Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e00a484-04e3-3ff9-860d-efe1312f5bb8.roa
File:                     9e00a484-04e3-3ff9-860d-efe1312f5bb8.roa (raw, json)
Hash identifier:          kWSpc7PKTNtn1d36LXmAy6XsjPsqgWMXaasvQYpU+j0=
Subject key identifier:   C2:58:AF:BE:9D:77:5B:42:3C:12:BD:8D:21:48:02:B5:2D:1D:C0:C6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858487FB5DEF40FE2FC580969A580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e00a484-04e3-3ff9-860d-efe1312f5bb8.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     32787
IP address blocks:        2606:6c00:205::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:de:f4:0f:e2:fc:58:09:69:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=83ff0f1d-9fb1-403f-9316-1f5fb5b6a01a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ce:9e:f5:83:3b:73:c4:0f:8c:af:5e:89:dc:
                    68:db:3e:2e:c2:2a:a4:95:68:71:05:ff:e4:54:5f:
                    66:4c:7d:d2:f2:23:e3:a1:3a:e6:d0:49:4a:fc:74:
                    83:fd:a3:c1:d5:fe:25:44:89:f1:94:21:58:3a:f8:
                    9f:66:aa:9b:47:b8:8c:11:7a:dd:31:19:a7:66:b4:
                    9a:db:ab:48:f0:18:e5:35:54:c8:7b:81:12:81:32:
                    25:82:5c:59:6f:8b:19:db:4c:f1:9f:01:fa:66:1f:
                    e1:43:08:5d:44:49:e4:c7:32:7f:0f:54:ac:96:56:
                    a1:72:73:4b:2f:53:7d:62:9f:5c:ec:12:19:08:b1:
                    9a:07:e4:f3:93:22:94:8c:aa:a7:53:04:ab:a3:3e:
                    d5:a9:ab:7b:5e:dc:02:fa:ff:43:1b:51:16:ba:51:
                    ec:4e:21:96:4b:fa:7f:97:9c:4b:a0:8d:ee:aa:fd:
                    0e:31:1c:0e:b0:81:8e:6e:0d:24:a8:4a:12:0b:3e:
                    3d:c5:1b:8a:5b:de:28:b2:32:31:3c:e3:fd:18:28:
                    d4:da:60:31:2b:78:0b:65:da:f1:e9:60:95:da:01:
                    65:04:0e:ef:4e:4c:7d:95:f9:1a:ce:ec:36:5b:8b:
                    03:7c:bd:a9:8d:9e:4a:4b:5a:80:92:f2:51:ea:8a:
                    7a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:58:AF:BE:9D:77:5B:42:3C:12:BD:8D:21:48:02:B5:2D:1D:C0:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e00a484-04e3-3ff9-860d-efe1312f5bb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6c00:205::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:e7:cc:f6:f0:83:ea:b5:9b:1d:45:80:0f:e4:9d:ec:6f:d6:
         c7:28:41:78:e1:24:e8:b9:02:53:73:fa:97:e0:90:7b:ed:ff:
         d1:8e:82:1b:52:9c:97:ea:a9:18:d1:ac:a6:d4:ee:fb:f4:0b:
         5e:df:a8:a3:e4:d7:dd:be:60:60:07:89:c5:87:b9:68:7a:66:
         cb:97:94:38:34:5d:da:38:06:35:6b:71:36:03:b4:89:61:57:
         93:4f:ef:6a:e7:83:ad:6c:f7:f0:e6:99:97:f4:1c:56:78:a6:
         72:d9:3b:9e:77:19:a6:ea:0b:1d:09:c4:1e:dc:a7:c7:52:0c:
         6b:3a:99:0f:d8:e7:63:34:66:21:dc:88:22:ef:9e:a2:1b:ed:
         47:c7:6f:43:6b:e5:0e:6d:aa:1f:3b:33:b5:fe:ec:eb:5f:15:
         3f:be:42:15:4f:0f:7f:71:7e:e1:79:c1:cd:87:56:f1:8d:a3:
         61:1c:ee:4b:af:0d:c2:2d:6a:99:d2:9c:ed:8c:d2:46:3b:56:
         36:53:9f:89:2a:f5:0e:b4:54:31:b6:89:7d:54:96:0a:ea:c4:
         fb:9f:41:73:1f:e0:d5:4f:69:bf:df:55:5a:05:4f:8b:32:71:
         c8:a9:75:b2:46:19:ea:6e:24:28:e4:57:a0:60:d5:a9:09:11:
         fa:73:8a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:49 2025 by rpki-client