Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5589ead9-c11f-30d7-bdb8-a23490952129.roa
File:                     5589ead9-c11f-30d7-bdb8-a23490952129.roa (raw, json)
Hash identifier:          J9uizSB8mKfEta1gcs1m0HsHN4sOJbG3rkCyQm09ex4=
Subject key identifier:   28:4C:FD:D9:7B:9A:7E:00:66:EC:D4:D8:5C:27:05:E1:58:CE:E8:2A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858498CFF282AD801BB133397DD80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5589ead9-c11f-30d7-bdb8-a23490952129.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     24319
IP address blocks:        2600:1417:41::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:28:2a:d8:01:bb:13:33:97:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=5c54f607-adbe-498d-9a03-7f3ffe856f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:9c:9f:22:3d:dd:f7:85:76:0b:06:78:44:
                    65:c6:3b:77:97:e2:a9:32:4b:13:8c:00:ec:3d:17:
                    19:6b:6d:2a:69:6d:3e:3b:f1:58:00:ca:81:a6:52:
                    c3:7e:65:a8:18:b4:5f:23:4d:2c:a0:1e:40:6f:cc:
                    de:7e:5e:32:ac:03:30:70:e0:90:ef:e2:fa:94:0c:
                    7d:bd:2c:67:57:d7:81:33:6e:1f:f7:d5:23:16:6e:
                    15:85:95:80:bd:66:12:1d:bc:5b:38:db:74:24:0b:
                    30:72:a7:fc:47:98:67:02:d1:a8:66:40:4c:11:04:
                    00:5c:53:b5:7a:50:45:0c:2f:d0:fc:39:94:09:f9:
                    fb:99:29:76:82:69:9c:3b:04:48:a9:38:bd:8c:1d:
                    d2:cd:03:09:83:d4:b7:d2:3f:eb:54:c9:36:32:d1:
                    f7:5d:57:4c:ff:63:ac:74:15:0b:2c:a0:22:4d:3b:
                    5f:0f:a7:4b:12:94:04:44:45:9f:17:9e:4a:10:ab:
                    16:0c:f3:f4:d6:eb:4f:9c:60:a1:12:79:4a:df:b3:
                    4e:ea:d3:c0:35:70:98:3f:04:1c:2a:f5:5a:70:62:
                    2c:05:58:ce:31:53:6d:13:76:f0:2c:38:c2:e8:e0:
                    cd:0c:01:2a:84:70:4e:88:f9:a4:f3:f0:1b:da:cc:
                    0e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4C:FD:D9:7B:9A:7E:00:66:EC:D4:D8:5C:27:05:E1:58:CE:E8:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5589ead9-c11f-30d7-bdb8-a23490952129.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:41::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:a4:9f:2b:e6:b8:e0:1f:d6:a1:f6:be:e7:0b:97:87:b1:1b:
         64:29:d1:86:fd:b6:36:ec:e9:17:c2:5e:32:6d:ea:89:95:70:
         2d:be:ed:62:e7:7c:cf:bc:a6:88:dd:e7:2a:01:de:1a:25:16:
         75:3e:28:2d:0b:8b:7a:e5:51:a2:63:14:99:76:1e:25:89:db:
         ef:dc:5f:ab:cb:d1:8f:d5:6e:88:e3:1a:5c:1b:57:4c:07:92:
         f1:0c:3d:de:97:66:5a:90:ad:79:8d:e4:9b:36:9b:b8:3b:33:
         0e:1e:a7:29:98:c1:d7:cf:4f:2a:86:4c:a1:db:d6:f2:02:44:
         eb:22:a1:71:21:7e:a6:e0:e4:b4:9f:35:f2:28:c9:10:f9:0b:
         aa:9f:ca:ea:c2:f2:67:90:e4:13:19:28:4e:e4:97:cb:62:18:
         68:27:25:d7:72:05:5d:08:df:0e:05:1b:36:86:59:bb:07:b4:
         2e:1d:b6:e8:2d:7d:59:1a:ad:57:03:dd:d3:39:59:d2:e1:47:
         7d:d4:be:12:fc:67:1c:3a:eb:e8:d4:76:2a:82:e1:ca:dd:ee:
         02:24:16:7b:01:5c:7e:dc:b8:8d:68:5e:6f:65:d2:dc:7f:fa:
         4e:f1:f9:c8:53:ba:28:de:25:b7:45:56:26:da:22:74:cc:f3:
         d3:31:e0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:03:47 2025 by rpki-client