Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a9ed525-883d-3d01-bb8b-dd7d11250a9b.roa
File:                     8a9ed525-883d-3d01-bb8b-dd7d11250a9b.roa (raw, json)
Hash identifier:          sswEKqVLkmIcyjtP2mzVpACScMOwbs0xeFsNaRiuRPA=
Subject key identifier:   60:19:30:FC:59:A6:DE:E1:8A:28:CB:24:67:3D:17:DA:4A:8B:55:D0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584988CF34F96354688A83646280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a9ed525-883d-3d01-bb8b-dd7d11250a9b.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     20940
IP address blocks:        2600:1488:4001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:34:f9:63:54:68:8a:83:64:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=512e1e20-0717-4c0f-9134-67c746430c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cf:0a:91:58:4b:4f:c3:b5:80:d0:21:11:b0:
                    6a:d6:78:14:11:60:9a:99:2c:24:51:be:dc:91:6c:
                    9a:57:9f:aa:26:be:69:ee:28:63:45:80:8c:60:6e:
                    ee:c6:db:20:6b:c6:4f:ee:99:f2:95:61:ce:af:29:
                    be:71:7f:2a:0c:1f:df:54:9c:f4:7a:6f:43:58:4c:
                    da:00:dd:14:be:d9:4b:56:d2:50:6a:79:64:22:01:
                    76:34:f1:c6:9f:b8:7c:61:0a:b6:d2:22:cd:bd:0b:
                    b5:00:95:f3:a9:d3:c4:4e:7d:56:d2:d1:3b:57:e5:
                    91:b2:02:6e:f6:8f:59:0c:dc:a1:0a:46:b4:35:a4:
                    b7:fb:1b:24:80:8e:3d:4a:8a:5b:bf:4f:f8:a6:eb:
                    cd:07:1b:ec:ee:e7:18:71:0b:23:e4:dc:83:3b:27:
                    14:d4:5c:0b:f6:4b:64:5b:b7:a1:2b:63:94:7b:26:
                    4f:51:45:3d:e9:48:e0:0e:ce:8c:d9:12:be:54:5b:
                    2c:6e:01:5c:4a:7c:a1:35:fd:09:55:92:5d:0f:de:
                    d0:56:09:7d:09:99:8e:48:01:7c:bf:85:f5:cc:a4:
                    04:98:0e:5d:a1:94:73:81:5c:00:dc:37:08:96:a1:
                    f7:89:4e:6d:f3:8a:fc:19:f2:cb:04:43:1e:dd:80:
                    b7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:19:30:FC:59:A6:DE:E1:8A:28:CB:24:67:3D:17:DA:4A:8B:55:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a9ed525-883d-3d01-bb8b-dd7d11250a9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:4001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:11:75:77:8a:88:27:6c:9d:72:58:02:4b:cd:7b:bb:6d:72:
         21:67:fa:61:d3:b5:0b:ca:1e:41:e1:bd:5c:8f:fe:d0:7f:7d:
         a6:52:b0:88:09:b4:81:a2:e5:57:03:36:40:f3:f3:d1:c9:ff:
         78:f8:51:f5:f7:12:45:92:23:f2:1f:7d:e3:f2:88:e8:b7:b2:
         d0:12:86:af:1a:db:86:2d:5c:ea:79:e9:bd:74:9b:3b:c0:eb:
         72:cf:76:ba:34:c7:2b:37:c7:35:47:59:26:a8:13:1b:02:2e:
         64:d4:62:16:a4:72:9e:39:87:63:59:ce:9e:6c:88:8d:b0:9c:
         4c:c6:b9:96:91:4f:4b:06:0f:54:7d:7b:e2:ae:07:53:0e:74:
         14:d1:0b:14:73:3c:c9:b8:eb:e8:97:8a:26:b8:6e:ce:75:e1:
         67:c4:8b:b9:49:16:0c:d7:00:fe:82:de:37:56:72:f4:a0:28:
         c9:ee:80:e5:96:b5:08:f8:cc:98:c3:53:eb:c8:a3:87:b7:e8:
         8f:91:bd:82:75:22:7d:bb:21:52:87:df:d7:2a:e0:0b:1b:99:
         62:24:cc:33:cf:93:04:e0:4e:53:28:b1:33:c0:71:92:e0:5a:
         4b:91:67:ce:46:b8:a1:01:19:fe:b2:7a:9b:b9:5e:39:7f:17:
         b1:5b:de:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:02:48 2025 by rpki-client