Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1552f015-344f-305e-8a29-a5bfd2897ed6.roa
File:                     1552f015-344f-305e-8a29-a5bfd2897ed6.roa (raw, json)
Hash identifier:          Y22tjsdG0I0znpiMXK2zUdSee4raOo4+lKwFSICeLEc=
Subject key identifier:   DF:95:AF:0F:16:C2:D1:FF:77:55:AE:30:17:24:D3:F7:C8:79:90:CC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584523B43EC2BE8DEDA025A67B78
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1552f015-344f-305e-8a29-a5bfd2897ed6.roa
Signing time:             Fri 08 Mar 2024 12:42:32 +0000
ROA not before:           Fri 08 Mar 2024 12:42:32 +0000
ROA not after:            Thu 06 Jun 2024 11:42:32 +0000
asID:                     20940
IP address blocks:        2600:1408:4800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:b4:3e:c2:be:8d:ed:a0:25:a6:7b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 12:42:32 2024 GMT
            Not After : Jun  6 11:42:32 2024 GMT
        Subject: CN=e4da2662-95cd-44b9-8694-eb3558f7e1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3f:56:7a:60:49:27:27:2e:9b:03:fc:47:dd:
                    cd:23:7a:d2:fc:bc:19:c4:eb:cf:b9:ed:d0:10:64:
                    d4:44:23:ab:a3:be:88:c9:85:6b:6d:98:92:25:b2:
                    a5:18:0f:cf:84:d7:07:20:32:07:43:1a:ce:1b:1c:
                    19:4d:ca:2e:f3:56:f8:cd:34:70:ed:d2:8e:a8:22:
                    d8:b6:b0:51:1d:de:fb:ff:a7:22:14:f7:5d:4a:7e:
                    de:c6:ce:0b:44:25:4d:0e:89:cd:c0:c8:45:52:27:
                    eb:9e:a1:02:36:63:7e:c9:b3:c1:58:e0:6f:02:55:
                    18:44:21:45:bc:46:12:1c:61:1a:db:b6:62:b6:4e:
                    df:98:aa:17:92:74:bc:0c:bb:90:40:c4:01:ea:5e:
                    36:9a:f0:78:89:58:25:55:f2:dc:33:4e:5c:54:8c:
                    b3:16:c2:71:f6:1b:45:9a:a1:41:06:51:ab:ef:e1:
                    76:74:d4:e1:17:10:ab:55:39:9d:55:56:e8:51:5e:
                    93:db:c4:56:a9:6b:6b:9c:41:af:fc:a4:93:51:8f:
                    02:e5:ee:9c:46:5e:b7:92:68:43:ba:a9:5b:bf:f4:
                    e5:fc:35:81:b7:3a:79:f1:df:2e:ee:6b:42:04:4c:
                    e9:8b:7c:f2:80:42:3d:a8:58:f3:ed:0b:bb:cc:29:
                    6c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:95:AF:0F:16:C2:D1:FF:77:55:AE:30:17:24:D3:F7:C8:79:90:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1552f015-344f-305e-8a29-a5bfd2897ed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:4800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:9e:65:95:3a:c5:19:79:03:ce:4f:7f:6e:8a:10:d2:ce:bf:
         d3:a2:ca:72:95:99:4a:e3:76:25:0b:55:72:c6:b6:0f:3b:32:
         18:90:6c:50:a9:f9:51:7b:11:ea:b6:0f:cc:ed:7d:a2:76:1f:
         39:89:ab:19:d6:76:14:00:6f:a0:55:5a:d5:53:39:28:bf:7d:
         27:db:60:f9:88:bb:c4:3d:7f:54:93:66:4d:2f:f8:bb:67:71:
         5d:51:08:2c:9c:7b:60:e9:23:d8:8e:9f:5a:86:52:7b:65:da:
         59:9b:41:6e:ba:1d:f9:89:00:95:5f:bd:50:11:e8:ff:69:d9:
         1d:4e:41:e1:14:bb:9b:41:e0:17:37:37:67:ac:38:c1:c7:02:
         4f:e1:39:b9:ce:57:11:b5:6d:bb:dd:b0:86:1a:cd:7a:ab:ce:
         18:47:ec:59:28:8c:ce:88:14:66:91:55:11:49:2b:14:f9:36:
         af:24:40:d9:07:0d:fb:0f:1c:46:8e:39:5e:62:9c:4b:5c:89:
         37:fc:ac:68:7e:d1:2c:7e:a6:a0:fb:ab:7d:7d:a2:b9:5b:39:
         e4:84:c0:db:4a:83:a8:45:49:dc:0e:6e:40:3a:aa:ed:bc:39:
         5c:af:90:ea:b6:24:86:4c:36:07:7b:72:86:8a:e9:5d:37:68:
         f2:7e:c0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:05:17 2024 by rpki-client on console-ams.rpki-client.org