Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60f9f036-e39f-3b89-8680-aabfeb0456fe.roa
File:                     60f9f036-e39f-3b89-8680-aabfeb0456fe.roa (raw, json)
Hash identifier:          iCVyyuz6OUMKY6dL15FXJA0e31nPe2nlc35UBIazjBQ=
Subject key identifier:   A4:78:CF:18:D4:38:BE:1B:6A:2D:6D:74:0B:04:EB:0B:6D:70:FD:7D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849D85F8E1A366796CA3A85D300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60f9f036-e39f-3b89-8680-aabfeb0456fe.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     33905
IP address blocks:        2600:1480:a000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:8e:1a:36:67:96:ca:3a:85:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=689f6dc4-c98c-45ec-9708-2d96d653b6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:18:f9:6c:04:7b:7a:87:9e:dc:f2:83:95:39:
                    8a:fa:21:d1:86:23:58:e2:28:42:f9:f1:2e:26:3b:
                    e5:67:f2:57:36:78:26:ba:2d:e3:e5:4f:67:35:d1:
                    44:ad:b3:dc:ab:ca:7a:f9:06:81:49:be:d1:f6:aa:
                    8d:7f:8f:bf:3f:f3:08:c0:82:11:a2:53:b1:ec:f1:
                    d3:31:56:fa:43:19:da:fd:43:bc:0f:1f:21:9e:45:
                    5a:64:d3:ee:5e:73:ce:35:0c:c9:80:81:88:ca:8b:
                    10:54:23:3f:83:3c:73:16:2a:39:85:40:bb:13:f5:
                    ce:12:65:23:56:16:7e:09:49:42:82:53:d1:aa:bc:
                    d4:fe:29:67:c5:0d:69:2a:5c:68:04:b7:a1:69:14:
                    08:06:a8:53:8b:92:00:af:52:bb:99:29:b5:24:2b:
                    8c:31:1c:ab:1a:25:9b:84:69:99:3c:c6:e2:02:cd:
                    38:16:9c:ea:65:46:95:48:f8:50:fd:1e:f4:20:1c:
                    3b:de:f4:e7:9a:6e:c3:d4:67:b0:24:dc:2d:e2:fa:
                    92:19:7a:37:a9:35:f1:3e:4d:73:7b:70:7c:51:0d:
                    e5:74:40:9c:63:13:bb:11:5e:48:a4:83:e1:16:f7:
                    8b:1a:3a:40:01:05:2f:2f:b8:60:eb:ab:c3:73:bd:
                    8f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:78:CF:18:D4:38:BE:1B:6A:2D:6D:74:0B:04:EB:0B:6D:70:FD:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60f9f036-e39f-3b89-8680-aabfeb0456fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1480:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ad:0f:53:23:58:7f:12:e2:c8:15:4b:e7:b9:81:dc:1f:f5:
         e1:fd:a0:80:6a:17:17:9f:70:dc:1e:5b:96:c6:8f:f5:f1:69:
         bb:14:c1:96:00:fb:8c:bf:c9:d9:32:76:eb:d6:f0:ad:b7:3c:
         c0:27:0f:24:7f:32:46:60:0b:1c:23:fd:0b:f8:5f:88:7d:cb:
         3f:0d:40:1a:bd:b0:b6:a5:c0:5e:e3:1e:d6:e0:f7:ed:89:a7:
         0d:07:2c:59:6d:6c:e6:3b:32:c6:89:f7:e1:c6:f6:fd:26:59:
         ea:cc:28:03:33:65:77:32:4d:c7:1d:77:a6:b9:8e:92:cd:fb:
         3e:3f:aa:fc:a4:41:75:82:27:fd:df:08:1e:22:82:66:ba:11:
         c0:5d:02:a1:2a:56:77:bc:1b:6c:3c:fb:ac:70:4e:b8:d4:d5:
         18:d5:88:cb:af:8e:ef:2e:01:62:10:7f:70:c6:06:5e:be:37:
         f8:9b:c1:84:28:e5:d1:9e:a7:8f:6d:5f:af:d5:79:e2:2f:be:
         67:a7:ab:7e:0b:bd:3a:65:4a:81:67:26:3a:58:f5:c9:84:61:
         1e:63:92:4b:c3:5a:45:81:17:55:d8:22:e8:13:df:c0:93:2e:
         15:e4:6d:2a:5d:30:39:d2:c4:88:f7:71:ce:23:e1:32:55:64:
         fe:0a:9c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:02:00 2025 by rpki-client