Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe3a1ba1-a15c-3810-a30d-d1afa973f054.roa
File:                     fe3a1ba1-a15c-3810-a30d-d1afa973f054.roa (raw, json)
Hash identifier:          CzFFJ4BGwdeMQVqRwp/cqY7ZEkF9DniFHWsM7Ls0klM=
Subject key identifier:   03:B5:18:1C:8F:A3:0A:DE:09:4E:0A:15:F0:E4:68:1D:EF:E3:E3:1C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858488DAB63C3EA593BE9F6017400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe3a1ba1-a15c-3810-a30d-d1afa973f054.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     20940
IP address blocks:        2600:1405:2800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:63:c3:ea:59:3b:e9:f6:01:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=8334cde6-6943-4a58-bc42-e7c8ae1d94ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4d:39:12:1e:f8:43:79:d7:eb:ca:91:3e:77:
                    55:54:ac:a0:75:8b:2d:b0:7e:df:d9:85:dc:4c:38:
                    59:6f:29:d2:8f:32:e7:7a:1c:42:3e:b3:6a:cf:bf:
                    c0:98:cc:62:80:c3:a6:2d:65:5b:78:ed:ef:9c:4f:
                    a1:10:f1:ac:88:14:0e:0f:9e:6f:ac:0e:f9:14:9c:
                    e4:1c:87:36:41:25:fb:0d:be:be:4c:98:e2:1d:64:
                    9d:50:60:af:f3:5f:86:64:23:1e:38:9f:c5:04:98:
                    ab:0b:96:57:25:1c:de:c6:8d:41:96:17:8f:e2:2a:
                    e2:be:b9:8a:01:d6:44:8b:b6:c5:01:73:9d:46:4e:
                    78:ef:54:c1:6b:3f:ec:ec:9c:93:72:6f:78:ea:9a:
                    28:9a:18:48:03:7f:69:3f:da:79:ce:b1:3f:b0:a1:
                    7e:df:8a:78:40:72:50:2f:58:d0:e5:91:b6:aa:4e:
                    26:22:12:4d:e8:7a:74:d8:77:56:75:09:c4:b5:d1:
                    5c:ba:1d:d1:38:9f:18:62:6f:e3:c2:90:cb:33:84:
                    7c:8c:b3:21:29:8a:44:ea:8f:90:6b:6f:e9:29:81:
                    be:85:e2:f7:71:ee:7b:82:28:2a:6f:56:8a:ee:ba:
                    55:27:88:1a:27:7b:f3:89:43:2d:3c:14:82:a6:9d:
                    79:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B5:18:1C:8F:A3:0A:DE:09:4E:0A:15:F0:E4:68:1D:EF:E3:E3:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe3a1ba1-a15c-3810-a30d-d1afa973f054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1405:2800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:fc:00:c9:6f:5f:f9:03:60:b6:ea:9e:6b:ab:5f:d4:fb:ac:
         89:d8:e9:9b:e2:72:5c:32:ab:ea:bc:04:1e:94:1c:39:52:50:
         24:37:9d:3c:27:d9:bc:62:b7:17:61:53:fd:1f:d3:a8:ca:aa:
         f3:c9:b6:b3:93:3d:0d:2e:c6:f4:c3:3f:f7:5e:73:9b:45:97:
         cd:16:1c:86:6d:dc:23:0f:54:b9:73:84:08:eb:dd:42:71:c1:
         8b:dc:25:f6:2a:c3:06:ac:10:ee:66:67:83:c5:cd:6a:d0:e7:
         0c:83:63:d1:5c:3c:db:f9:c9:67:d3:da:7a:99:b6:8b:5d:66:
         c5:3c:cc:d9:8f:bd:bf:0e:92:f1:da:76:ae:87:61:3a:b2:a9:
         6b:83:07:2e:59:ec:84:79:6a:e0:e9:77:a3:ef:07:58:84:d1:
         02:9f:a0:c8:ec:90:3b:06:be:4e:7d:1a:58:88:56:cf:13:15:
         6f:64:e1:d2:be:97:c3:ae:e5:cf:9a:91:95:12:4a:85:3d:9c:
         87:9e:b2:be:57:74:63:cd:4e:eb:a0:34:bc:dc:39:b8:92:e6:
         a3:8c:7f:88:87:cf:17:c4:54:c3:d1:7f:96:a6:8c:aa:24:96:
         5e:1d:05:15:91:bb:1f:2c:5d:d1:0b:e2:97:2d:a6:62:1e:c0:
         b0:79:19:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:10:00 2025 by rpki-client