Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58eb9883-ebd5-3919-a3e2-1b744af56a27.roa
File:                     58eb9883-ebd5-3919-a3e2-1b744af56a27.roa (raw, json)
Hash identifier:          6hXeWTRYNDToCs1jVyB8nkyUUB8DkowNQ/astBXdGP8=
Subject key identifier:   49:FA:9C:94:EE:D0:CC:EF:14:77:68:8C:16:22:A7:08:46:35:2E:FA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849780F1796E3C17E507B3DFC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58eb9883-ebd5-3919-a3e2-1b744af56a27.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        2600:141b:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:17:96:e3:c1:7e:50:7b:3d:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=f5b24ed4-caa7-406e-adb9-1e80554fd591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5a:4d:fa:12:b7:ed:59:b1:42:11:93:de:16:
                    c3:91:89:81:5c:cd:22:2e:ed:c2:c8:28:9a:c4:e5:
                    bf:8c:82:fe:eb:1f:31:fb:d5:37:1d:c0:50:85:10:
                    2e:6a:83:39:ed:28:dd:17:04:a2:52:36:e0:a6:8d:
                    2c:b6:28:85:b4:ba:d3:08:42:6f:87:b1:1a:2d:3c:
                    6f:e9:d2:59:90:b0:44:8c:2f:78:f8:44:2c:c5:7e:
                    74:be:9f:9d:1b:d3:be:e5:e0:4f:b9:af:b1:22:13:
                    bf:da:cf:5c:39:be:61:b1:c6:02:b2:55:ed:d4:e9:
                    9b:22:e4:78:ce:37:ee:92:0a:45:34:ff:eb:1c:12:
                    94:0f:e9:88:93:d0:0e:84:c8:a3:5e:7a:2b:98:93:
                    8f:07:bb:7f:74:8e:25:af:0c:07:50:ca:15:05:51:
                    77:1a:5d:49:36:7e:6a:f3:28:bf:cb:a9:39:92:d6:
                    35:23:33:7d:7c:29:9f:e2:d9:f5:e3:00:91:e2:b9:
                    c6:d1:1f:c4:80:fd:87:bb:66:71:a9:75:c0:db:51:
                    04:81:ca:36:89:07:db:f8:a8:eb:a4:44:7e:41:1f:
                    42:96:ee:9f:a1:9e:c2:79:e3:33:ac:d7:4f:e0:8b:
                    f0:b2:fb:e1:37:e7:1c:ad:49:39:4e:a4:66:06:03:
                    bc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FA:9C:94:EE:D0:CC:EF:14:77:68:8C:16:22:A7:08:46:35:2E:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58eb9883-ebd5-3919-a3e2-1b744af56a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141b:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:41:34:c0:1b:18:68:fc:43:9e:40:d7:4d:ac:65:fe:6e:52:
         70:62:cc:80:40:49:c0:41:db:51:ac:4d:a6:ff:3d:9e:81:cc:
         65:bb:64:55:56:06:60:24:5d:1e:be:bb:24:8b:20:63:c4:11:
         de:0b:90:bc:95:a0:a4:48:0e:9e:d1:bb:09:36:a1:de:a5:5f:
         4e:1e:c3:2d:ee:46:59:e0:77:3f:bf:50:24:b2:dc:e2:96:92:
         bf:ae:ca:31:c2:43:dd:ad:8c:ec:ca:62:14:9d:85:4d:6e:22:
         06:75:2c:61:8b:d9:95:94:8b:28:4b:38:9c:51:ef:e3:91:d0:
         81:7a:ff:95:99:32:9e:f5:c2:d9:37:40:9c:c1:04:2a:0d:69:
         4b:48:63:19:6f:82:01:74:f3:29:aa:5e:12:31:b4:81:f0:ed:
         d9:c0:83:8a:ef:d8:25:07:b0:e7:e9:c0:29:83:35:de:b3:f5:
         c2:94:51:b1:ad:c6:38:86:3d:48:f0:c9:92:08:b5:9f:ee:4b:
         9c:0c:7a:31:f6:2a:d0:53:c0:ff:3b:a4:05:9e:f4:8e:6b:b9:
         b5:9c:51:e9:23:c4:d4:91:37:70:04:81:5f:04:29:7c:0c:d2:
         59:80:ac:be:01:9e:8d:36:f8:67:8f:5b:70:ac:c7:14:4b:c2:
         b2:d6:aa:c2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl4DxeW48F+UHs9/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk
ZjViMjRlZDQtY2FhNy00MDZlLWFkYjktMWU4MDU1NGZkNTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVpN+hK37VmxQhGT3hbDkYmBXM0iLu3CyCia
xOW/jIL+6x8x+9U3HcBQhRAuaoM57SjdFwSiUjbgpo0stiiFtLrTCEJvh7EaLTxv
6dJZkLBEjC94+EQsxX50vp+dG9O+5eBPua+xIhO/2s9cOb5hscYCslXt1OmbIuR4
zjfukgpFNP/rHBKUD+mIk9AOhMijXnormJOPB7t/dI4lrwwHUMoVBVF3Gl1JNn5q
8yi/y6k5ktY1IzN9fCmf4tn14wCR4rnG0R/EgP2Hu2ZxqXXA21EEgco2iQfb+Kjr
pER+QR9Clu6foZ7CeeMzrNdP4IvwsvvhN+ccrUk5TqRmBgO8+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEn6nJTu0MzvFHdojBYipwhGNS76MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNThlYjk4ODMtZWJkNS0z
OTE5LWEzZTItMWI3NDRhZjU2YTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGyAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACxBNMAbGGj8Q55A102sZf5uUnBizIBAScBB21GsTab/PZ6BzGW7
ZFVWBmAkXR6+uySLIGPEEd4LkLyVoKRIDp7Ruwk2od6lX04ewy3uRlngdz+/UCSy
3OKWkr+uyjHCQ92tjOzKYhSdhU1uIgZ1LGGL2ZWUiyhLOJxR7+OR0IF6/5WZMp71
wtk3QJzBBCoNaUtIYxlvggF08ymqXhIxtIHw7dnAg4rv2CUHsOfpwCmDNd6z9cKU
UbGtxjiGPUjwyZIItZ/uS5wMejH2KtBTwP87pAWe9I5rubWcUekjxNSRN3AEgV8E
KXwM0lmArL4Bno02+GePW3CsxxRLwrLWqsI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:00:43 2025 by rpki-client