Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66562d2b-8e0c-3483-8427-979533afc558.roa
File:                     66562d2b-8e0c-3483-8427-979533afc558.roa (raw, json)
Hash identifier:          CqA+brDpgeIvcaA71VkPlsYT6V28k6yqEgqlqYT6JJU=
Subject key identifier:   D3:63:D8:A4:16:94:6E:D2:BF:B8:2B:F6:EE:CD:81:06:BE:B4:EB:1E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858498CFF239161DCF3FE37B77E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66562d2b-8e0c-3483-8427-979533afc558.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     7713
IP address blocks:        2600:1417:c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:23:91:61:dc:f3:fe:37:b7:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=6882ba77-cc41-4801-b9c6-6059e27ef76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:be:f4:9e:55:f1:e6:0e:7c:ab:e5:4d:e7:
                    92:2b:6d:36:f2:97:74:fd:42:a3:5d:7e:a4:a3:fc:
                    2b:0d:0b:d0:43:32:ad:89:61:e6:c4:e1:b8:54:1d:
                    8c:74:7e:c9:46:78:9f:11:17:8c:ff:38:88:d2:ee:
                    b6:8a:66:f2:e9:d4:44:35:30:ed:2b:01:31:c5:5b:
                    d7:ca:b8:9f:ad:86:be:5e:ba:64:80:95:aa:02:1d:
                    e0:74:90:02:85:23:4f:01:20:e6:62:74:6e:13:15:
                    fd:87:e0:5f:a5:f1:e7:05:00:19:fb:9e:4b:ac:50:
                    77:93:8a:24:8a:73:b5:13:d9:16:9f:5b:37:53:06:
                    c2:ff:26:2f:4f:e1:eb:84:b5:f1:f3:71:63:84:a7:
                    bf:af:43:e8:d7:2b:63:e2:c0:91:08:57:9e:c5:7a:
                    64:1a:ff:07:88:36:58:e4:77:86:b9:37:34:18:0a:
                    3b:ea:70:1a:5d:82:46:9a:6d:66:3a:36:b5:a4:31:
                    13:ac:c0:5e:0e:a4:6b:10:49:56:6b:5c:ff:4f:ca:
                    2a:d9:d4:7d:76:d9:a7:d0:a7:84:b9:2b:30:de:44:
                    49:0a:35:c8:cf:57:f4:a6:73:c1:87:5a:d8:f6:83:
                    18:02:71:7e:79:91:94:91:de:c7:fa:e8:0d:a9:95:
                    ef:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:63:D8:A4:16:94:6E:D2:BF:B8:2B:F6:EE:CD:81:06:BE:B4:EB:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66562d2b-8e0c-3483-8427-979533afc558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:42:ed:9e:86:f1:72:af:dd:5f:62:18:12:3c:ce:2c:a0:94:
         27:2e:fc:a5:73:3d:50:22:89:a2:61:10:cb:76:17:87:a2:bd:
         55:f0:7b:2c:29:93:83:71:f8:6f:f8:b0:4e:6c:70:a4:ef:dd:
         9b:0b:c8:4c:b7:5e:05:d3:e0:26:82:c1:5f:3b:9a:41:42:60:
         50:48:7d:e1:4c:14:68:30:c7:9c:70:25:e0:bb:6f:d4:79:d1:
         4e:be:e7:9f:7b:4c:ef:1d:07:52:80:15:3c:dc:6c:10:4e:e3:
         4b:7d:2c:20:21:24:0a:e8:58:56:5e:05:da:41:6a:ab:b7:3f:
         88:c5:19:44:84:85:4f:d3:9f:0c:8f:e0:09:cc:57:87:61:22:
         b6:49:24:9d:27:c3:24:7d:da:bb:db:37:22:52:bc:f8:1d:f9:
         b1:b3:49:33:3c:48:ac:74:f6:e2:d1:3f:33:8e:08:5b:98:6c:
         9a:8b:82:45:2b:a2:d0:17:04:99:07:a5:8e:ed:4f:5f:8c:22:
         9c:7b:38:1c:35:81:c4:36:76:4a:d5:2c:81:c3:39:3c:81:aa:
         1d:43:b2:07:00:06:4d:b7:c0:4e:b8:6a:98:1f:56:a8:8e:af:
         f0:ab:9e:72:00:a4:6e:a7:f8:1a:ec:83:5e:98:0a:75:68:3a:
         f8:fe:92:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:20:27 2025 by rpki-client