Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f3bcfc1-f449-367b-ad44-b7c8bd582a92.roa
File:                     8f3bcfc1-f449-367b-ad44-b7c8bd582a92.roa (raw, json)
Hash identifier:          rTkbWAYsZeas4uy6lNNU3Zt9Ce9+rb6NDIuZzK/mMi8=
Subject key identifier:   8E:3F:5E:90:ED:02:8E:19:8E:FC:8F:97:B8:30:35:20:8D:8D:8C:75
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452393AD787B680A52CF3B6B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f3bcfc1-f449-367b-ad44-b7c8bd582a92.roa
Signing time:             Fri 08 Mar 2024 11:36:55 +0000
ROA not before:           Fri 08 Mar 2024 11:36:55 +0000
ROA not after:            Thu 06 Jun 2024 10:36:55 +0000
asID:                     20940
IP address blocks:        2600:1400:c000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:93:ad:78:7b:68:0a:52:cf:3b:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 11:36:55 2024 GMT
            Not After : Jun  6 10:36:55 2024 GMT
        Subject: CN=152cee67-19b0-45f5-a409-bb7e4b4a0fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ae:ca:41:d8:43:4f:1c:02:39:9b:6e:6a:e5:
                    83:88:27:c0:45:26:46:5a:61:99:57:69:43:06:f9:
                    cd:a6:ee:d5:18:18:ea:46:17:71:28:6b:cd:90:d7:
                    9f:01:bb:59:cb:71:e8:95:74:75:a2:ff:39:3a:ab:
                    f7:50:f5:4e:9e:a0:bd:b6:55:27:ae:c7:2d:53:ba:
                    62:5e:25:96:6b:a2:af:89:96:6d:60:a9:fb:e5:5f:
                    c3:f9:c0:d1:65:9b:ea:d0:84:df:c3:0b:56:51:33:
                    b8:ca:0d:ec:b3:d5:49:a8:0d:f7:65:17:a7:f3:9b:
                    ba:23:15:f9:ce:ca:60:56:20:06:95:d5:88:f7:c2:
                    a3:dd:d7:09:c2:4d:11:87:27:ef:0a:95:62:20:b5:
                    75:f6:55:15:d4:03:94:6c:00:d7:34:26:37:51:fb:
                    d2:48:d1:2e:ca:db:c9:eb:95:07:33:b5:bd:a2:fa:
                    c1:73:20:0f:3b:80:d7:f1:90:09:59:d6:c7:fd:c9:
                    4e:12:58:e3:31:78:dc:66:d5:56:18:0a:27:0f:ae:
                    14:df:8b:9a:65:c7:18:f5:b0:03:99:c3:d0:e4:e0:
                    ec:90:07:55:62:2c:dd:31:59:94:87:1f:9a:e3:34:
                    73:45:b5:d2:15:ab:b9:43:b8:15:15:f7:dc:fa:6d:
                    9c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3F:5E:90:ED:02:8E:19:8E:FC:8F:97:B8:30:35:20:8D:8D:8C:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f3bcfc1-f449-367b-ad44-b7c8bd582a92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1400:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:1e:37:57:4e:5c:44:6d:31:71:33:78:a7:02:e9:e9:1c:ea:
         4d:82:3c:d4:70:b8:9a:60:a6:d6:42:0e:b8:78:48:df:60:d6:
         fa:dd:01:d9:0b:c0:4f:74:22:b2:9a:93:8a:87:95:d6:92:82:
         e2:07:4a:3d:bc:4f:3e:5d:37:7f:ce:00:a2:09:a1:18:e8:df:
         30:f0:50:e6:e7:30:e8:20:19:c8:84:78:58:21:e9:d7:3e:4e:
         13:97:ab:65:26:5a:76:2e:33:fd:3c:b4:38:24:cf:ca:ea:5e:
         98:a3:d1:a2:14:34:9d:1c:f2:b6:1d:d0:98:4c:17:fe:51:4b:
         50:52:76:f0:cd:c8:4d:11:e6:66:48:0b:2d:c4:f3:53:08:c7:
         85:ee:23:5c:1d:7d:60:19:b0:f1:49:f4:0d:e5:70:4b:e0:26:
         05:88:48:4d:97:d6:e0:cf:0a:52:a5:2a:69:f5:42:02:c2:f0:
         2d:f0:95:ce:66:31:e8:a8:7c:e9:dc:00:3e:f2:c6:89:20:dd:
         fe:ee:92:74:7d:3e:21:e9:65:6f:6c:ca:ba:a1:d3:af:82:dc:
         7d:13:10:1f:55:95:08:e8:bc:e5:38:47:c5:11:06:81:67:9c:
         89:48:c7:94:c9:02:96:7c:55:b3:ce:d0:70:5e:97:99:77:cb:
         06:5f:91:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:41:16 2024 by rpki-client on console-fra.rpki-client.org