Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2346bf9-0eac-3f43-9237-c3eea2312bc3.roa
File:                     a2346bf9-0eac-3f43-9237-c3eea2312bc3.roa (raw, json)
Hash identifier:          xo63S/rNwTlYUttpkp/csjO5ivDKF+PEucUUYorQ+28=
Subject key identifier:   82:41:ED:A0:47:E3:2D:F2:51:3D:B5:03:74:0E:C3:AE:7C:CC:DC:EE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584905B6ADEB9494E1E3757178F0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2346bf9-0eac-3f43-9237-c3eea2312bc3.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     24319
IP address blocks:        2600:140b:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 12 Mar 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:ad:eb:94:94:e1:e3:75:71:78:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=c996b590-3036-47b3-81d7-95e1a0489759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8b:9c:c6:a8:00:34:ff:ff:d5:a8:30:2d:c3:
                    d3:e4:9c:9b:c6:8d:a3:ab:b7:02:a0:2c:5b:cc:4f:
                    28:82:68:b7:d4:1c:b5:5f:ea:54:c2:05:fe:cd:42:
                    e0:ba:a9:22:46:0e:6f:82:59:7c:e5:df:48:5c:8c:
                    1d:fa:e0:b7:87:f4:16:39:68:f8:23:07:fd:ee:3d:
                    28:5f:db:7c:2d:95:6a:e4:cf:38:21:64:db:d0:2e:
                    cb:78:51:85:d7:a9:91:76:78:52:a3:1f:0f:02:f7:
                    f1:35:ac:ce:33:3d:ad:29:7a:11:b1:e2:46:ca:ec:
                    97:36:66:f1:0f:93:e4:73:ab:06:59:f2:00:62:8c:
                    9b:2a:a7:e1:93:c0:00:6d:60:93:e1:7e:ee:3f:cd:
                    d0:0b:b6:a7:47:63:7a:c4:b0:b3:a2:3b:12:bc:d4:
                    56:84:8a:67:97:37:59:d3:34:f2:53:50:fa:da:ce:
                    d4:cf:3a:4d:6c:9b:bc:9b:44:69:0b:36:34:c1:31:
                    4f:7c:0f:14:12:02:0e:14:38:c0:be:b4:88:78:db:
                    66:8c:4d:b4:70:4c:88:bc:e9:7c:bf:94:5e:d3:6c:
                    91:7c:08:49:1d:5f:45:3d:2d:a1:87:92:6c:02:35:
                    a7:16:c3:81:a9:2d:65:46:1a:24:bd:07:c0:2e:1a:
                    ca:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:41:ED:A0:47:E3:2D:F2:51:3D:B5:03:74:0E:C3:AE:7C:CC:DC:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2346bf9-0eac-3f43-9237-c3eea2312bc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:3f:86:39:1f:42:f1:a7:80:b9:85:41:fd:a9:51:13:38:ca:
         8c:22:87:2e:72:60:a3:76:67:07:30:0e:cf:06:36:b6:0d:00:
         ee:ac:61:79:6f:bd:dc:0d:a4:2b:12:7c:38:cc:29:b5:30:0a:
         42:f7:75:0a:1d:0c:37:87:74:fd:50:04:4c:6f:42:33:88:30:
         9c:ca:76:64:32:65:b0:1e:31:5f:7b:46:b6:94:33:0a:a3:bc:
         7a:68:e1:90:cc:e9:3a:d5:9b:e5:6d:87:79:8f:c2:7f:80:75:
         99:86:55:3f:a7:11:31:6e:1f:c4:5d:c6:a6:9e:05:4a:eb:40:
         f6:d6:62:45:31:09:d4:83:ee:f8:39:41:9a:74:b5:33:52:93:
         2d:6a:f2:fc:ac:df:30:a4:3d:ec:a7:fe:7c:73:07:50:70:1c:
         4d:ac:58:59:af:ad:2f:5d:ba:8e:c1:5d:d4:37:d5:ba:e3:19:
         0f:9e:67:e4:4e:7f:df:d1:69:98:4a:fb:95:d3:37:de:d4:88:
         5d:e9:94:3d:ef:ad:10:de:ec:7e:76:eb:cc:99:f9:6b:03:7e:
         54:92:35:65:78:58:34:a1:6f:6f:84:94:fc:d7:92:86:a4:96:
         97:f3:18:6b:9b:5f:f4:73:0a:87:f5:9b:44:d2:2f:2b:92:26:
         be:c2:e3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:01:52 2025 by rpki-client