Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1afa5d41-04bd-3d63-b8a9-820ee8d5f88c.roa
File:                     1afa5d41-04bd-3d63-b8a9-820ee8d5f88c.roa (raw, json)
Hash identifier:          eqjyvuRlBfLFR3Aa3OaqPnlRpLB0YbI4idCQgwtlywU=
Subject key identifier:   AF:0D:C6:08:B6:5E:0D:7D:01:B2:DD:D9:DD:89:B4:48:0D:C6:D5:E4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452EB48B6A6045E2BC62DAD540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1afa5d41-04bd-3d63-b8a9-820ee8d5f88c.roa
Signing time:             Tue 12 Mar 2024 11:17:02 +0000
ROA not before:           Tue 12 Mar 2024 11:17:02 +0000
ROA not after:            Mon 10 Jun 2024 11:17:02 +0000
asID:                     24319
IP address blocks:        2600:1413:e000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:b4:8b:6a:60:45:e2:bc:62:da:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 12 11:17:02 2024 GMT
            Not After : Jun 10 11:17:02 2024 GMT
        Subject: CN=5e9f8a3a-fb26-47dd-8811-7622ddc38337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:99:3e:74:78:ca:7f:23:25:71:9f:79:a3:3d:
                    32:f0:a7:81:14:01:f8:8c:66:c5:45:6d:ab:cd:bf:
                    9a:4e:c2:d4:ba:4f:9f:93:80:63:d1:97:97:4f:fc:
                    ef:33:76:98:6c:c4:af:8f:ef:17:8e:39:cf:d3:fb:
                    1b:36:c1:dc:b2:b8:dd:72:20:95:fa:e0:4c:16:6f:
                    12:20:50:97:01:6c:b5:d9:ee:68:9d:83:cd:72:f3:
                    f6:06:45:97:b3:8c:88:a7:bd:0d:da:d4:08:7a:d6:
                    46:4a:8b:25:7d:dd:84:d6:ac:8c:04:05:4e:de:e1:
                    8c:dd:39:6f:d7:1f:da:ae:65:37:89:4e:56:3b:34:
                    fd:17:95:69:23:25:47:1c:4f:07:4c:87:6e:40:aa:
                    bb:93:26:cd:2e:10:6e:1d:d5:8b:44:3e:18:d2:74:
                    f1:c9:78:ff:ae:ef:a5:de:3f:f7:2c:47:5f:5b:91:
                    8f:98:88:b1:55:ec:2f:fe:61:a6:4d:79:c0:32:61:
                    d7:96:25:a0:61:9b:4b:8b:78:88:0f:65:6c:75:ac:
                    26:31:cc:08:ff:10:8c:a9:c6:25:1c:28:d1:1c:35:
                    56:92:f9:85:50:78:be:a7:76:2c:8f:35:56:42:bf:
                    01:4c:cc:8a:b0:d5:bc:bc:5f:00:2c:aa:81:56:79:
                    dc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0D:C6:08:B6:5E:0D:7D:01:B2:DD:D9:DD:89:B4:48:0D:C6:D5:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1afa5d41-04bd-3d63-b8a9-820ee8d5f88c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1413:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e6:43:17:b1:1c:f1:19:62:d5:3e:f3:58:86:38:8f:73:cc:
         df:ea:81:b1:a6:f3:bf:ce:84:06:50:e0:eb:f6:f7:8b:8c:01:
         4e:dc:a6:12:2b:3f:b2:5b:a0:f5:3d:6c:f5:2d:8e:f1:08:0d:
         f8:47:a6:a9:74:ee:30:27:1c:c9:b5:dc:30:85:1e:5a:6c:2f:
         22:8f:e4:a8:94:82:87:fc:21:39:13:81:2e:4d:9c:54:37:6f:
         48:d7:cb:47:85:74:5d:ec:72:b0:36:8c:2f:a4:77:eb:69:16:
         b5:b6:75:b3:24:d4:77:c4:89:99:bb:0b:1f:79:7b:89:1c:37:
         00:1c:e5:ac:f5:42:8e:b6:f4:32:1d:b6:4a:ed:1c:fd:00:e5:
         d3:94:13:fc:52:46:68:84:0f:46:90:08:07:94:ae:12:b2:44:
         19:5f:af:c1:6c:70:50:2d:60:94:80:c7:f1:71:ae:17:38:18:
         a8:fe:15:99:84:14:e3:e3:67:f4:bc:0d:fd:61:60:54:c7:b7:
         78:ce:7b:ad:b7:81:96:44:d7:60:28:1c:72:79:c4:79:df:0d:
         6e:94:8e:bb:1b:3a:4d:6d:c9:c9:fd:f2:eb:3b:15:1a:c0:05:
         da:03:d7:fd:36:66:20:00:85:36:a6:87:15:d1:6a:13:34:22:
         ca:2f:67:83
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUutItqYEXivGLa1UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDMxMjExMTcwMloXDTI0MDYxMDExMTcwMlowLzEtMCsGA1UEAxMk
NWU5ZjhhM2EtZmIyNi00N2RkLTg4MTEtNzYyMmRkYzM4MzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Zk+dHjKfyMlcZ95oz0y8KeBFAH4jGbFRW2r
zb+aTsLUuk+fk4Bj0ZeXT/zvM3aYbMSvj+8XjjnP0/sbNsHcsrjdciCV+uBMFm8S
IFCXAWy12e5onYPNcvP2BkWXs4yIp70N2tQIetZGSoslfd2E1qyMBAVO3uGM3Tlv
1x/armU3iU5WOzT9F5VpIyVHHE8HTIduQKq7kybNLhBuHdWLRD4Y0nTxyXj/ru+l
3j/3LEdfW5GPmIixVewv/mGmTXnAMmHXliWgYZtLi3iID2VsdawmMcwI/xCMqcYl
HCjRHDVWkvmFUHi+p3YsjzVWQr8BTMyKsNW8vF8ALKqBVnncvwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK8Nxgi2Xg19AbLd2d2JtEgNxtXkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWFmYTVkNDEtMDRiZC0z
ZDYzLWI4YTktODIwZWU4ZDVmODhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUE+AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAvmQxexHPEZYtU+81iGOI9zzN/qgbGm87/OhAZQ4Ov294uMAU7c
phIrP7JboPU9bPUtjvEIDfhHpql07jAnHMm13DCFHlpsLyKP5KiUgof8ITkTgS5N
nFQ3b0jXy0eFdF3scrA2jC+kd+tpFrW2dbMk1HfEiZm7Cx95e4kcNwAc5az1Qo62
9DIdtkrtHP0A5dOUE/xSRmiED0aQCAeUrhKyRBlfr8FscFAtYJSAx/Fxrhc4GKj+
FZmEFOPjZ/S8Df1hYFTHt3jOe623gZZE12AoHHJ5xHnfDW6UjrsbOk1tycn98us7
FRrABdoD1/02ZiAAhTamhxXRahM0IsovZ4M=
-----END CERTIFICATE-----
Generated at Fri May 17 22:03:00 2024 by rpki-client on console-ams.rpki-client.org