Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb2a4735-3104-3f61-b90c-da6ef366517f.roa
File:                     fb2a4735-3104-3f61-b90c-da6ef366517f.roa (raw, json)
Hash identifier:          ZkbBRbtqCkJAPQZl94Cc6KeftZXbwkv9ABqzyqMkgjo=
Subject key identifier:   00:54:BC:87:84:68:1F:13:7B:75:B9:77:6D:54:E0:CB:48:E6:FC:74
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858488DAB656A31DC5A937E17DAC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb2a4735-3104-3f61-b90c-da6ef366517f.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     20940
IP address blocks:        2600:140b:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:65:6a:31:dc:5a:93:7e:17:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=097f277c-6aa5-459d-baa8-b45f03fe5238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:96:34:bc:4f:ef:3b:19:5c:1d:31:ea:c3:37:
                    3e:ae:cb:d2:2e:4c:cd:65:e3:52:2b:9e:52:d3:db:
                    56:f5:06:df:fb:93:d0:40:bb:06:46:cb:cc:98:f3:
                    9d:43:91:74:3c:6c:58:64:bb:b4:30:e6:e5:33:6a:
                    ff:2d:13:3f:4b:14:15:83:76:8d:d1:fd:25:d1:93:
                    ec:25:e6:71:8e:37:9d:a1:91:eb:68:59:09:b1:22:
                    4c:45:2c:60:fd:ad:09:36:00:0f:50:d8:95:48:b0:
                    64:51:a2:b6:f9:51:de:e4:b7:87:df:05:75:a8:1c:
                    f7:2f:ac:ea:b5:2a:d0:ac:ea:43:3b:fd:55:08:90:
                    50:2c:25:f7:2d:b1:c6:0b:da:db:49:d2:52:13:6a:
                    5f:9c:2a:41:22:a7:2b:15:59:10:d7:4b:9c:f0:f1:
                    ca:c5:56:6b:eb:1c:fa:df:e6:67:ad:5c:4c:c5:a7:
                    08:58:64:01:22:b7:f7:ee:5b:af:d0:b7:c6:c4:61:
                    9f:8f:96:60:ae:a1:f5:05:67:88:ee:9b:70:a6:f0:
                    5a:50:45:97:1d:16:11:ba:5a:fe:ed:58:23:37:00:
                    31:24:c7:d1:e4:63:28:a5:b1:cc:eb:32:a4:8c:10:
                    09:3c:97:1b:97:af:20:b3:c9:23:f4:a3:d5:25:46:
                    46:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:54:BC:87:84:68:1F:13:7B:75:B9:77:6D:54:E0:CB:48:E6:FC:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb2a4735-3104-3f61-b90c-da6ef366517f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:03:c5:d0:d9:2d:71:90:16:96:30:35:78:3b:e7:f8:ef:57:
         44:ec:83:44:98:27:b0:37:b1:cd:29:e4:71:62:9f:aa:e1:d9:
         64:b2:ff:72:17:9f:b2:0d:b6:7e:04:2e:02:e6:6d:4d:23:be:
         b7:41:fd:ee:7c:22:8a:50:0e:8e:5a:a1:29:d0:48:e1:ab:83:
         6c:de:06:6c:d6:3b:e7:d4:22:d0:1e:27:63:13:bd:f0:b3:ce:
         6a:96:94:08:08:02:34:a3:d4:ea:6a:17:3c:06:73:34:b3:ff:
         b5:93:aa:1f:42:9a:b9:80:3e:56:96:04:7c:65:f5:3f:72:40:
         59:2b:87:7b:94:44:c9:56:00:4a:0a:30:32:f9:08:40:48:6c:
         18:51:0c:f2:37:2d:be:bb:03:a7:8a:08:2e:54:9e:82:50:2c:
         21:ac:d8:13:4b:ec:01:1d:06:71:81:f4:b6:69:ce:75:2b:a9:
         b5:33:dd:c7:82:26:4c:60:71:d7:45:82:d0:7f:88:12:1d:98:
         14:30:d1:f7:39:9d:71:a7:e3:88:50:2a:84:a1:0e:97:5b:56:
         f9:31:bb:ba:36:42:46:4c:0e:0d:93:81:25:4f:f6:bb:a4:36:
         80:7c:78:86:e8:53:1e:d8:57:2c:94:ff:8d:67:0c:b1:7e:65:
         55:b1:b5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:33 2025 by rpki-client