Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7e585e0-7f8e-3303-bd06-d9c41c61c420.roa
File:                     c7e585e0-7f8e-3303-bd06-d9c41c61c420.roa (raw, json)
Hash identifier:          EqMGXH4Ey1s+hUkp+EIpkmgAnA2Rjl7DJNW6i7EnkuM=
Subject key identifier:   5D:41:3A:5B:05:02:6B:E0:1A:01:AC:8D:1D:02:BD:14:1E:B1:79:DF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848FD56CCF0B18E9D648EABEF80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7e585e0-7f8e-3303-bd06-d9c41c61c420.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     35994
IP address blocks:        2600:141b:9800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:cc:f0:b1:8e:9d:64:8e:ab:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=32a9b7b8-6aa5-4196-9a27-fb500b1984bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:55:6e:d8:f6:5d:68:9f:1e:ed:14:21:87:47:
                    d4:a3:b6:30:39:24:93:41:3c:e1:b1:55:f0:06:5d:
                    e4:00:c9:56:31:86:9d:f1:6a:c4:13:f2:3c:55:7c:
                    ff:4a:4a:15:2e:d7:7e:e1:6f:5e:a3:56:bf:4e:f4:
                    df:05:74:2b:2e:d6:6a:73:a6:27:e3:10:71:98:53:
                    c7:f6:19:4a:28:f2:9d:17:fb:d2:8d:ce:ac:23:5b:
                    df:08:56:39:29:d0:0c:17:34:aa:aa:fb:f0:2b:c8:
                    c2:5e:e1:20:4d:c2:b2:61:8e:58:41:9b:39:4f:9f:
                    13:92:57:22:60:29:e6:24:59:64:de:22:1b:2f:5f:
                    75:00:1b:6f:0e:37:36:0a:a3:38:d8:2d:5b:a6:f4:
                    c5:a2:96:77:f6:e0:44:c1:70:d8:9a:54:fe:0a:61:
                    38:e7:ea:23:12:7a:54:03:92:e6:b3:e2:7d:aa:f7:
                    3e:8e:62:e8:0d:e8:cd:26:23:19:1d:9b:91:89:22:
                    5b:61:0f:57:95:c5:67:1a:d2:47:75:1d:ab:7a:22:
                    20:9f:31:68:9a:b4:0b:2a:13:76:5a:5a:c0:99:11:
                    95:0e:19:a9:e5:e9:74:d3:76:72:2b:85:b6:a9:d7:
                    f9:73:b9:00:8a:e8:32:a1:00:f9:62:76:da:b0:bf:
                    51:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:41:3A:5B:05:02:6B:E0:1A:01:AC:8D:1D:02:BD:14:1E:B1:79:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7e585e0-7f8e-3303-bd06-d9c41c61c420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141b:9800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:23:90:72:d3:3f:44:a4:3e:b1:a5:6d:9b:fc:8f:53:46:22:
         14:d1:06:0f:14:d9:22:e3:8c:d5:26:4b:a4:1b:ee:55:90:75:
         62:a1:2e:e2:59:e0:01:e5:10:ca:a0:f1:fe:ae:34:02:e0:9b:
         a4:14:8e:4e:06:6e:fd:db:d4:d1:7a:3e:b0:de:6f:e0:00:e3:
         4b:84:62:35:54:b5:45:73:a8:a7:e5:ff:33:ed:58:3c:13:57:
         b4:75:93:f3:ab:69:8f:d6:96:c3:04:94:c4:a6:28:cc:83:d5:
         30:15:5e:46:24:e5:b0:1d:3f:ed:ad:92:99:cf:b7:d4:6c:e8:
         ff:41:35:e9:f2:20:76:00:96:17:d2:da:c1:74:0f:00:a7:f0:
         14:b9:8d:c6:69:ff:b0:c3:a6:b6:9a:56:f4:3e:28:1d:db:a1:
         8e:19:e2:57:3c:61:83:4e:a9:b2:05:8a:c2:b7:62:cd:6d:21:
         59:04:96:07:d5:e2:86:1e:fa:af:7f:b7:c9:fe:68:d2:52:47:
         97:b1:bf:50:3a:5f:cf:27:f1:0b:43:b4:8b:fd:cf:0c:92:73:
         bc:b8:93:0d:b7:8d:9f:46:cd:78:55:1f:76:75:f0:06:3b:04:
         cf:e5:37:d4:b4:51:fe:cd:3f:ef:7c:0f:57:93:3d:3f:e2:47:
         d5:a3:23:a4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj9VszwsY6dZI6r74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MzJhOWI3YjgtNmFhNS00MTk2LTlhMjctZmI1MDBiMTk4NGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVVu2PZdaJ8e7RQhh0fUo7YwOSSTQTzhsVXw
Bl3kAMlWMYad8WrEE/I8VXz/SkoVLtd+4W9eo1a/TvTfBXQrLtZqc6Yn4xBxmFPH
9hlKKPKdF/vSjc6sI1vfCFY5KdAMFzSqqvvwK8jCXuEgTcKyYY5YQZs5T58Tklci
YCnmJFlk3iIbL191ABtvDjc2CqM42C1bpvTFopZ39uBEwXDYmlT+CmE45+ojEnpU
A5Lms+J9qvc+jmLoDejNJiMZHZuRiSJbYQ9XlcVnGtJHdR2reiIgnzFomrQLKhN2
WlrAmRGVDhmp5el003ZyK4W2qdf5c7kAiugyoQD5YnbasL9RZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF1BOlsFAmvgGgGsjR0CvRQesXnfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzdlNTg1ZTAtN2Y4ZS0z
MzAzLWJkMDYtZDljNDFjNjFjNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUG5gA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFojkHLTP0SkPrGlbZv8j1NGIhTRBg8U2SLjjNUmS6Qb7lWQdWKh
LuJZ4AHlEMqg8f6uNALgm6QUjk4Gbv3b1NF6PrDeb+AA40uEYjVUtUVzqKfl/zPt
WDwTV7R1k/OraY/WlsMElMSmKMyD1TAVXkYk5bAdP+2tkpnPt9Rs6P9BNenyIHYA
lhfS2sF0DwCn8BS5jcZp/7DDpraaVvQ+KB3boY4Z4lc8YYNOqbIFisK3Ys1tIVkE
lgfV4oYe+q9/t8n+aNJSR5exv1A6X88n8QtDtIv9zwySc7y4kw23jZ9GzXhVH3Z1
8AY7BM/lN9S0Uf7NP+98D1eTPT/iR9WjI6Q=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:37 2025 by rpki-client