Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ad95c56-e84f-3603-a2f9-4eb2809ba8da.roa
File:                     7ad95c56-e84f-3603-a2f9-4eb2809ba8da.roa (raw, json)
Hash identifier:          Yy2arACZ4/eoizoUEy7hy3U8geXD9R/NDLzhakGe5ok=
Subject key identifier:   47:6D:2A:B5:3E:C7:A3:8D:1B:B2:59:B8:0C:A2:21:D5:F7:FD:71:D7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848A9966629F79FA704C179D680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ad95c56-e84f-3603-a2f9-4eb2809ba8da.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     35994
IP address blocks:        2600:1402:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:66:29:f7:9f:a7:04:c1:79:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=2d17c7be-7b90-4090-bd9b-5dc50016c069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:09:ca:92:61:db:aa:f5:96:0c:ab:b6:bf:df:
                    aa:3b:2c:16:b3:e9:36:6c:f7:4a:dd:94:af:bb:b4:
                    79:56:5d:69:1b:7d:a8:89:1e:4e:dc:b6:a5:9f:14:
                    34:bc:37:2f:7b:36:5c:62:3a:c4:4c:65:61:8f:af:
                    c9:d3:c7:45:68:ca:b1:33:0a:e1:11:1f:25:14:a8:
                    dc:4b:82:7f:03:38:c8:94:ad:e0:d6:6d:58:98:28:
                    ed:fc:49:c6:6a:3d:96:e7:22:17:3b:e3:77:a1:5c:
                    8d:9d:c5:7d:f4:19:f4:0a:c3:93:d2:de:a1:1e:be:
                    23:1b:ca:88:b0:f4:ff:2e:9e:e4:aa:c8:07:46:34:
                    64:d7:f4:98:b9:88:09:62:c0:84:30:49:71:46:d5:
                    3b:1c:0d:9f:57:81:d0:74:0f:36:32:91:4e:13:bc:
                    b2:53:ff:97:c0:b3:fa:bd:63:be:b7:19:04:72:d9:
                    51:b1:b6:e5:be:cd:de:67:81:8f:3f:96:dd:b0:a7:
                    b6:31:a5:aa:9b:58:75:53:f2:e2:8e:d3:58:12:64:
                    73:92:9b:b8:ed:4b:db:0c:a7:b6:26:87:97:7d:43:
                    39:46:f0:12:47:9a:03:5b:e3:37:df:4f:9a:c3:23:
                    f5:34:8e:f5:ca:c1:7c:bd:cb:76:ef:83:44:1b:ab:
                    63:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6D:2A:B5:3E:C7:A3:8D:1B:B2:59:B8:0C:A2:21:D5:F7:FD:71:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ad95c56-e84f-3603-a2f9-4eb2809ba8da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1402:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:09:5d:c1:ca:26:ea:c1:5f:8e:40:8a:45:1b:bb:17:b7:cd:
         6e:29:21:80:f5:8f:c1:0e:62:97:81:bd:9f:50:77:16:45:3a:
         36:75:c3:ed:dc:1c:54:30:4a:85:87:d6:bd:88:f5:ec:e8:de:
         eb:c2:e4:aa:9c:ac:fb:7a:ec:39:41:74:6c:84:28:f4:10:e3:
         d5:fe:89:1d:13:c4:05:86:c7:c9:1b:5f:b3:43:c5:5c:06:88:
         30:78:01:f8:92:96:5f:01:1a:43:92:95:e4:c2:91:6c:25:26:
         7c:cb:20:05:d8:3a:53:ac:48:ef:de:b0:c0:60:ac:62:fc:72:
         6f:80:c4:3d:20:45:af:32:7b:05:3c:6a:d3:50:92:2f:39:8e:
         98:51:95:5b:c8:ca:72:c8:c8:dc:2b:ec:24:ac:4b:65:a7:6c:
         dc:79:e0:f5:9e:32:bd:53:e5:51:9c:70:ee:f1:4f:1e:8d:41:
         fc:69:48:6d:80:4b:ea:f7:5f:2b:89:d6:d8:a9:b8:00:b1:9a:
         e1:af:72:be:82:6a:df:ac:db:b4:a8:ab:3d:3f:8a:50:39:0c:
         97:3d:e0:4c:fb:7f:f7:68:ee:df:a8:1f:19:65:9b:1c:c7:16:
         55:9f:eb:96:0d:14:f5:b3:4e:fc:b7:32:34:7b:a4:ce:30:a7:
         f3:ac:fc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:29 2025 by rpki-client