Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f3b498d-3a79-3e6a-ab59-da6cd2a3d587.roa
File:                     3f3b498d-3a79-3e6a-ab59-da6cd2a3d587.roa (raw, json)
Hash identifier:          olWzPTMw0x1RbNrIf/VRZju6/CxXM9jEh+0uDGWvSeo=
Subject key identifier:   62:30:65:95:C4:15:81:3F:EB:E4:C1:00:E8:DC:79:EC:61:E0:77:12
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452BF56BC20649C00A8227F4B0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f3b498d-3a79-3e6a-ab59-da6cd2a3d587.roa
Signing time:             Mon 11 Mar 2024 11:40:20 +0000
ROA not before:           Mon 11 Mar 2024 11:40:20 +0000
ROA not after:            Sun 09 Jun 2024 11:40:20 +0000
asID:                     35994
IP address blocks:        2600:1403:6400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2b:f5:6b:c2:06:49:c0:0a:82:27:f4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 11 11:40:20 2024 GMT
            Not After : Jun  9 11:40:20 2024 GMT
        Subject: CN=9c918d4c-8d1f-40e6-8c2a-3d4f4ca3a827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2d:4c:18:33:90:25:08:96:6d:09:9b:fc:48:
                    2f:c1:a0:b3:fb:41:ab:dd:b4:db:11:17:f2:05:32:
                    b2:8b:32:a0:10:0b:07:98:f7:5c:62:40:34:f2:e8:
                    37:3e:d9:9f:ba:bf:f6:8e:15:48:62:ec:67:b2:43:
                    48:af:c2:9c:ae:29:fd:42:86:84:38:9e:f9:eb:be:
                    24:c8:b0:ce:1f:7b:56:5c:c3:89:4e:35:8b:30:47:
                    ed:4a:2a:9d:28:46:8a:64:b1:68:4a:14:f6:19:57:
                    a6:91:7b:bd:32:fc:04:78:ff:2f:33:dc:9d:0f:22:
                    cb:49:4b:a7:93:0c:10:87:05:73:bb:f3:77:93:f8:
                    80:b9:10:22:21:8b:b7:42:66:ee:23:a6:32:bb:e4:
                    8f:06:c0:82:2f:73:77:5e:0d:c1:57:8e:4f:94:96:
                    c4:a2:6c:9d:fe:7f:1b:d8:dd:df:19:9f:9e:c0:46:
                    bc:1b:af:1f:2d:3b:ae:20:07:32:78:89:b1:38:96:
                    70:d7:24:d5:7f:a0:72:3c:63:0f:a5:36:3b:21:a5:
                    28:ad:8d:7c:72:96:0d:05:7f:9b:5e:5a:2d:59:e5:
                    9b:b7:63:8f:86:f8:97:6c:b7:13:32:8a:98:8e:97:
                    1e:44:70:79:9b:10:a8:25:e5:ed:16:6a:64:58:9c:
                    ca:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:30:65:95:C4:15:81:3F:EB:E4:C1:00:E8:DC:79:EC:61:E0:77:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f3b498d-3a79-3e6a-ab59-da6cd2a3d587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1403:6400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:31:b7:a6:68:8c:7c:e9:dd:f6:8d:80:b8:02:e1:76:9b:c9:
         cc:3a:84:31:52:f1:f0:27:b0:0a:cb:10:6b:31:14:51:75:a5:
         13:df:85:69:73:65:4a:f7:97:5d:07:a3:5d:58:3e:58:a3:41:
         e2:36:71:13:99:5f:c2:0b:32:e3:89:1a:a5:57:dd:16:0b:1a:
         a4:91:22:d3:1d:57:8c:91:70:12:3a:45:ff:2f:94:b5:98:99:
         23:66:3f:14:0c:58:89:36:b8:2d:a2:38:4c:2e:76:5a:6c:e5:
         a3:c8:fc:7f:60:26:19:64:9f:5e:e7:6f:78:e1:24:19:88:b7:
         97:57:65:1e:80:90:01:18:39:7f:85:c8:06:0b:f1:61:af:40:
         5c:b4:73:9e:6c:17:37:3a:fa:cd:53:03:4d:79:77:4c:4e:66:
         a5:90:6c:2c:3c:bd:d8:04:bd:94:36:f8:87:5e:98:25:3c:55:
         43:98:c2:54:c3:74:6a:ec:aa:a9:dd:8a:84:a1:53:b8:cf:62:
         4e:dc:c9:fa:e8:6f:b6:19:d5:c1:33:08:32:d7:2b:bb:1d:75:
         0e:fe:dc:ab:96:b9:00:74:2a:59:a6:1d:e2:ea:90:bd:fd:06:
         07:c4:34:92:e3:25:b8:64:56:c0:04:f9:15:b1:ee:f3:43:5f:
         3a:e5:80:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:57:58 2024 by rpki-client on console-fra.rpki-client.org