Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c2a253-4770-31df-9136-8ea78e1da8d6.roa
File:                     d5c2a253-4770-31df-9136-8ea78e1da8d6.roa (raw, json)
Hash identifier:          j1uJu7uY5kfeFWfbw3rdkVKdcEllEj/abfi5xGZQ5Bo=
Subject key identifier:   D7:33:1F:CD:AD:EA:92:E6:31:B3:06:B4:B6:E6:10:A8:1F:D9:40:2A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858480EA50BCF5392424495735580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c2a253-4770-31df-9136-8ea78e1da8d6.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        2606:6c00:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:0b:cf:53:92:42:44:95:73:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=0c118de2-ba0e-461d-ae02-e887486c6b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dd:c5:cc:d6:02:84:59:8a:8b:e0:c1:a3:5d:
                    8f:19:93:64:99:c3:0b:62:43:1d:43:e2:56:61:72:
                    e8:b3:be:cc:30:4c:bc:87:c2:37:36:a6:72:d7:49:
                    ac:c4:af:13:65:71:3d:62:4b:13:d0:42:db:11:4f:
                    c5:41:e5:aa:5e:49:e1:3b:d7:19:a2:e9:4e:d3:89:
                    d4:a1:cc:7b:a7:38:2f:49:51:54:07:83:d0:69:dd:
                    7c:7a:70:38:e6:39:96:ff:05:cd:93:ce:84:6d:b7:
                    38:8f:d9:e6:93:a9:d9:75:0e:5a:ac:46:91:91:db:
                    3d:77:c1:c5:d0:e1:f4:c6:70:6e:47:ed:4d:50:8a:
                    bb:d4:73:73:a5:9c:0a:e9:91:6f:b2:78:f3:77:e1:
                    b4:81:35:74:0c:5e:d6:91:fc:c3:2b:75:80:27:29:
                    df:52:01:d8:c3:9e:07:1c:9b:8a:7a:f3:42:a1:e9:
                    a8:d1:bb:e2:52:9e:f3:cf:df:76:7b:05:d8:2e:fd:
                    34:ed:43:35:c3:d0:69:c4:ef:da:5c:a6:71:c7:c6:
                    60:75:4e:b7:ec:d2:fa:f2:b9:93:3e:a2:cf:95:53:
                    9f:0c:13:97:b3:15:dc:96:7e:df:9e:4d:89:d6:d1:
                    f5:7e:cb:85:f4:f5:89:2f:e6:8e:26:00:74:04:80:
                    6c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:33:1F:CD:AD:EA:92:E6:31:B3:06:B4:B6:E6:10:A8:1F:D9:40:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c2a253-4770-31df-9136-8ea78e1da8d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6c00:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:0e:86:ae:42:e9:e1:74:7d:16:a4:19:75:0d:cf:bc:ca:b9:
         74:e0:1d:83:c8:cc:42:ed:24:1c:12:73:0c:b3:80:09:15:f5:
         0c:87:e2:af:5c:7e:ad:79:bb:ef:59:12:32:05:8f:2b:e6:bd:
         41:e7:4a:39:80:d5:b1:fb:54:c6:bc:b3:5b:1a:37:31:b8:14:
         85:45:6c:66:ad:5b:82:18:6a:c3:7a:05:97:60:d2:74:8c:c7:
         a9:13:38:56:bb:5e:db:b5:97:66:5e:cf:0c:48:67:1d:97:75:
         26:e2:f3:0e:8b:2d:7e:52:05:6b:47:f7:fb:8f:fc:92:cd:cd:
         34:b9:19:99:65:8b:2e:bd:7e:7b:cf:d1:11:e0:2a:cb:f2:d3:
         e1:3c:b2:7c:a4:69:a4:11:2f:39:26:f7:99:8b:0d:c9:c2:f5:
         9b:67:53:40:e3:80:7e:aa:98:51:8c:bc:de:7a:d4:21:7d:fe:
         0c:81:c2:af:34:e0:8d:c4:6c:e4:1e:7b:40:2c:ca:98:14:d9:
         69:ba:bb:51:9b:1d:b2:ff:60:82:04:36:ac:06:c8:cc:ab:9b:
         92:1c:4f:73:d5:97:9d:76:84:e5:5b:fb:ae:76:85:a6:a6:b6:
         13:98:c6:67:85:1d:62:25:51:85:16:2e:9e:cc:25:2f:a6:68:
         ea:55:fd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:15 2025 by rpki-client