Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eeff587e-4167-3169-9e25-0a2f451eda36.roa
File:                     eeff587e-4167-3169-9e25-0a2f451eda36.roa (raw, json)
Hash identifier:          z8+QWJ6yg6XFQ7nMNHksE6VHWG+cj2f24UASz1e1uXY=
Subject key identifier:   69:4F:1A:EE:7C:6F:DB:5A:9B:E4:E9:35:C9:E6:E6:DC:A0:C4:B9:6D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848A136210F6D1CB4C20E134900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eeff587e-4167-3169-9e25-0a2f451eda36.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        2600:1419:1200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:21:0f:6d:1c:b4:c2:0e:13:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=3d6300f1-40a9-4b87-840f-3e9ceb3c50a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:29:9d:ab:e4:07:ed:cf:69:77:e2:19:f7:
                    ff:93:6b:e0:5a:6b:a2:a5:c6:ec:2e:be:27:7e:85:
                    cf:d2:03:4a:41:5e:a0:73:93:06:c5:ca:6a:e3:85:
                    ee:fc:67:2b:fb:6b:40:49:e9:43:8f:79:4b:be:0a:
                    31:05:be:67:31:b7:65:07:7c:51:37:d9:37:a0:07:
                    93:ff:43:52:d6:48:fb:04:63:e9:c8:73:2b:eb:2e:
                    ca:f1:b1:24:59:16:b4:07:57:72:d9:53:87:8e:5e:
                    c2:07:58:08:d2:fe:32:88:a4:1f:95:f6:12:00:3a:
                    3f:e7:da:23:64:5c:0e:e4:3c:c8:db:62:aa:d8:d5:
                    f4:31:bc:84:57:4a:66:c5:5e:18:d9:0c:a0:53:7c:
                    b7:fe:30:a5:2a:f1:31:7e:b9:c9:07:12:3b:96:33:
                    f8:83:0a:19:d3:70:59:95:54:4e:28:36:d9:b1:33:
                    2f:f7:fa:33:b2:2e:33:b7:04:17:2e:41:0a:87:7e:
                    28:a6:4e:a1:67:ec:49:80:82:dd:fc:27:d5:dc:00:
                    ef:b3:61:ac:1e:1a:5d:eb:25:f8:7d:e3:d2:5f:64:
                    64:e8:7a:cb:16:08:07:ad:22:9d:3a:54:1c:f1:d0:
                    3f:c8:04:06:1e:b7:a0:f1:29:48:4f:2c:ce:db:04:
                    a3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4F:1A:EE:7C:6F:DB:5A:9B:E4:E9:35:C9:E6:E6:DC:A0:C4:B9:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eeff587e-4167-3169-9e25-0a2f451eda36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1419:1200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:8f:82:de:65:c1:ef:ea:7e:cc:64:d8:55:7c:03:87:7b:9d:
         b8:58:61:ab:74:f4:9a:db:d0:47:d9:48:c8:28:7c:a9:4c:d5:
         16:c1:98:26:02:80:69:51:0b:44:82:11:37:99:43:06:ab:7f:
         d3:47:c9:3d:b1:62:86:55:e4:df:7f:a0:b9:e1:4d:ac:4b:3c:
         48:61:42:0f:b7:15:db:5b:5c:fa:c7:53:2b:f0:cb:8e:6a:dc:
         54:e7:aa:45:64:f9:cf:d8:73:5a:5a:51:cf:52:4b:9e:58:4e:
         92:da:2b:16:2e:5a:f8:a9:cf:a9:e3:6f:99:2e:0b:b2:d3:11:
         27:09:cf:d3:d0:70:ea:34:6f:d0:7f:77:2f:26:61:2c:f2:e9:
         26:3e:97:73:da:53:25:e1:ba:44:24:e6:43:3b:81:78:80:77:
         81:c6:21:50:09:1f:77:f5:15:f6:06:74:7d:26:38:b6:b3:b5:
         4e:d4:cc:ab:0b:54:fc:26:41:c1:5f:cd:53:53:ff:55:9e:23:
         37:13:74:2a:9d:0c:38:fd:ea:4e:2a:a5:ca:9f:d2:94:8c:63:
         ff:fa:8c:9d:70:83:73:07:11:d1:c6:d6:a1:96:de:62:90:98:
         3f:bc:8b:e5:3b:69:f4:51:31:4e:47:e9:9c:49:c9:5b:85:58:
         86:42:54:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:56 2025 by rpki-client