Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60ed1a61-d459-3246-92d6-6f1fdf56292c.roa
File:                     60ed1a61-d459-3246-92d6-6f1fdf56292c.roa (raw, json)
Hash identifier:          X+w5wg1ylvqO2/xRAysrCBwa1F8gqbZg5uOEG/jY9ew=
Subject key identifier:   18:57:86:94:7E:25:EB:89:FF:CF:D1:04:D5:0F:C7:4F:00:8F:29:79
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849806F3A743489B139721F2C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60ed1a61-d459-3246-92d6-6f1fdf56292c.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        2600:1409:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:3a:74:34:89:b1:39:72:1f:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=e378aeec-2470-4f1a-9efd-43936e69e901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a6:23:23:39:2a:b0:ba:95:08:a4:d8:38:00:
                    5a:6b:89:6f:0b:70:bf:d6:a1:f0:5a:4e:67:f9:47:
                    e7:06:87:f4:66:cd:eb:28:cc:7b:29:16:46:f7:be:
                    40:b6:28:f0:6b:4e:84:6a:71:6b:dc:45:c6:b6:34:
                    b1:9b:cc:90:a5:8f:30:73:9e:3a:d9:3b:02:32:52:
                    05:fc:cb:4b:82:a2:1f:62:dd:aa:28:6d:37:10:dc:
                    14:ac:28:09:c7:c3:3c:8d:7b:75:2f:74:a0:12:30:
                    99:06:86:f7:11:29:57:83:56:e5:6a:65:6d:b8:3a:
                    d4:c2:43:e5:c0:b7:0f:d3:e7:90:25:d1:b6:35:f5:
                    08:be:a9:06:88:e9:75:75:a1:20:dd:03:4e:e2:1b:
                    82:22:90:08:bd:7f:74:63:34:75:a7:47:0a:5d:cb:
                    f6:68:c4:99:3f:53:34:ed:e2:d6:f4:ca:23:94:a0:
                    28:fc:98:78:8e:7f:fb:6f:1f:ad:a6:70:9a:7e:d3:
                    cc:d5:1a:3d:93:5d:3c:46:7f:39:4d:e1:5b:4c:d9:
                    5d:36:3f:1b:37:c9:d3:ed:58:7d:03:1c:4c:a5:77:
                    92:6c:52:bf:bc:4a:b5:71:6d:b3:68:f6:52:16:7f:
                    1a:18:3c:6a:30:8c:06:2a:af:f1:84:c8:c6:3b:26:
                    53:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:57:86:94:7E:25:EB:89:FF:CF:D1:04:D5:0F:C7:4F:00:8F:29:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60ed1a61-d459-3246-92d6-6f1fdf56292c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1409:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:4e:dd:6f:cf:d7:3c:98:a0:db:25:3f:40:5a:51:27:c3:64:
         45:94:a6:26:ee:8e:d8:a8:02:de:89:2a:b5:53:eb:9c:7d:7e:
         50:fc:27:72:0d:e8:1c:3a:83:d9:0a:7a:2c:92:b4:23:07:7a:
         b4:ce:44:62:32:5e:41:91:7f:40:99:27:6a:8d:0b:58:0a:41:
         55:56:0f:b7:5f:8f:d2:48:0e:14:35:2f:d9:af:a0:41:e7:09:
         60:54:c8:b6:54:56:f5:dc:c2:7c:23:9d:e7:ac:69:9b:db:86:
         83:fb:5b:4d:8f:f3:53:20:7d:f6:8b:c5:d4:ba:cb:86:36:17:
         2f:5b:d9:7f:67:0a:e4:da:13:86:4b:5f:fe:48:e3:94:89:b6:
         5b:a8:11:68:b1:4f:7f:32:73:21:9e:fb:01:17:82:fa:72:c7:
         4c:63:95:52:eb:a4:86:31:b2:1c:a0:03:00:90:82:32:47:55:
         f0:66:0f:64:e6:06:c1:f4:34:cc:e2:d4:6c:9f:a7:aa:c2:b0:
         47:00:7e:d9:bd:bb:db:9d:f0:15:e9:2a:21:0c:90:3f:ea:d5:
         83:15:30:ba:81:12:6e:19:66:b0:f2:10:56:49:60:55:9d:91:
         b7:f6:2a:43:99:fc:b8:58:2e:c7:e1:e6:79:58:ec:7e:5c:48:
         0a:a0:30:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:39:08 2025 by rpki-client