Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/227f9b06-d20a-3061-9141-0ea7710a325c.roa
File:                     227f9b06-d20a-3061-9141-0ea7710a325c.roa (raw, json)
Hash identifier:          UBlpQY6rUfsae9KM0bmc0WvIrKJq+8t8h3mj4FVvdfQ=
Subject key identifier:   40:83:DA:96:95:FE:CA:85:1C:1D:3A:20:B1:15:49:8E:98:3F:06:CF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858498B99D4509A3572665E2CFE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/227f9b06-d20a-3061-9141-0ea7710a325c.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     35994
IP address blocks:        2600:1409:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:d4:50:9a:35:72:66:5e:2c:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=46a887b7-88e9-4f53-a6f3-45bed765770d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c9:3f:c3:d9:e4:70:3e:b1:5f:c8:79:f3:11:
                    2a:cb:f2:34:71:ad:ab:e1:c6:11:7e:e5:fd:89:eb:
                    ae:fe:ca:4d:0e:bb:42:40:d2:92:5d:9e:4f:c9:66:
                    70:06:f6:35:c3:0d:da:0f:04:76:89:e7:8a:f5:71:
                    b5:16:22:d5:14:3f:56:0c:f6:8e:cc:a2:18:42:9a:
                    cc:10:e3:c9:e3:8e:41:36:a8:ff:87:e5:29:cf:22:
                    5b:20:a3:b6:2f:8b:06:68:f1:b2:98:a0:50:b4:78:
                    b1:5e:0d:f1:27:29:2b:8d:95:7d:12:8d:50:15:41:
                    34:ed:ea:54:6d:5d:a9:29:50:70:fb:6a:16:8a:1b:
                    90:77:91:38:83:ca:2d:ed:bd:0e:02:8d:81:4a:b1:
                    e6:97:35:48:65:b3:bd:68:20:e8:61:0c:58:ad:a6:
                    83:11:93:c6:31:b6:4b:cb:ce:a0:4d:7a:24:f2:6d:
                    60:92:4c:97:17:22:3b:85:f8:cc:44:a6:0d:42:2c:
                    aa:1e:a2:5e:2f:49:b3:cd:dd:cc:15:ed:b2:f4:11:
                    45:61:63:5d:ba:c4:ef:54:e2:9f:1f:30:ff:83:ee:
                    d0:79:c9:ff:d6:f8:6f:fc:26:87:c0:ab:5d:56:7e:
                    a9:43:b7:3d:c9:01:fb:b0:d5:c0:dd:bc:51:06:06:
                    31:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:83:DA:96:95:FE:CA:85:1C:1D:3A:20:B1:15:49:8E:98:3F:06:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/227f9b06-d20a-3061-9141-0ea7710a325c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1409:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:aa:d7:c3:97:21:1e:fe:1b:46:53:6d:2b:01:7d:6b:0d:a2:
         36:70:c6:60:2b:27:18:ee:6c:18:13:de:79:6a:f0:19:b9:ad:
         fe:41:fe:2a:cf:bd:a5:e8:ee:8e:1f:80:ec:1e:34:d2:ce:3f:
         d6:bc:35:bb:8d:d1:2a:f9:5e:f8:83:a2:0f:3d:70:df:3f:55:
         67:13:04:97:bb:e8:a4:8a:34:ab:5c:f4:4d:93:fe:95:69:a1:
         5e:a0:f7:b4:c1:70:c8:79:b4:28:4c:d5:03:ef:a0:a8:d0:47:
         70:cc:56:75:21:30:43:a6:09:7c:df:07:64:4c:07:be:8b:24:
         50:ec:bc:2e:b2:f1:c9:1e:ba:96:49:92:c3:1a:bc:38:a9:82:
         57:02:9a:f8:be:70:3f:67:9d:3f:4e:f1:40:ca:4b:f9:54:2a:
         45:78:28:06:c3:49:45:5c:6a:d3:e4:30:64:ac:f2:c7:1e:41:
         00:43:04:d8:ff:bf:7c:1a:3d:e9:47:94:11:3b:09:d4:17:b0:
         8b:12:0a:31:42:96:0b:e4:b4:53:8d:03:98:14:86:70:17:c4:
         9c:ce:e0:49:e4:8d:7f:fe:2a:65:97:79:d6:34:2f:3b:29:cc:
         03:d8:dc:7f:ba:f1:f8:85:32:bb:1f:78:60:77:fd:1e:e0:59:
         a5:76:50:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:38:28 2025 by rpki-client