Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5590595c-2ea3-39b0-83b9-3a72a4aed30d.roa
File:                     5590595c-2ea3-39b0-83b9-3a72a4aed30d.roa (raw, json)
Hash identifier:          OhmNETCf4SOQVv361PR2UE3DEcMPW2Vca/+ZXDIwFrs=
Subject key identifier:   3D:E1:9F:A2:7D:6E:85:97:17:46:5E:94:4D:34:49:CD:4E:F5:1A:FB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858498CFF236A56CB517C9A1C0C30
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5590595c-2ea3-39b0-83b9-3a72a4aed30d.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     24319
IP address blocks:        2600:1417:32::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:23:6a:56:cb:51:7c:9a:1c:0c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=edcbdf8f-d77b-4601-afb1-72d1874110cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a4:fd:80:4b:06:bb:54:4c:7e:b6:f1:48:5b:
                    ec:cf:c9:af:46:ce:5a:4f:29:8e:0f:49:2e:48:27:
                    96:3d:61:2f:3b:65:61:28:29:6f:0a:60:b5:a6:68:
                    e1:72:72:91:f9:3f:03:d4:a1:57:55:ab:1c:ca:df:
                    de:0a:1a:f6:da:34:ec:f4:9c:e4:ac:a8:a1:02:55:
                    02:48:1e:a6:d8:50:af:55:9d:2b:85:ff:98:f5:2b:
                    7b:00:14:06:d4:80:b9:6f:95:9d:66:5c:33:20:43:
                    a8:75:55:ca:7b:d7:9d:c7:14:39:e5:64:9c:39:12:
                    a9:6f:26:35:97:40:d1:32:d5:25:14:6f:c9:cb:ac:
                    c1:2c:7c:b1:a1:e1:bd:83:8c:a0:d2:fb:8a:56:37:
                    44:16:8b:d0:15:f8:58:3f:f9:ac:b6:d2:13:85:33:
                    e0:4a:0e:eb:76:4d:32:d9:89:55:4d:51:46:5f:06:
                    9e:14:cd:13:42:d0:b9:47:cb:75:38:c4:af:6b:30:
                    fd:48:0a:51:94:1d:b3:d8:c0:9e:d6:9a:bf:9b:70:
                    49:00:40:26:e8:23:bb:7c:91:7a:5d:5a:15:a3:b0:
                    bf:1c:c1:1b:00:c8:17:51:aa:99:3a:be:43:7a:26:
                    29:e9:aa:78:01:c5:1a:7e:a8:be:98:12:5c:90:c8:
                    06:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E1:9F:A2:7D:6E:85:97:17:46:5E:94:4D:34:49:CD:4E:F5:1A:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5590595c-2ea3-39b0-83b9-3a72a4aed30d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:32::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:b7:d7:02:cf:bb:e7:2e:83:84:ff:cc:e2:a6:82:5f:cc:09:
         39:6d:0a:60:57:d3:8c:c9:62:93:ba:18:b6:9d:e2:7b:31:6a:
         17:4c:67:df:0c:cc:3e:3e:2b:07:94:cb:f0:d4:c0:1a:2e:d3:
         c2:40:dc:0e:e8:e7:74:61:1e:f9:3d:9f:42:49:ac:02:e0:dd:
         d5:5b:05:d7:a3:af:0f:4e:60:75:d1:10:c0:39:ca:7a:ff:46:
         66:ce:4c:46:48:c5:e7:84:13:55:76:33:64:eb:42:55:12:a1:
         1d:8a:8b:9d:5a:9a:a5:49:bc:fe:c7:f0:04:66:09:de:88:da:
         83:77:00:b6:36:44:98:45:32:85:39:36:0f:f7:a0:09:d8:98:
         19:1f:c6:59:48:16:ea:57:9a:85:3b:d4:98:7f:33:07:e5:5a:
         cc:0b:90:96:8f:d7:79:5a:5f:be:17:5e:85:ee:a9:94:6f:b4:
         fd:be:43:db:70:f5:dd:b6:7b:85:44:1c:b7:a9:fa:de:21:ba:
         ce:60:ae:ae:e6:0f:cc:a9:ec:55:12:54:75:96:3c:b7:f0:3a:
         9a:95:37:14:eb:b4:fa:3c:fd:c0:a7:c3:dc:c9:f6:ea:63:1e:
         ce:6b:71:7a:b2:d4:6b:1c:4c:7f:f7:55:f3:cd:7f:fe:6d:41:
         7b:d8:d8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:16:18 2025 by rpki-client