Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/483727f6-54f5-396c-96bf-293bdcb315e3.roa
File:                     483727f6-54f5-396c-96bf-293bdcb315e3.roa (raw, json)
Hash identifier:          Buzv9pONT05MMjtFTL8bNx1E33tajy8wIUxpFHRyNV4=
Subject key identifier:   D2:97:77:EB:5A:AC:2C:C6:69:42:D9:87:07:72:F8:AE:64:D9:AD:CA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849BC74B21390FF321F8029CE40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/483727f6-54f5-396c-96bf-293bdcb315e3.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     20940
IP address blocks:        2600:1415:a400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:b2:13:90:ff:32:1f:80:29:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=a2baecb4-f622-4d0e-a2dc-132ce2ad0104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:36:cb:e7:5e:f6:29:84:62:52:16:f8:84:6e:
                    5d:c8:b1:fd:78:05:d8:11:39:60:b9:7c:66:cb:94:
                    70:bc:fd:a2:08:2d:5d:80:b5:e9:8b:42:74:41:91:
                    2c:9b:81:9e:0e:21:87:b0:c6:7d:85:dd:71:e3:d2:
                    26:4f:64:8e:0c:50:c2:6e:ac:eb:eb:39:f1:f1:76:
                    3c:1d:7c:16:2b:32:cb:89:48:eb:1b:77:bc:db:78:
                    8f:e8:e5:e5:b4:dd:d1:dd:ec:7c:e1:9c:81:96:82:
                    5b:ed:58:13:b9:7d:9a:2f:fb:f8:5a:35:a3:79:44:
                    02:df:f3:57:4c:9c:2d:03:fc:df:f8:5b:0f:b8:60:
                    fa:92:3f:5c:58:76:a4:bf:13:49:b4:f0:35:de:37:
                    d4:2a:e6:f8:f4:32:05:fc:6e:68:22:0a:b1:4a:f3:
                    70:b6:96:3e:77:4a:22:b4:55:c0:9f:95:c2:87:54:
                    b3:d8:96:d7:1a:4d:a3:9e:e7:0c:15:6c:52:21:26:
                    56:6f:f4:9e:e4:9f:05:87:6a:39:46:ba:4c:73:f9:
                    e6:c1:00:3f:04:66:42:52:51:0f:1e:e7:ef:2c:b3:
                    c8:2b:3c:3f:9d:66:3b:c7:03:0a:73:af:e9:e5:57:
                    fd:e1:c3:f4:52:15:c9:c2:41:eb:31:7f:7d:c6:05:
                    78:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:97:77:EB:5A:AC:2C:C6:69:42:D9:87:07:72:F8:AE:64:D9:AD:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/483727f6-54f5-396c-96bf-293bdcb315e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1415:a400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:6c:90:ed:d3:7c:c2:39:ad:3b:82:a5:b3:e0:f7:af:d1:85:
         9d:e9:74:32:1e:2c:e7:25:5a:a2:81:13:2c:cd:59:dc:21:25:
         5e:89:05:93:22:29:78:e7:e5:cf:49:4c:26:cc:0d:0a:ac:19:
         b4:90:75:d6:71:f2:32:f9:1d:34:ae:c0:67:89:bd:9b:2d:66:
         ca:11:ab:dc:36:71:7e:cc:0c:b7:23:62:52:2f:2e:98:89:f7:
         30:b3:23:b1:a3:dd:4f:ef:bd:df:d4:e6:8f:ce:67:ab:9e:6a:
         f8:ea:e8:31:9b:05:89:fd:8e:33:11:87:6e:22:82:94:18:f7:
         1f:21:66:af:3a:05:50:a5:a5:b6:f4:71:17:5c:cf:0b:b6:cf:
         5b:1d:09:f6:48:02:be:cd:68:ba:a8:13:f9:be:40:90:18:fa:
         f8:1b:29:ab:4d:25:21:63:0e:c5:a6:62:ac:cf:f6:a2:ca:8e:
         f4:4e:d2:72:c9:9a:bf:de:fb:e3:9e:76:74:d8:ca:86:77:a0:
         8c:e2:08:39:20:0a:c9:3b:05:1e:e9:86:aa:41:90:c7:f2:e8:
         0f:90:0a:f5:8c:ae:77:37:10:3c:5f:c8:cc:a6:5a:d2:b0:31:
         eb:2c:a6:33:91:b6:0e:c1:63:11:ed:90:18:2a:d0:6d:bd:f5:
         33:68:32:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:33:55 2025 by rpki-client