Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fef69d3-39c1-37d9-9093-1caf6b39252b.roa
File:                     9fef69d3-39c1-37d9-9093-1caf6b39252b.roa (raw, json)
Hash identifier:          tatBFzpqvnSazUIxx8Vibj3KLerMtkhTC2ZPrr5296E=
Subject key identifier:   BE:4C:DD:82:A7:8C:13:6D:61:59:5E:C6:91:86:56:7C:F1:2F:00:8D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848A13626117CF65F9EE1CEA4C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fef69d3-39c1-37d9-9093-1caf6b39252b.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        2600:140b:3200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:26:11:7c:f6:5f:9e:e1:ce:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=d8fa6dbe-4cc1-43dc-96c1-386d0884f6a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:25:38:1b:d9:46:2c:3f:1e:c5:eb:62:06:18:
                    5f:a8:7b:40:05:3e:68:4d:f4:91:01:77:1d:87:e2:
                    02:19:fb:93:40:86:d3:c1:1d:aa:ff:d1:c7:f4:27:
                    71:85:63:e1:93:fb:8d:e6:8d:b6:15:83:1e:fb:31:
                    c5:bb:c3:29:ab:e6:a4:19:9d:a1:ea:91:f5:57:c6:
                    c7:fd:57:a8:e1:70:85:b9:c3:3a:c7:c6:29:7b:90:
                    82:af:aa:a8:17:e5:14:2f:b7:c6:13:29:cc:ff:41:
                    ba:48:be:b6:a0:90:0c:f2:06:e0:50:20:e7:f0:51:
                    d0:4a:68:c0:3f:22:35:77:11:4d:9f:eb:12:64:bc:
                    54:6d:37:88:ee:eb:7a:f8:55:90:da:b5:ab:0a:ec:
                    6c:86:6a:2b:a1:e3:88:4d:d1:60:e8:de:1a:36:11:
                    4a:5a:6c:cd:aa:42:23:95:b2:41:27:bf:07:68:69:
                    2d:7e:fd:2c:92:91:bf:08:b5:c2:6b:4d:13:d6:ab:
                    43:c4:5b:e3:25:8a:e7:4b:83:0a:a5:77:63:73:be:
                    69:1d:6e:a1:66:f9:4b:4d:62:ec:48:4c:75:0a:c1:
                    8f:f9:5f:ca:42:90:b8:d8:bb:1e:29:f7:5d:4e:6a:
                    6b:03:5a:66:96:0c:b4:35:67:07:e5:14:c6:ab:89:
                    d4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4C:DD:82:A7:8C:13:6D:61:59:5E:C6:91:86:56:7C:F1:2F:00:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fef69d3-39c1-37d9-9093-1caf6b39252b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:3200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:f2:97:76:11:81:d7:b2:a5:42:54:5a:99:7c:c1:6a:cf:04:
         ae:7e:b7:14:f3:5b:7c:76:70:e0:4a:cb:92:37:6a:4f:4a:7d:
         36:7b:51:72:5d:66:ee:be:b0:93:dc:f5:81:69:19:13:80:7e:
         e3:f5:12:02:1f:c8:f7:13:37:a4:2b:78:af:68:5d:e2:1c:a5:
         a0:4d:0d:d1:27:ff:09:2b:10:9a:a3:7c:e9:1f:79:49:29:58:
         10:0f:17:9b:6b:9c:23:06:12:1d:b8:36:1c:f6:28:7a:97:50:
         12:7d:a7:49:62:3c:d9:d7:fb:95:6c:57:7f:17:d1:10:45:76:
         96:c0:07:59:a0:00:90:24:54:b8:52:df:45:5f:78:c7:ce:b7:
         87:be:8a:1c:5d:63:94:3d:26:c5:10:78:96:a6:a0:73:97:11:
         56:48:ab:fc:dd:7f:83:30:f8:91:30:7e:d3:52:6c:e9:7f:ff:
         63:80:46:6b:35:67:b2:d6:1f:00:08:36:38:65:79:48:bf:46:
         60:12:47:f7:5b:26:7b:c2:cd:19:13:30:b1:70:b9:7a:48:19:
         55:06:85:f8:ba:34:bd:c2:da:81:66:a3:03:2d:d6:47:00:80:
         ef:21:cf:9a:da:21:35:a0:4d:04:6b:5a:ca:7f:3e:be:4f:71:
         99:59:15:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:24 2025 by rpki-client