Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60ed1a61-d459-3246-92d6-6f1fdf56292c.roa
File:                     60ed1a61-d459-3246-92d6-6f1fdf56292c.roa (raw, json)
Hash identifier:          WqWgH7Z6SbO0o4891rHbvOosapVJP44YwcVhWIoZ2JI=
Subject key identifier:   8D:7F:A8:33:40:0C:9D:10:C4:36:AF:18:EA:4F:47:CC:27:78:87:0F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848A1362FF97205D9C2CF4A3980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60ed1a61-d459-3246-92d6-6f1fdf56292c.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        2600:1409:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:2f:f9:72:05:d9:c2:cf:4a:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=c89c1b31-b450-442a-a255-521f0f9d86e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:ab:61:9f:75:58:07:e5:0d:28:e3:a7:71:
                    11:19:1f:01:d0:28:f8:81:a5:67:4b:f9:d5:e9:28:
                    ae:cd:48:78:95:37:9a:18:31:ef:df:df:9d:ab:c9:
                    17:79:86:5f:23:1b:6b:e8:35:64:93:0d:bb:0b:bb:
                    59:50:cd:3e:45:13:22:33:2f:8a:45:7a:7a:b8:15:
                    76:c9:f6:4d:87:c3:44:6f:d7:22:b4:b6:ef:8b:9d:
                    5a:a8:f0:0b:d0:10:d9:09:66:2b:88:47:a6:fa:91:
                    70:9c:31:14:d4:f3:20:b8:6f:12:12:60:0c:72:14:
                    39:27:d1:ea:6b:28:c9:68:0e:5f:82:e5:da:87:a5:
                    d7:0c:3f:a1:fb:af:e3:c1:b1:6c:6c:da:fa:b7:74:
                    75:08:00:0a:07:d1:0b:f8:c2:3e:59:94:5b:f5:7d:
                    c3:48:eb:41:ef:70:56:48:b6:52:db:45:06:46:27:
                    6d:05:a2:63:50:0b:d1:2f:69:c3:ee:af:71:fd:d6:
                    42:98:06:7c:76:86:cf:72:b8:48:25:e2:ca:cb:10:
                    d1:bb:e9:13:dd:bf:52:1e:b5:cd:0d:8c:2b:62:2a:
                    8c:0b:f0:b6:7b:78:97:c7:b1:6b:b4:4e:57:f6:80:
                    74:b2:d8:b8:2d:a5:e5:64:42:f3:a4:2b:eb:6d:ab:
                    61:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7F:A8:33:40:0C:9D:10:C4:36:AF:18:EA:4F:47:CC:27:78:87:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60ed1a61-d459-3246-92d6-6f1fdf56292c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1409:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:22:c4:bd:f8:8b:15:2c:3a:95:63:2b:3f:fb:9a:74:a9:3d:
         11:2c:45:72:c1:82:a5:85:0e:8e:2c:34:06:ad:8b:4f:6b:82:
         42:9b:78:62:00:d9:33:fd:9b:ed:d8:d2:e3:92:8f:00:19:69:
         6b:6d:54:27:70:1a:32:0f:5b:39:11:25:41:27:5d:e1:7e:ae:
         43:3f:bb:83:92:40:6f:98:81:52:9c:2f:73:99:32:76:47:2b:
         48:b4:97:9a:3b:85:4c:88:5b:5e:cf:5a:ef:0b:cd:a7:1e:93:
         ca:a3:3b:8a:fa:b7:a8:9e:bd:b4:29:4b:23:6b:11:e1:f3:6a:
         96:34:db:7a:22:c0:60:23:42:7c:4c:55:f3:f1:4b:38:c2:e1:
         a9:18:74:af:5d:71:8f:de:b6:a8:73:c5:04:2a:f5:70:ae:fc:
         dc:0e:1a:b9:3a:1f:77:94:98:0f:48:d3:79:3f:ab:3d:11:59:
         70:30:02:e2:31:26:10:77:6a:6d:d4:eb:5f:26:74:97:02:a2:
         a2:4c:a5:10:40:b9:85:1d:37:d8:a2:2d:1e:1c:b1:8b:5e:22:
         8d:d0:da:9b:11:9d:99:ae:eb:fd:53:6d:b4:66:0f:ab:2c:45:
         bb:a4:78:98:23:70:c5:83:95:a5:a6:f2:2d:53:47:83:44:64:
         10:aa:57:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:19 2025 by rpki-client