Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3477f522-b074-3afd-88d9-642afa0dc575.roa
File:                     3477f522-b074-3afd-88d9-642afa0dc575.roa (raw, json)
Hash identifier:          MNyBGYshhFBHm/96+qnjx0EfbwxTYzNacHPwpFFkqYI=
Subject key identifier:   72:56:85:20:4A:28:99:E7:6F:B3:0F:78:B0:4B:AF:85:BB:02:BB:2C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845239BCFDF9C3E13719DB0DD40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3477f522-b074-3afd-88d9-642afa0dc575.roa
Signing time:             Fri 08 Mar 2024 11:53:19 +0000
ROA not before:           Fri 08 Mar 2024 11:53:19 +0000
ROA not after:            Thu 06 Jun 2024 10:53:19 +0000
asID:                     20940
IP address blocks:        2600:1405:6c00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:9b:cf:df:9c:3e:13:71:9d:b0:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 11:53:19 2024 GMT
            Not After : Jun  6 10:53:19 2024 GMT
        Subject: CN=640745fc-2c98-43ec-956c-9ea16d82bb79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1a:52:c0:ba:17:a5:e8:74:47:52:db:d7:ba:
                    e2:45:55:ca:ba:3e:02:fc:e6:06:b5:88:b8:53:60:
                    ef:e8:06:a6:b3:f5:56:82:a0:b6:2f:9f:04:23:cd:
                    c3:bd:fd:de:04:00:8f:79:74:62:60:95:c9:32:65:
                    f6:2c:33:c0:ff:cf:e0:79:73:3c:48:aa:ee:21:88:
                    bf:4f:0e:8c:7e:58:82:91:da:d7:97:a5:4c:25:62:
                    eb:0c:d0:28:a4:06:7b:15:79:bb:44:c8:07:e7:3a:
                    39:65:de:d2:9e:c5:75:ad:65:f3:50:8f:20:ed:29:
                    26:69:4d:f3:81:c9:f4:b3:5e:58:55:29:c7:52:53:
                    a2:35:b4:98:ed:be:0d:49:56:69:e3:18:fc:6c:b4:
                    18:77:88:20:81:c2:2f:73:77:db:e2:91:bf:e1:0a:
                    e4:2d:10:b1:ff:5a:cc:62:a4:f7:3e:99:82:b4:01:
                    bf:e8:33:45:e0:9b:66:06:24:60:db:c7:f5:12:09:
                    f7:db:11:4e:45:b3:0e:33:6b:50:56:09:34:16:bb:
                    68:02:b3:0b:07:90:ee:d0:9c:f1:45:dd:63:af:aa:
                    f9:8f:76:85:61:78:59:9c:6c:1c:88:fd:41:9d:54:
                    d9:18:0d:5c:b5:5f:2c:d2:b3:ff:49:dd:88:7c:0d:
                    e7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:56:85:20:4A:28:99:E7:6F:B3:0F:78:B0:4B:AF:85:BB:02:BB:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3477f522-b074-3afd-88d9-642afa0dc575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1405:6c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:53:af:96:e9:14:ad:bf:94:e3:a6:70:2f:f0:4a:04:90:07:
         ab:bb:35:bc:b2:c5:1c:0b:8a:00:2f:dc:5f:77:a0:f3:69:f7:
         60:2b:90:94:bc:d0:b2:1f:9e:a5:27:8e:0e:17:8c:c2:ed:03:
         a6:3b:5f:ef:d7:fc:88:19:00:3a:78:6d:17:c6:a5:ac:9f:f2:
         65:40:b4:01:f5:94:f9:97:db:ad:aa:f7:9b:d3:d3:a5:43:6e:
         2f:b1:9a:06:ef:aa:86:5b:c6:50:0c:46:6c:45:22:53:ff:15:
         95:d7:f2:0e:bc:28:94:fa:e7:46:c2:a4:c1:ff:ea:77:86:2b:
         19:33:e3:b3:af:8e:9a:40:11:69:ce:af:2d:0f:1c:f2:02:93:
         82:58:ab:1f:4f:2e:63:f2:11:f2:1a:b1:ab:55:1f:ac:21:14:
         3f:df:17:3f:3c:85:38:97:24:ab:cc:ff:56:1f:89:c5:31:20:
         e0:eb:69:06:68:7e:5d:4d:8c:ed:a5:d4:13:31:9b:19:22:50:
         24:39:76:c0:c6:06:07:df:e0:30:c6:d5:93:c2:f9:06:0a:e1:
         b4:f0:c4:f4:5a:a2:ea:52:30:ec:ea:1d:db:ca:ea:c6:27:e6:
         8b:f4:04:f3:63:ee:e0:d8:08:6a:64:0d:81:db:10:96:86:d5:
         8f:f7:d0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:01 2024 by rpki-client on console-fra.rpki-client.org