Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0319abf0-fa67-3864-854f-2beacd2f1e2a.roa
File:                     0319abf0-fa67-3864-854f-2beacd2f1e2a.roa (raw, json)
Hash identifier:          BQUAyWN4AiMqmDuOBRdQqSyY0LNRaYTqYVxbP/x6N6c=
Subject key identifier:   2C:9A:7C:65:E9:B8:54:8B:F3:3B:5A:A4:BD:2A:8E:D7:E5:5A:6C:3D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452C2DA1933732B40D63AAF000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0319abf0-fa67-3864-854f-2beacd2f1e2a.roa
Signing time:             Mon 11 Mar 2024 13:33:35 +0000
ROA not before:           Mon 11 Mar 2024 13:33:35 +0000
ROA not after:            Sun 09 Jun 2024 13:33:35 +0000
asID:                     35994
IP address blocks:        2600:1408:f000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:2d:a1:93:37:32:b4:0d:63:aa:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 11 13:33:35 2024 GMT
            Not After : Jun  9 13:33:35 2024 GMT
        Subject: CN=28c95853-ceac-4d0c-8cd9-f8e3b680744d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:15:9a:ff:a3:46:79:70:a3:e3:15:1d:3d:fd:
                    a3:e5:d1:79:aa:ca:c1:53:73:cf:49:04:ae:85:c1:
                    ea:f3:08:ce:cb:47:07:fa:70:f6:8e:77:46:9f:23:
                    b1:1b:d3:18:2c:09:13:b9:ab:e9:bc:91:d2:e2:16:
                    9f:4c:c4:cc:8c:9d:4d:f5:7a:61:50:ef:f8:d8:af:
                    a7:9f:56:30:76:31:a0:4b:65:12:ae:07:09:f2:78:
                    84:14:ee:65:25:93:be:07:f0:7b:98:38:0e:d3:34:
                    b4:84:3d:d3:9d:47:63:19:a5:cf:6f:77:53:64:57:
                    c2:92:6d:c8:72:5e:68:fb:68:c8:1d:af:1d:b5:39:
                    2f:02:a3:e0:09:22:ea:39:38:36:e2:b8:08:b6:e4:
                    6f:9a:df:cf:c9:1f:82:af:7f:36:3c:8d:1e:39:73:
                    db:25:b7:30:6f:e6:52:90:cd:a7:ae:5b:81:d6:b4:
                    f1:a4:e9:70:ba:52:fd:c6:34:b8:b0:0d:63:9c:8a:
                    99:33:1d:37:54:94:c3:31:9f:b6:c9:05:40:8d:29:
                    7b:91:d2:ac:db:ce:d3:f1:02:bc:46:a2:5b:7b:92:
                    88:ce:ab:8a:25:73:09:7f:52:a1:b3:42:2a:51:cb:
                    96:96:cf:73:70:08:ce:61:7b:dd:9c:53:8c:50:39:
                    1e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9A:7C:65:E9:B8:54:8B:F3:3B:5A:A4:BD:2A:8E:D7:E5:5A:6C:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0319abf0-fa67-3864-854f-2beacd2f1e2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f6:2e:e3:62:56:6f:30:5e:a0:d1:e8:38:3e:a7:4b:27:07:
         34:a5:e8:6e:65:0c:f9:ff:6f:91:9e:ac:fb:3a:8e:bd:87:82:
         be:68:72:a5:b3:87:4c:46:22:04:2b:d3:9c:9f:0d:af:2d:b3:
         46:fc:74:4b:53:d4:3c:9c:6c:66:3c:95:21:a8:9a:de:2a:84:
         68:bc:43:d5:35:16:0b:73:e6:6e:16:17:ec:bc:6d:e1:4d:97:
         69:ca:90:59:3f:81:c1:5d:f9:48:b7:22:a8:ab:66:47:fb:54:
         70:d4:e0:27:6e:45:ba:fd:f2:43:73:35:59:0b:2a:a5:5e:0e:
         db:67:41:c5:95:2b:e8:a1:9c:62:22:6f:a2:e7:1e:21:18:97:
         0f:f4:2a:60:7d:5a:a0:12:3d:36:72:40:49:09:22:6d:29:d6:
         f1:b3:a2:ab:03:e9:66:2e:1f:fe:a1:bd:e6:a1:f4:86:0e:ae:
         36:0b:7a:b8:17:b0:24:27:62:1c:e9:75:de:47:ff:b4:90:4a:
         8b:42:ac:2b:f6:4d:51:43:ca:13:95:fb:ea:79:a3:c3:50:76:
         29:0c:fc:f3:59:e8:c4:e5:eb:55:74:f0:b5:88:52:27:32:4c:
         f5:90:7d:d1:b2:74:0b:90:e0:cb:b7:d1:0b:7e:11:5a:65:66:
         05:b0:f2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:41:04 2024 by rpki-client on console-fra.rpki-client.org