Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52d02f7-2009-3f58-ba9d-655a78875c86.roa
File:                     e52d02f7-2009-3f58-ba9d-655a78875c86.roa (raw, json)
Hash identifier:          KFApeoscs+lrTaN28Sh1NmTSvtyKKT9ECBS51PBuhK8=
Subject key identifier:   B1:4C:7F:92:C9:DF:FE:25:C8:FA:91:16:03:33:81:C3:9B:9D:B7:8D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848A9966443AB9834ABABA641A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52d02f7-2009-3f58-ba9d-655a78875c86.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        2600:1488:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:64:43:ab:98:34:ab:ab:a6:41:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=2e54cc6c-b8de-494b-80db-08fc445958e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ba:94:08:6e:1f:97:ac:9d:47:dc:0e:2a:6f:
                    89:fc:2d:45:c6:2e:bb:7a:f5:c2:ca:9d:3e:78:2c:
                    99:cd:76:56:a8:a9:85:f9:c1:ed:6b:c3:83:88:a1:
                    42:34:3d:59:da:63:fb:7f:47:2d:38:b0:41:58:3f:
                    21:bd:52:2a:ab:76:8b:7f:75:a8:15:cf:09:d7:c4:
                    cc:59:9f:88:e8:86:93:b4:3f:84:10:83:a6:35:7c:
                    a9:b4:b8:05:35:2b:49:01:b2:90:91:8b:61:1f:8c:
                    ab:c0:6f:2a:7e:9b:96:01:97:30:7c:5b:32:da:2f:
                    da:54:3e:a8:21:48:e0:1f:4c:41:cf:20:ad:54:c4:
                    42:fd:1a:14:23:62:f3:83:14:4f:36:8d:ca:68:3e:
                    16:b9:a5:98:b8:1c:27:e2:66:bb:cb:88:50:26:5a:
                    5b:b9:7f:45:8e:b6:64:90:62:c9:1c:20:fd:e5:01:
                    6c:95:70:34:44:8d:ce:6d:30:8c:3c:f0:52:6d:37:
                    a0:7a:79:66:4b:80:c6:1b:0d:01:55:0f:3e:c9:29:
                    6b:f6:5a:82:6a:c7:f5:ba:1e:de:34:95:50:e3:b8:
                    ee:64:d7:7e:53:7f:78:59:47:65:d4:2e:3a:41:98:
                    dd:4d:bb:d8:44:ca:ba:4a:90:1e:2a:c8:1d:4f:89:
                    f8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4C:7F:92:C9:DF:FE:25:C8:FA:91:16:03:33:81:C3:9B:9D:B7:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52d02f7-2009-3f58-ba9d-655a78875c86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3f:9b:b4:9b:a9:a9:e2:96:c0:56:1a:a1:2d:c2:26:d0:70:
         a0:7a:66:0b:d7:81:18:dd:fb:7c:de:68:fd:64:60:7a:93:28:
         0e:4c:e0:f1:34:cd:79:a4:41:82:98:34:e9:01:20:ef:01:a5:
         4e:29:6f:43:b9:6c:90:1c:71:6d:e9:52:6e:18:aa:5f:e9:0c:
         2e:d5:34:19:d4:64:bd:f3:90:c9:d6:23:8e:63:db:9c:8f:54:
         e0:fb:a9:f2:f3:f3:ac:90:e3:51:f1:81:e5:ad:d8:7b:53:00:
         96:1e:3d:d5:47:0c:bf:93:40:a8:3a:08:c6:f1:cf:9c:69:39:
         e7:2a:8f:82:57:98:95:bc:27:f6:ab:96:30:21:f4:6a:d1:8f:
         57:6c:d1:04:7b:ae:b0:bb:a2:07:a6:53:ba:c7:24:38:81:27:
         8f:4a:cb:00:dc:84:e2:5e:74:79:c9:3f:34:72:e9:bd:41:56:
         69:f8:a9:50:db:37:8a:61:5f:e4:1c:b8:98:ab:aa:ce:c3:af:
         ed:1a:e4:2d:f9:c2:67:02:90:27:89:66:cb:ab:79:0f:09:7f:
         d1:55:11:8a:29:7f:57:38:8f:76:05:e3:30:ab:24:23:3e:1c:
         43:d0:3a:07:05:c4:d7:14:83:b2:9f:a5:54:7a:66:5b:ab:33:
         f7:e9:0a:7c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiplmRDq5g0q6umQaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MmU1NGNjNmMtYjhkZS00OTRiLTgwZGItMDhmYzQ0NTk1OGUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7qUCG4fl6ydR9wOKm+J/C1Fxi67evXCyp0+
eCyZzXZWqKmF+cHta8ODiKFCND1Z2mP7f0ctOLBBWD8hvVIqq3aLf3WoFc8J18TM
WZ+I6IaTtD+EEIOmNXyptLgFNStJAbKQkYthH4yrwG8qfpuWAZcwfFsy2i/aVD6o
IUjgH0xBzyCtVMRC/RoUI2LzgxRPNo3KaD4WuaWYuBwn4ma7y4hQJlpbuX9FjrZk
kGLJHCD95QFslXA0RI3ObTCMPPBSbTegenlmS4DGGw0BVQ8+ySlr9lqCasf1uh7e
NJVQ47juZNd+U394WUdl1C46QZjdTbvYRMq6SpAeKsgdT4n4QQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLFMf5LJ3/4lyPqRFgMzgcObnbeNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTUyZDAyZjctMjAwOS0z
ZjU4LWJhOWQtNjU1YTc4ODc1Yzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiGAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABQ/m7SbqanilsBWGqEtwibQcKB6ZgvXgRjd+3zeaP1kYHqTKA5M
4PE0zXmkQYKYNOkBIO8BpU4pb0O5bJAccW3pUm4Yql/pDC7VNBnUZL3zkMnWI45j
25yPVOD7qfLz86yQ41HxgeWt2HtTAJYePdVHDL+TQKg6CMbxz5xpOecqj4JXmJW8
J/arljAh9GrRj1ds0QR7rrC7ogemU7rHJDiBJ49KywDchOJedHnJPzRy6b1BVmn4
qVDbN4phX+QcuJirqs7Dr+0a5C35wmcCkCeJZsureQ8Jf9FVEYopf1c4j3YF4zCr
JCM+HEPQOgcFxNcUg7KfpVR6ZlurM/fpCnw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:30 2025 by rpki-client