Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96db4bf8-3263-3b06-99c1-0a2205379641.roa
File:                     96db4bf8-3263-3b06-99c1-0a2205379641.roa (raw, json)
Hash identifier:          QGjeenZqmq/X7JllmzJJ1yZsuS3u45QiR/MrcL017g8=
Subject key identifier:   03:E5:0D:0A:DD:74:03:FD:F6:9E:88:25:DF:0A:52:4F:1A:50:69:D4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452C0ADD4E779B687C57CA8F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96db4bf8-3263-3b06-99c1-0a2205379641.roa
Signing time:             Mon 11 Mar 2024 12:23:32 +0000
ROA not before:           Mon 11 Mar 2024 12:23:32 +0000
ROA not after:            Sun 09 Jun 2024 12:23:32 +0000
asID:                     35994
IP address blocks:        2600:1406:800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:0a:dd:4e:77:9b:68:7c:57:ca:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 11 12:23:32 2024 GMT
            Not After : Jun  9 12:23:32 2024 GMT
        Subject: CN=5466bacb-fb5a-46ea-bc97-1342a194192f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9e:7b:10:15:ca:4e:ad:2b:46:cf:1b:bc:95:
                    54:7d:9f:de:43:f8:97:7d:b6:e0:e4:6e:4d:a2:54:
                    5f:47:b4:6c:4f:46:52:a2:4f:30:d0:23:2a:19:bd:
                    bf:cf:27:04:ed:73:32:5c:4d:ed:4d:5a:5c:4c:28:
                    34:7a:ad:e8:92:78:a5:20:fc:b2:b9:80:dc:42:ef:
                    95:c6:fc:e2:c2:e1:ec:84:f5:8f:79:4a:e3:ac:73:
                    92:66:fe:06:47:f6:5a:17:08:df:a1:96:6f:06:45:
                    e2:97:54:25:5a:32:bc:52:f2:7e:f6:d5:4c:ff:d4:
                    7a:f7:e2:a0:b6:1c:3d:be:73:b8:88:22:ce:50:81:
                    3a:13:f1:9e:4d:91:d5:96:52:9e:0c:0e:73:b1:66:
                    0d:d1:e7:1b:21:5c:73:75:0d:d2:a2:68:07:e9:27:
                    33:9c:c9:06:4f:f4:b7:3e:5f:b8:37:6b:7a:46:b8:
                    c4:c1:37:d9:af:71:99:23:99:44:4f:af:7f:3b:3d:
                    29:65:54:54:8a:10:9b:b1:d2:f5:88:b3:89:db:a0:
                    32:42:27:26:04:f3:81:ad:e8:94:20:41:32:32:4b:
                    3c:83:66:17:de:30:5a:61:62:71:33:9f:1f:27:e3:
                    ae:a7:90:ac:61:95:21:1b:77:96:9d:a2:54:cb:87:
                    71:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E5:0D:0A:DD:74:03:FD:F6:9E:88:25:DF:0A:52:4F:1A:50:69:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96db4bf8-3263-3b06-99c1-0a2205379641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:79:b9:29:6b:d3:27:97:19:3f:25:fa:29:e9:34:10:34:a9:
         c1:92:06:eb:2a:20:a4:5b:4d:5a:0b:8f:71:35:01:44:1b:8a:
         90:92:37:ed:17:ce:2e:6d:bf:eb:3a:82:ac:c8:85:0a:0b:77:
         bf:dd:46:5e:ee:a8:1d:11:62:ee:fb:de:b5:43:ed:44:d9:1b:
         8d:17:51:2c:3b:96:c8:4e:6c:c6:84:8f:55:6d:78:3b:b9:41:
         f6:6c:14:aa:8e:df:be:68:0b:08:fa:10:28:7c:92:7a:e3:a1:
         dd:2c:b6:49:1e:0a:90:e6:5a:a7:3b:be:cd:b7:67:47:b9:53:
         b7:ad:32:50:5e:ae:bc:bd:3f:99:86:55:31:cc:0e:be:f5:c4:
         b1:f1:ae:8a:92:85:ad:bb:51:cd:eb:b6:d8:db:df:5c:93:d6:
         3a:3f:34:59:bd:f0:76:cb:08:31:f1:a9:7d:9a:c0:55:ac:54:
         29:30:43:5a:ff:cf:1b:78:95:ce:bc:46:e2:c8:5d:23:ea:73:
         e6:20:28:f7:c2:e1:d7:e5:0e:29:e8:63:1f:3d:3c:a4:4a:24:
         dc:ae:01:27:56:23:e0:ea:aa:e6:0f:30:ce:e1:ef:f5:bb:89:
         65:56:a9:8a:14:e9:e1:bf:1a:75:bd:e1:a1:bb:30:53:db:59:
         76:84:b3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:03:12 2024 by rpki-client on console-ams.rpki-client.org