Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e9332193-8706-3c5f-9bf7-331d33b6fbe6.roa
File:                     e9332193-8706-3c5f-9bf7-331d33b6fbe6.roa (raw, json)
Hash identifier:          9gO6hybEr8OTL/cH8/N2qRxajoLs6X2vjcN8OU2S7BM=
Subject key identifier:   48:B2:E2:A5:4C:33:F0:3A:15:4D:44:66:58:F0:87:12:CB:52:E5:4D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858489FD09DAEC5A04A8CA8BE1524
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e9332193-8706-3c5f-9bf7-331d33b6fbe6.roa
Signing time:             Wed 22 Jan 2025 02:00:39 +0000
ROA not before:           Wed 22 Jan 2025 02:00:39 +0000
ROA not after:            Tue 22 Apr 2025 01:00:39 +0000
asID:                     20940
IP address blocks:        2600:141b:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9f:d0:9d:ae:c5:a0:4a:8c:a8:be:15:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 22 02:00:39 2025 GMT
            Not After : Apr 22 01:00:39 2025 GMT
        Subject: CN=0d57ec12-e192-4344-ab31-343a848bcfe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:63:56:06:48:fc:22:ee:b8:2c:e8:61:1e:8b:
                    ae:c8:86:86:c1:e6:41:46:46:69:bb:5c:53:d0:c0:
                    62:47:d5:98:eb:a2:2a:58:d5:14:bd:e4:7e:6c:2e:
                    23:67:4f:9e:41:ee:b6:f0:14:ea:4b:71:e9:40:3b:
                    0f:6a:ea:e9:f7:6f:b8:89:5d:17:71:0b:da:1e:a6:
                    60:35:18:9b:8b:85:20:b2:e9:03:62:e7:cb:16:ea:
                    2e:c9:f6:69:44:20:ef:1c:e6:ab:b8:cf:7a:4d:26:
                    4e:3e:a9:c3:f6:ed:49:ae:7e:80:3d:6c:1b:90:8d:
                    9c:4e:50:83:57:84:d3:ed:5f:4b:ea:98:c2:9f:d4:
                    ef:80:94:9e:8d:45:78:50:3e:c9:8c:75:8a:94:3f:
                    a1:e2:a6:c4:fd:ee:5a:7b:65:fe:5a:97:9d:31:53:
                    b6:cf:74:98:e3:10:23:53:d2:35:91:f3:02:7a:e7:
                    f5:a9:2d:1c:7c:2d:a6:e2:d1:46:ae:c4:87:be:a2:
                    43:88:3b:2f:23:14:bd:2d:38:5e:08:f6:dd:c5:e5:
                    a8:6e:3d:c2:8e:15:1f:49:90:61:a7:3f:e1:60:3a:
                    58:57:4f:0a:e0:ca:1a:ab:a9:20:19:07:73:3b:8c:
                    50:70:29:9e:f2:e0:15:22:11:dd:9c:03:77:e2:48:
                    15:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B2:E2:A5:4C:33:F0:3A:15:4D:44:66:58:F0:87:12:CB:52:E5:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e9332193-8706-3c5f-9bf7-331d33b6fbe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141b:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c1:ca:4a:65:26:ca:ab:56:de:1f:fd:2e:cd:cc:80:8f:c7:
         06:3d:61:dd:09:6c:3a:7e:04:e8:44:15:1e:3a:a5:d8:60:e1:
         b0:30:c1:12:10:fd:84:55:8e:79:3d:7f:85:33:83:fb:0e:37:
         a7:f7:3f:93:9a:d1:8d:aa:71:f2:f8:06:f6:29:40:c7:fe:8f:
         99:cd:40:56:2d:40:af:26:4b:59:f9:87:27:a1:c7:ec:05:de:
         0d:c4:60:a3:4e:21:cf:9e:01:59:f5:2c:5e:35:e8:b7:7a:fa:
         54:9d:f3:10:b5:da:05:77:e3:53:cc:49:dc:cb:e4:07:c9:7c:
         f3:b7:99:a7:6e:d9:59:46:b3:24:89:26:5c:fa:99:d5:e9:e0:
         ca:91:cf:b0:ee:52:9f:7f:65:6a:02:7e:1d:a2:45:9f:58:b7:
         10:e0:8a:4b:75:13:f6:f2:64:59:e0:58:ab:c1:ca:9f:4f:ef:
         72:2d:17:df:8c:07:6d:8b:c0:eb:5d:3c:41:0a:e5:c5:53:0a:
         1d:8f:c6:01:7e:56:a1:d6:ed:2e:89:18:3f:a6:3c:bf:f4:67:
         8e:ee:57:00:09:46:dc:95:30:89:94:ad:43:24:60:0e:76:7a:
         83:cb:da:b8:c6:74:30:70:99:19:32:ef:55:7a:24:1d:3d:5b:
         83:81:00:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:47 2025 by rpki-client