Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d518362-1d79-3607-a8f3-c4b7e15bf95d.roa
File:                     5d518362-1d79-3607-a8f3-c4b7e15bf95d.roa (raw, json)
Hash identifier:          76gsIYuFvcPHS363WfqhdNC68eErvhSFIoyfq8q0eSw=
Subject key identifier:   87:1F:05:99:8C:B9:23:32:A5:95:A4:37:9C:D7:5F:DF:3F:D0:24:26
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858499294A9F3E219AA564A911200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d518362-1d79-3607-a8f3-c4b7e15bf95d.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     21342
IP address blocks:        2600:1480:a800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:a9:f3:e2:19:aa:56:4a:91:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=95d29502-b821-4d27-b881-f9e6f5473a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f7:06:66:69:73:b3:94:df:36:d9:aa:0d:d0:
                    08:f1:ac:dc:0e:40:e2:4b:29:a4:02:86:32:32:72:
                    7c:36:f2:1c:0e:73:50:55:b8:39:90:ee:6d:3d:b2:
                    d2:03:00:e9:fc:a8:9a:1e:9d:d5:d0:f9:b0:f4:34:
                    cb:d6:1a:e1:de:82:1a:d4:91:c2:b2:30:62:3b:43:
                    67:7c:67:b7:0f:91:6b:a3:ca:2d:8b:d7:18:d1:27:
                    15:e7:2f:2c:ac:9b:a9:a2:3b:50:0c:2a:dc:9d:27:
                    0c:12:73:5f:34:63:03:dd:45:be:80:26:5f:e4:9a:
                    24:8b:52:3a:b0:ed:9c:fa:9a:ed:9f:7a:c0:d2:3c:
                    35:69:ff:3c:00:5a:6b:91:0b:4a:37:fb:3c:47:43:
                    25:c2:18:47:1c:88:e9:ea:20:e3:65:57:b8:ce:9d:
                    59:1f:e5:99:d0:d1:fb:30:1d:61:0c:8e:c7:3f:f9:
                    7a:39:06:29:42:7a:79:6d:1a:26:93:3e:57:b4:c1:
                    b7:22:cd:1e:e6:a2:02:b6:7f:4c:b5:46:52:56:60:
                    39:91:2b:fe:59:c6:80:b5:4b:7a:13:86:92:1a:20:
                    dd:e9:6e:e0:69:72:7a:03:c2:f5:85:a8:94:42:0c:
                    bb:24:f4:4f:5b:97:ad:88:d8:5f:82:f6:02:db:4a:
                    b1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1F:05:99:8C:B9:23:32:A5:95:A4:37:9C:D7:5F:DF:3F:D0:24:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d518362-1d79-3607-a8f3-c4b7e15bf95d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1480:a800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a0:a5:17:41:2d:9a:02:4d:2a:a8:fc:1c:57:ab:15:54:9d:
         9e:b0:87:3e:6e:3e:23:ee:2e:19:2a:bd:6e:0a:20:60:2b:c9:
         cb:ee:3f:6c:10:21:07:08:34:8f:b5:47:34:c7:af:2b:2e:da:
         ce:06:ea:09:61:f9:70:f3:80:0d:de:37:c9:6c:75:1f:e7:10:
         01:0c:97:64:e7:44:24:35:87:dc:b6:88:86:c9:22:82:0a:22:
         e2:f8:0d:c9:53:58:50:df:13:7c:d7:e2:f8:a5:e9:e9:29:68:
         93:a7:e0:89:51:eb:fc:21:6f:0c:9a:55:53:6d:ae:e5:5c:64:
         db:b8:f9:7c:66:86:45:2d:b0:69:61:a0:f3:4e:81:ef:4d:63:
         a8:49:88:91:17:82:e2:70:ef:d7:23:f3:04:11:9d:c3:8b:5f:
         91:6e:de:3e:66:31:e9:fe:7a:b6:14:d9:0a:de:dc:b9:6a:57:
         14:06:06:01:41:32:80:84:a7:41:36:c4:9d:10:3c:f6:af:9f:
         00:04:2a:71:69:8e:87:7f:85:23:04:9f:a6:f9:81:62:a0:c9:
         80:bb:e1:48:6e:92:3c:07:68:ad:bb:94:f6:0b:88:fe:4e:c2:
         59:ee:80:4a:d7:09:1e:e0:14:c8:27:16:02:9b:3f:6a:77:ac:
         0c:a4:a2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:38:22 2025 by rpki-client