Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb8b3774-fe5a-33d0-9fd5-09cfd47884c5.roa
File:                     fb8b3774-fe5a-33d0-9fd5-09cfd47884c5.roa (raw, json)
Hash identifier:          Y24nILvGPrnie2HawsbuqEicao0g2ecKZ8Z9qzvxFaQ=
Subject key identifier:   0C:CC:BB:82:7A:BE:E5:D7:7A:96:2E:EA:35:25:13:FA:8C:B4:04:CA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848AC60D9571C28A2F92512B400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb8b3774-fe5a-33d0-9fd5-09cfd47884c5.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     24319
IP address blocks:        2600:140b:6800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:d9:57:1c:28:a2:f9:25:12:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=63330972-7b69-4328-8b47-cdac9a4cc484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:85:d2:c9:2e:aa:82:8d:e9:6d:05:e7:b7:ab:
                    21:0d:d3:52:36:05:44:4a:29:b4:82:29:88:b7:c1:
                    91:8f:d3:68:65:90:b3:ac:73:55:07:6c:d5:29:cc:
                    8b:44:14:6c:3c:5e:84:73:ab:c8:dd:bc:d0:86:39:
                    7f:1b:77:2f:b8:76:2c:3d:1b:fd:fd:17:db:ab:9a:
                    44:04:f7:2a:d7:76:ca:35:f6:1b:00:58:1a:de:a6:
                    9c:cc:12:32:55:46:07:1c:e2:89:47:36:2a:3c:57:
                    19:92:59:a9:d6:89:01:3c:a7:93:47:18:15:48:07:
                    67:c1:ea:32:b1:42:fa:d2:8d:6f:46:ab:93:f4:04:
                    78:b1:05:5f:1f:a1:79:c0:d7:c7:86:ea:9e:40:81:
                    0c:1b:d2:9c:1a:a8:aa:0e:95:a4:cc:6c:ae:82:9a:
                    bd:95:e5:a5:ec:1e:d0:2d:32:3a:e1:8f:6e:01:90:
                    d8:99:44:64:fa:e6:e9:f2:83:73:34:1d:cb:a2:02:
                    e6:42:d0:e5:e5:99:76:a3:66:69:ca:eb:c0:88:1c:
                    44:28:41:1f:a5:08:0f:52:2a:20:97:f1:9e:8b:ea:
                    a5:ff:97:c8:97:bf:76:9e:79:28:47:39:3a:9f:4a:
                    de:12:d3:e3:71:77:70:cf:76:15:47:92:16:5f:af:
                    67:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CC:BB:82:7A:BE:E5:D7:7A:96:2E:EA:35:25:13:FA:8C:B4:04:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb8b3774-fe5a-33d0-9fd5-09cfd47884c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:6800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d2:75:45:09:81:7f:85:52:e0:ba:34:28:65:a5:a6:9e:96:
         b8:c3:83:cd:86:ee:6d:68:a8:e6:0d:db:65:c5:da:07:63:c1:
         36:7c:b8:2e:b5:ec:fb:21:12:37:2b:b6:bd:64:76:5f:e4:7b:
         9b:02:08:8c:54:82:38:7a:23:76:76:46:de:56:14:f2:2b:5b:
         f0:32:ba:63:9b:8a:cb:f3:5c:3c:65:38:d7:0f:ec:68:be:e8:
         ad:bc:94:aa:e1:7e:6c:2c:c6:c6:c8:38:87:bf:8f:e5:1c:57:
         f7:35:c1:62:47:6b:42:a7:90:2d:e2:54:2a:aa:77:99:60:6f:
         e3:65:ee:a6:2b:34:bb:11:3f:45:cf:66:fe:d4:a5:a5:43:e2:
         c0:12:8c:cc:81:e1:f5:3b:1a:e8:ec:c7:f7:b0:8b:61:e4:00:
         10:4b:20:f1:db:10:9a:71:5d:53:55:36:75:f5:f8:81:61:8b:
         4c:66:16:3d:d2:12:2d:28:f8:49:bb:76:18:0f:bd:22:b8:db:
         70:c9:13:23:8f:6d:a8:ad:29:e9:dd:0d:99:36:9f:c1:61:0c:
         01:01:a3:ec:a8:33:9d:c1:74:20:e4:ba:e4:3c:45:bc:d5:aa:
         e9:6d:c4:c9:b8:22:39:2a:92:8d:3a:31:58:54:f9:a4:ab:7a:
         5f:5c:03:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:46 2025 by rpki-client