Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/baba3473-ce08-30d0-91dd-6c4ab8d7701f.roa
File:                     baba3473-ce08-30d0-91dd-6c4ab8d7701f.roa (raw, json)
Hash identifier:          gwSolFzOI0FTkbSeto+TUUxxXIH8pXrGVufTLF9PtxI=
Subject key identifier:   24:8D:53:B2:B0:DA:11:68:7F:23:30:2B:3E:D2:82:A4:B7:D5:02:10
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858498CFF227AC5A5325959DA6700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/baba3473-ce08-30d0-91dd-6c4ab8d7701f.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     24319
IP address blocks:        2600:1417:1d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:22:7a:c5:a5:32:59:59:da:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=97d4c994-1f74-40e1-9f7b-623a7691d9ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b0:e4:67:4c:b2:fe:4e:70:2f:e6:92:1c:e7:
                    fe:53:53:a3:d5:ed:e1:f0:17:5a:ee:4b:6e:c9:2e:
                    15:a1:4f:16:3c:f3:c5:9f:a9:50:ae:7c:8c:4c:51:
                    c2:dc:d8:d5:04:0b:cb:2d:32:d2:c4:eb:9e:ad:55:
                    de:17:98:24:c6:fb:fc:d0:2d:82:f7:a9:b4:2f:15:
                    86:33:16:93:e3:c0:d9:c3:7d:88:30:d1:20:bc:71:
                    3f:de:ef:eb:aa:8b:a6:86:b7:e6:70:87:8a:0c:0f:
                    1b:ca:e1:c0:b6:e5:44:fc:37:7e:1f:99:50:a2:19:
                    13:12:60:e6:4c:5f:22:f6:c5:89:f4:12:54:08:98:
                    8a:31:50:3f:09:03:79:89:a8:fd:46:3a:fb:c5:97:
                    af:02:ca:20:12:a4:18:44:8f:29:56:b8:df:3c:94:
                    1b:d1:2e:db:ad:e9:89:c0:38:c3:5b:32:04:b5:45:
                    8f:83:02:cf:67:ff:08:a6:e8:61:fa:03:10:ae:0e:
                    1e:a2:2c:b3:95:4c:7d:4c:fa:d8:8e:f6:fe:52:e9:
                    2e:69:97:9c:47:16:71:6e:1b:55:2c:c3:8c:24:6c:
                    f9:70:5c:03:d0:b9:ab:56:5f:18:c5:d7:b9:f2:de:
                    6e:44:1f:d3:e1:94:ef:96:54:ff:76:ca:84:0a:21:
                    6a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8D:53:B2:B0:DA:11:68:7F:23:30:2B:3E:D2:82:A4:B7:D5:02:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/baba3473-ce08-30d0-91dd-6c4ab8d7701f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:1d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e1:e1:36:78:52:85:41:cf:3c:eb:5e:dd:83:3a:d3:14:fc:
         9c:c6:12:17:5f:77:35:f2:cf:06:88:d3:34:5f:73:0b:08:45:
         2f:8d:a6:8c:4f:f9:e5:d5:3b:af:cc:15:73:4d:2e:2f:94:cb:
         e5:5e:d7:53:06:57:11:2a:3e:f4:31:8d:df:59:a6:a8:6f:6e:
         a5:59:90:af:93:0d:42:fb:63:9a:1e:ff:63:6c:c4:4c:e6:9b:
         98:b5:2a:e4:2f:58:3b:de:be:91:36:3b:77:6e:7c:ce:5d:ff:
         e5:25:7f:2e:a8:b8:47:3f:bc:80:75:7e:55:79:db:56:fb:8a:
         e6:b5:e1:cc:f3:0e:1f:5e:83:69:eb:94:35:17:5a:20:9a:3b:
         2f:78:7e:b9:d0:04:04:28:8c:a4:57:27:a5:93:63:ae:64:32:
         d2:fd:e0:3e:32:e3:48:64:fe:35:05:ac:42:29:ca:5f:06:52:
         8a:df:a1:8b:28:2c:4f:3b:2f:fc:8a:6c:55:80:70:d2:50:b5:
         ed:78:d8:4e:ca:ce:de:bb:a6:4c:be:52:85:74:d9:1b:38:84:
         d4:82:42:ae:4e:cf:94:e0:f4:16:f7:7a:23:80:8e:2f:78:66:
         dc:3b:48:f8:8d:60:3d:cb:2b:8f:bd:d8:da:68:49:ff:48:49:
         ff:bf:80:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:47:58 2025 by rpki-client