Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6592197c-a73a-3148-b309-7fde68ac6b1d.roa
File:                     6592197c-a73a-3148-b309-7fde68ac6b1d.roa (raw, json)
Hash identifier:          m/QBYOkkyl8IjhwKZ9AgrCvAJVr8PMcvXA1gjHK69Rg=
Subject key identifier:   34:12:DC:DC:50:A1:18:0B:F5:08:20:57:F7:28:88:2A:12:07:91:05
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849806F3D4418379EC7125AD080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6592197c-a73a-3148-b309-7fde68ac6b1d.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        2600:141c:8800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:3d:44:18:37:9e:c7:12:5a:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=dc2aa627-3a21-48e2-abff-03aeb968484a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:a1:7e:d8:6c:ca:bc:b7:93:4b:73:26:88:
                    2f:af:b2:06:8a:94:f0:af:9a:7f:45:17:70:b4:fd:
                    e7:30:c6:76:ea:87:ce:41:fa:64:38:c1:d6:eb:c3:
                    1d:72:a2:72:4a:25:d5:7a:7b:12:af:d3:b6:86:c5:
                    56:fc:9f:da:64:88:b2:93:3d:c1:d6:d2:63:34:a9:
                    72:c9:63:b7:4f:d2:c1:69:b5:fc:2a:47:e8:e6:da:
                    90:b9:8c:91:87:e5:b3:5a:b9:85:29:c0:25:5a:a6:
                    0d:8b:fb:ed:00:d3:78:f6:ff:09:66:4b:2c:01:d0:
                    b0:46:ff:c8:ef:3b:b4:3b:f6:14:9d:cb:b4:ab:03:
                    81:cb:f0:05:fb:c9:2b:63:70:36:2a:7a:63:67:b1:
                    f0:3e:67:5d:8a:f1:6d:fc:8d:aa:15:cf:cf:33:26:
                    de:5a:80:73:f9:6e:ea:34:5c:79:7f:04:e0:6a:10:
                    23:65:f8:95:17:f6:e5:54:61:29:3e:e9:0a:c3:eb:
                    58:5d:77:1b:e0:31:72:c3:e4:9d:c6:76:51:5a:02:
                    28:11:5b:37:b2:28:05:99:28:b7:ae:b6:c7:00:13:
                    c3:11:ba:f5:aa:65:3a:0d:1a:5a:cb:44:8d:6c:63:
                    73:99:e6:59:d5:28:e1:96:c6:de:51:e7:e6:ca:fd:
                    aa:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:12:DC:DC:50:A1:18:0B:F5:08:20:57:F7:28:88:2A:12:07:91:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6592197c-a73a-3148-b309-7fde68ac6b1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141c:8800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:6f:f3:1f:f3:52:b2:82:5e:ed:b7:1e:07:ff:c2:84:f0:c2:
         e6:68:ca:b9:29:ca:c8:77:47:34:e3:3a:f3:06:a9:f6:b6:01:
         97:dd:f5:c2:68:54:7f:bf:84:e9:c3:ec:81:37:e6:16:69:1c:
         12:3b:a8:57:6d:a7:57:43:a1:d9:22:ee:64:c2:d2:9e:70:4f:
         f6:7a:ed:6b:a3:ae:48:26:e8:5c:26:54:99:f8:7d:91:e2:a5:
         f7:71:78:3c:cb:f5:b7:65:fe:89:23:97:da:cb:94:1a:d5:47:
         63:8d:42:c6:d5:ce:29:33:9c:7e:a0:95:1a:5a:f9:5d:c7:3a:
         cd:44:d6:1f:4e:55:23:6b:96:4c:2d:2d:86:82:21:db:5d:f6:
         68:5b:47:cd:f2:28:27:ed:7e:33:31:4e:65:15:25:35:98:d9:
         70:81:c0:8e:46:3a:45:39:f5:a1:30:31:39:c9:bb:ed:39:75:
         07:cc:6e:11:af:b9:35:30:61:61:4e:d5:a8:0c:d9:0c:47:40:
         37:c3:0a:36:98:cf:b8:d5:b7:42:90:64:8b:36:bc:a1:8b:24:
         84:8a:c5:af:03:00:37:dd:a8:dc:8f:ec:a3:11:d6:64:51:bd:
         8c:70:0b:00:0d:d4:b6:8e:44:25:56:d2:a1:b1:af:f4:6d:8b:
         1c:ba:1f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:01:51 2025 by rpki-client