Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b8c69ed-efb3-3e42-bd92-6a4b7c554c99.roa
File:                     8b8c69ed-efb3-3e42-bd92-6a4b7c554c99.roa (raw, json)
Hash identifier:          1lj5po7Yo1Ra1lXZUlCcPMiUds0zSDZ6hlbuMrXV5rQ=
Subject key identifier:   91:57:57:74:51:51:1E:73:35:92:80:B1:D9:4B:FE:03:05:6E:F1:E4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452EB49D09C192BD0C62478640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b8c69ed-efb3-3e42-bd92-6a4b7c554c99.roa
Signing time:             Tue 12 Mar 2024 11:17:10 +0000
ROA not before:           Tue 12 Mar 2024 11:17:10 +0000
ROA not after:            Mon 10 Jun 2024 11:17:10 +0000
asID:                     24319
IP address blocks:        2600:1417:66::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:b4:9d:09:c1:92:bd:0c:62:47:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 12 11:17:10 2024 GMT
            Not After : Jun 10 11:17:10 2024 GMT
        Subject: CN=ae428b37-a82b-4343-8c47-f7f140d64a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:70:2c:fd:ed:14:ba:e5:8e:a4:37:3d:f7:
                    66:e2:d7:7c:11:3c:26:2b:55:cf:0d:a6:71:c8:4d:
                    9d:42:d9:5e:b8:7b:f6:92:e9:2f:8d:be:6e:ca:b6:
                    be:47:b4:e7:8f:51:0e:d7:f6:c8:e6:31:d7:a7:69:
                    6b:e2:ab:67:58:b0:cb:c1:2a:c9:e9:a0:35:d5:50:
                    26:cc:4c:86:cf:a8:ab:3c:60:b5:78:3c:d4:89:fd:
                    59:90:3e:e0:c8:50:a6:42:91:e0:3e:b3:7c:c6:e6:
                    8c:77:5a:94:ed:44:38:46:6b:38:aa:9c:4e:d7:62:
                    fd:97:2e:5d:32:c0:23:c9:79:24:fd:c8:6f:72:5d:
                    64:6f:e3:aa:40:75:fc:d1:80:8f:1d:fe:91:52:00:
                    d9:2e:ab:81:92:3b:26:dc:6a:ce:5a:a4:9e:59:e9:
                    ea:0a:1e:09:6c:55:b2:42:7a:89:53:d0:e8:ee:7e:
                    03:b2:22:81:d2:a4:ad:2e:3d:1e:77:64:38:c4:b3:
                    dd:c5:67:37:4b:5f:79:5b:4d:67:e1:5b:03:22:b8:
                    c1:0d:b9:1d:8d:0a:42:f7:b2:2f:77:67:3b:5f:b8:
                    d5:10:b9:d5:fe:4e:0e:ed:57:42:f9:b5:c7:1a:a5:
                    ec:ee:b3:8f:53:84:81:aa:be:00:76:92:c8:4a:fa:
                    71:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:57:57:74:51:51:1E:73:35:92:80:B1:D9:4B:FE:03:05:6E:F1:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b8c69ed-efb3-3e42-bd92-6a4b7c554c99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:66::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b4:0c:4b:78:84:55:d7:5a:e4:27:1d:ad:91:97:be:43:d5:
         1b:13:66:c6:d5:ea:3c:0d:00:bc:ff:96:08:a2:ee:d3:a4:cf:
         f2:77:5d:32:48:c5:fb:43:7d:6c:40:3e:7e:13:2e:a7:f8:9e:
         7e:e1:88:c7:8c:0a:c1:a5:22:74:9a:b1:7c:94:87:58:fd:fc:
         3b:1e:f2:48:11:ba:69:74:fc:3e:5d:be:71:75:7b:71:d6:74:
         1b:b6:e1:72:dc:b9:05:b7:92:33:b7:6d:27:62:9d:51:f3:a0:
         07:59:6e:b2:f1:1a:2f:33:bf:3a:3f:89:f9:c6:6b:78:9d:ae:
         35:1e:82:01:2b:ea:22:a9:03:61:01:44:78:73:67:1b:c3:da:
         d4:ff:fc:8e:f1:a6:bd:57:11:74:06:0f:f7:4e:e5:0c:5a:ca:
         21:84:dc:ca:bb:60:db:c7:e1:a1:5c:19:3c:c6:ef:5d:0e:2e:
         db:aa:3f:31:3c:18:85:a8:c5:96:64:69:d3:37:68:96:ee:32:
         46:4a:6d:c3:0b:4b:51:be:09:4f:b2:b9:0f:23:d5:4d:96:c5:
         dd:83:a6:55:64:8a:c0:f0:d4:62:a4:32:ee:f2:74:9d:86:43:
         ff:50:a0:89:dc:d9:11:83:a7:ea:1f:23:25:a0:e1:16:52:86:
         0e:8e:14:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:41:16 2024 by rpki-client on console-fra.rpki-client.org