Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/331027c3-82c5-320b-8687-293996b4d46d.roa
File:                     331027c3-82c5-320b-8687-293996b4d46d.roa (raw, json)
Hash identifier:          YOiO4PehXESas9kI3atzw5WcZMiMfy0QHmfB9izrnkQ=
Subject key identifier:   7F:45:A4:2A:DD:36:4A:5B:EA:F6:CD:B7:88:E6:6F:E4:7C:0B:7E:63
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584988CF36345C751E39D34D3680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/331027c3-82c5-320b-8687-293996b4d46d.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     20940
IP address blocks:        2600:1488:a004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:36:34:5c:75:1e:39:d3:4d:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=712d4502-3d0e-4237-9f15-7bfe9b1b8939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:97:e0:d1:26:7d:36:70:50:5e:3a:21:ab:ee:
                    58:ca:d0:9c:8b:85:ad:39:b7:08:97:6b:ee:1c:c7:
                    59:d0:de:1b:90:41:83:7c:e7:3c:11:18:3c:87:4b:
                    0a:fc:9c:2d:5e:b2:18:3e:5a:76:bf:41:2e:55:37:
                    99:85:b3:6f:e9:5b:32:67:bb:14:94:78:fc:c9:ca:
                    87:07:ba:c8:60:4a:9a:01:ec:19:fc:ad:24:b3:72:
                    ff:a6:10:44:51:fe:2f:6b:43:00:de:01:04:93:f0:
                    df:67:6c:f6:d8:ac:e1:06:8e:f9:6d:c2:20:09:c9:
                    8e:26:41:7f:02:3c:52:1f:d6:05:7c:97:e3:5e:a0:
                    99:10:1f:85:44:26:3e:4a:f5:8b:4f:e9:59:43:b6:
                    23:24:91:30:75:c5:87:ce:a5:cb:8b:ab:78:64:d6:
                    91:4c:cf:09:93:e5:fe:63:75:44:0d:c2:4e:c9:73:
                    34:66:cf:e6:5e:01:09:d5:6a:8d:8a:43:7f:49:48:
                    f7:14:d6:68:21:fe:ba:5d:82:94:03:6e:b9:91:42:
                    ed:da:27:f2:8c:1a:c0:4c:60:e1:fb:88:80:84:53:
                    c0:50:e4:8b:b8:25:12:7b:56:30:b7:38:ca:20:d4:
                    f5:b4:d8:b5:5a:2d:3e:84:e5:c0:1f:60:fe:51:f6:
                    5b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:45:A4:2A:DD:36:4A:5B:EA:F6:CD:B7:88:E6:6F:E4:7C:0B:7E:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/331027c3-82c5-320b-8687-293996b4d46d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:a004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:3b:00:76:1d:c6:0f:06:c5:72:e6:b1:78:2b:e2:98:97:79:
         0e:91:22:6c:3b:2a:b0:74:c7:34:ac:3c:1f:cf:95:ea:43:3e:
         78:ea:ac:b8:9b:43:66:4d:4a:b2:ab:22:40:26:d9:76:72:10:
         b9:82:20:2e:65:09:4d:cb:d3:38:d6:62:d3:fa:e4:67:ad:e5:
         b8:ab:f7:b0:4e:30:37:9b:26:7b:7e:e5:7c:dd:89:65:c5:42:
         1b:20:4b:98:f9:1e:65:4f:ac:f0:6d:e1:fb:22:e1:29:92:0a:
         dd:ff:9c:0e:90:23:c9:da:4a:44:fb:d9:70:5d:1c:4d:2a:0e:
         f9:9c:fe:d9:dd:ce:c1:d6:f4:61:cc:21:19:94:98:1b:31:98:
         f5:03:bc:21:b9:99:16:f4:c1:a9:76:ee:7c:c6:43:1f:67:4e:
         5f:da:9d:2d:91:8c:c4:05:a4:5e:01:02:cc:e1:fe:37:73:bf:
         fc:d5:a3:49:ea:b6:72:6f:9a:19:65:60:86:a7:fb:70:b6:b5:
         4a:0d:08:6a:30:f9:d3:d8:c8:74:a3:a1:39:3b:7d:9f:0a:19:
         2f:ac:32:1c:73:86:5b:99:46:ac:0d:bd:b0:17:92:79:f3:b4:
         7d:37:df:f0:39:b7:b9:2f:be:15:7c:f4:cb:93:8e:3e:01:af:
         51:0a:a1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:06:50 2025 by rpki-client