Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85636a31-66ba-36b5-afab-7e4228b33754.roa
File:                     85636a31-66ba-36b5-afab-7e4228b33754.roa (raw, json)
Hash identifier:          efqgVaExByVlv7qXGnz8wUAbMkpO9IOmfW9myt0TsUU=
Subject key identifier:   94:E3:9F:D9:5F:BE:17:73:DE:DC:69:C2:72:38:CF:98:E7:CF:54:7A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584819CFDC03193F1867BD3BCA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85636a31-66ba-36b5-afab-7e4228b33754.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     63949
IP address blocks:        2600:3c12:600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:dc:03:19:3f:18:67:bd:3b:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=8f44837a-8027-4983-afb3-54722cc77e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3d:23:63:33:c4:a6:c6:f4:1e:be:ea:b6:c1:
                    bb:02:33:4a:b6:27:1a:71:ea:1a:da:5d:06:23:ce:
                    e7:15:5d:66:fb:ee:df:14:f9:20:c9:5c:86:8e:6e:
                    98:2e:db:90:c7:d4:14:d4:48:5f:4d:60:f4:95:2d:
                    b6:57:82:50:06:64:d9:5d:21:5e:b6:0a:e4:e6:89:
                    58:34:8a:01:1a:5a:13:9d:86:33:9c:b2:9d:64:3a:
                    65:4e:b1:e9:2d:ec:a0:3e:f7:0c:33:3a:f6:aa:2b:
                    21:14:4a:88:81:0c:b4:2b:be:a8:d1:8d:16:41:f1:
                    9e:ab:c9:fa:d7:ad:6b:ab:9f:5d:5b:ea:67:b2:53:
                    f1:cd:13:c1:5b:c5:9f:eb:d6:26:53:eb:9e:73:eb:
                    a0:19:50:4f:dd:43:d8:46:6d:ad:6a:58:00:00:3a:
                    3d:0f:65:55:75:3d:7e:bc:8d:38:67:ce:de:9f:eb:
                    7e:3b:7e:46:8b:09:c6:1e:42:8e:3e:94:6f:04:fd:
                    1e:76:5a:c9:ab:84:34:9a:b9:6e:a1:a4:81:a9:e3:
                    a6:d6:da:3f:5e:da:06:21:5c:cc:0a:8f:4a:cf:4c:
                    f1:b4:8c:af:95:a3:56:a2:2b:05:d0:0a:39:bd:a0:
                    00:01:48:55:01:00:6a:53:c9:5c:40:ba:0b:4d:0b:
                    0f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E3:9F:D9:5F:BE:17:73:DE:DC:69:C2:72:38:CF:98:E7:CF:54:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85636a31-66ba-36b5-afab-7e4228b33754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3c12:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d8:cb:93:ca:65:71:90:a2:98:27:0d:a9:6d:ae:b6:e0:9a:
         cf:aa:2d:12:36:59:a3:f3:a3:a2:c7:9b:f4:19:7f:1f:c1:b2:
         02:d1:4b:cc:f0:0f:24:27:15:01:30:e2:d6:a0:52:4f:a1:04:
         cb:04:74:b4:e5:dc:01:d4:38:26:56:b6:03:ae:b1:ac:dd:0c:
         ae:15:22:7d:bc:f3:fe:06:6e:fb:6c:22:63:51:55:63:41:5a:
         bf:b8:75:83:b4:22:98:85:98:b8:42:b8:77:ff:e1:c8:08:ff:
         fe:a8:61:5b:b2:3a:ce:4e:4f:ff:4b:91:f3:8f:5d:e5:2d:f6:
         68:e5:a3:45:87:11:83:27:bc:c9:66:5e:a9:49:54:71:3d:32:
         37:80:9f:07:4e:69:f3:0a:c7:dc:15:eb:29:08:a6:41:d8:a9:
         da:8f:24:33:4e:5a:43:9f:ee:94:41:e8:e1:6d:58:fd:dc:59:
         53:5e:07:86:f1:dc:58:69:28:4b:fd:0c:e7:15:90:63:59:c8:
         c3:a7:6b:4b:8d:bd:4a:09:08:de:22:6c:69:31:76:e3:3b:38:
         e6:46:67:73:b3:49:da:9d:0b:a3:bb:ef:af:43:da:c9:02:1c:
         4b:f0:bd:d0:a2:03:ce:ff:df:7e:40:54:2c:c1:8a:7a:a1:32:
         0f:6a:c7:c9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgZz9wDGT8YZ707ygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
OGY0NDgzN2EtODAyNy00OTgzLWFmYjMtNTQ3MjJjYzc3ZTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4z0jYzPEpsb0Hr7qtsG7AjNKticaceoa2l0G
I87nFV1m++7fFPkgyVyGjm6YLtuQx9QU1EhfTWD0lS22V4JQBmTZXSFetgrk5olY
NIoBGloTnYYznLKdZDplTrHpLeygPvcMMzr2qishFEqIgQy0K76o0Y0WQfGeq8n6
161rq59dW+pnslPxzRPBW8Wf69YmU+uec+ugGVBP3UPYRm2talgAADo9D2VVdT1+
vI04Z87en+t+O35GiwnGHkKOPpRvBP0edlrJq4Q0mrluoaSBqeOm1to/XtoGIVzM
Co9Kz0zxtIyvlaNWoisF0Ao5vaAAAUhVAQBqU8lcQLoLTQsPIQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJTjn9lfvhdz3txpwnI4z5jnz1R6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODU2MzZhMzEtNjZiYS0z
NmI1LWFmYWItN2U0MjI4YjMzNzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgA8EgYw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAF9jLk8plcZCimCcNqW2utuCaz6otEjZZo/Ojoseb9Bl/H8GyAtFL
zPAPJCcVATDi1qBST6EEywR0tOXcAdQ4Jla2A66xrN0MrhUifbzz/gZu+2wiY1FV
Y0Fav7h1g7QimIWYuEK4d//hyAj//qhhW7I6zk5P/0uR849d5S32aOWjRYcRgye8
yWZeqUlUcT0yN4CfB05p8wrH3BXrKQimQdip2o8kM05aQ5/ulEHo4W1Y/dxZU14H
hvHcWGkoS/0M5xWQY1nIw6drS429SgkI3iJsaTF24zs45kZnc7NJ2p0Lo7vvr0Pa
yQIcS/C90KIDzv/ffkBULMGKeqEyD2rHyQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:57 2025 by rpki-client