Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae6fb8a6-f755-3ed8-9ff3-c615ca3ca4e5.roa
File:                     ae6fb8a6-f755-3ed8-9ff3-c615ca3ca4e5.roa (raw, json)
Hash identifier:          it0/OaXO1kv27OBbX6k318WrpV33Eb6XxgBAD58BDm4=
Subject key identifier:   C9:4A:C1:9C:5A:8B:09:8E:59:B5:3D:07:92:76:48:EF:B6:8D:A0:43
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849D85F9CE3B88D01D64D853300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae6fb8a6-f755-3ed8-9ff3-c615ca3ca4e5.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     63949
IP address blocks:        2600:3c12:800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:9c:e3:b8:8d:01:d6:4d:85:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=db8980df-7983-40c7-8bae-1413285cc9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bd:a1:e5:8e:08:79:0b:54:8f:4f:d4:e1:8c:
                    71:b4:1a:76:6f:56:6d:d9:25:ac:97:bf:61:8f:ab:
                    f0:30:e7:5d:81:17:a7:59:9a:ed:e0:8f:f3:97:45:
                    5d:a7:0a:8c:cc:5a:4d:01:94:7b:2b:27:76:9e:55:
                    42:4a:30:7d:6a:61:1c:49:d1:88:b0:36:3e:35:99:
                    f2:37:46:04:dd:30:41:bb:90:65:0d:e3:37:84:b8:
                    66:9f:f1:3e:c5:4d:11:84:a1:a0:e3:3c:17:4a:40:
                    59:b9:78:90:67:95:9c:8a:76:f9:04:70:f7:92:d7:
                    8e:55:28:6f:55:3b:92:ff:c6:4d:9b:68:0b:24:a0:
                    b9:01:05:a8:8b:b1:30:dd:6a:fb:12:38:c8:ef:e7:
                    f4:73:13:df:d4:14:da:8c:2c:da:33:d2:6a:f8:9c:
                    f8:4e:3d:f5:17:cf:b2:68:96:1e:82:bd:be:57:48:
                    da:c7:be:34:a5:3b:da:11:4b:0c:09:9c:0e:9f:ae:
                    b3:cb:c6:52:2c:97:57:c7:e1:fb:65:06:53:c5:8d:
                    7b:52:f0:4c:fd:17:dc:ed:91:47:2a:c2:4d:73:88:
                    5e:56:71:9c:b6:28:dc:c4:d7:5a:44:60:93:13:c5:
                    d5:a0:19:c5:cd:6f:17:47:51:29:50:61:30:34:7c:
                    ff:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4A:C1:9C:5A:8B:09:8E:59:B5:3D:07:92:76:48:EF:B6:8D:A0:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae6fb8a6-f755-3ed8-9ff3-c615ca3ca4e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3c12:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:f9:56:06:8d:c1:c3:16:67:05:8c:9a:f9:a1:d1:ec:86:5e:
         09:2f:b2:9a:0c:6d:c1:17:d2:4b:5a:2f:75:4b:25:7c:99:38:
         82:a2:67:d7:a4:86:c2:4e:87:00:87:d6:1b:f8:47:0f:3f:67:
         1a:ed:30:c5:cb:73:b1:68:2b:37:cd:c2:e8:8d:6f:f0:c7:2f:
         5e:5f:9d:55:b0:2a:93:ad:a6:20:f0:12:53:08:7b:6f:5f:a3:
         34:c4:50:fe:25:79:76:71:d9:b4:88:64:01:16:d2:33:95:b7:
         b9:44:8c:4c:33:a1:ac:84:da:1c:d0:f2:7f:ec:d6:19:cc:ca:
         72:5e:c4:00:4d:42:0f:74:3c:c9:9d:c4:24:a5:6b:24:e2:0a:
         ba:d1:00:7e:0d:bc:8d:09:88:ee:6b:01:bc:5c:69:ec:0e:e1:
         eb:c4:02:23:f9:ce:10:b3:cb:17:e1:f7:24:41:25:20:6d:48:
         9d:f2:a5:5d:a0:32:e5:3b:7d:7c:fe:16:d8:80:60:aa:20:54:
         43:34:f6:fd:4e:55:aa:b1:7c:97:3a:25:8e:6b:d2:11:71:4a:
         d0:33:82:d3:b9:92:94:a9:73:ae:b3:05:0d:b9:74:ad:62:ea:
         23:4e:19:4b:37:e1:cf:34:78:fd:bf:36:cb:2f:31:50:27:14:
         da:9c:c5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:45:01 2025 by rpki-client