
         16:1c:13:64:6e:41:de:0e:9d:89:82:cf:6c:ec:25:56:9b:81:
         31:e0:bd:4b:3b:7a:f6:bd:50:f9:3e:53:f5:4a:5e:74:ca:78:
         56:ae:44:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:33:21 2025 by rpki-client