Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97cc0d0a-fd43-3299-a30e-14d20ccdc906.roa
File:                     97cc0d0a-fd43-3299-a30e-14d20ccdc906.roa (raw, json)
Hash identifier:          6WroBHrWTdlNs8A5mHn5p5M7Yp9d5pYY1MBNf4cNfwk=
Subject key identifier:   D9:3B:59:9F:3A:22:7F:7D:97:F0:76:90:7A:F7:27:7D:03:91:A6:2F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452EA610533F9F99737C792680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97cc0d0a-fd43-3299-a30e-14d20ccdc906.roa
Signing time:             Tue 12 Mar 2024 10:47:51 +0000
ROA not before:           Tue 12 Mar 2024 10:47:51 +0000
ROA not after:            Mon 10 Jun 2024 10:47:51 +0000
asID:                     9498
IP address blocks:        2600:140f:fc00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:a6:10:53:3f:9f:99:73:7c:79:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 12 10:47:51 2024 GMT
            Not After : Jun 10 10:47:51 2024 GMT
        Subject: CN=80dc6e1f-3896-4285-b61b-5efeca00823b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f5:22:27:96:84:26:b8:cf:96:9f:5c:21:91:
                    8f:e9:da:e7:ee:23:8f:e3:e1:31:eb:8c:37:2a:92:
                    e2:8b:2b:1b:88:1e:7a:78:a9:19:79:60:10:be:fb:
                    17:f1:b6:01:7d:c1:88:2c:f9:76:26:82:b3:20:29:
                    73:90:32:93:36:7c:1f:c6:f8:90:a1:b2:eb:7b:65:
                    f0:08:38:96:e3:11:ab:8c:d2:df:b3:21:16:49:8b:
                    ab:78:20:22:ab:bf:f3:3e:a3:02:30:a2:2c:56:5c:
                    8a:37:b4:24:d2:ff:c4:aa:dc:b2:ab:bc:59:96:28:
                    c8:85:08:7b:ff:e5:cb:83:05:08:6d:29:64:9a:9f:
                    18:34:7f:9e:f6:07:d6:2a:6f:86:29:84:29:4a:eb:
                    1a:89:84:35:88:0b:18:03:71:f4:2d:b0:58:30:e8:
                    f6:78:09:be:32:fb:e0:ac:a5:f6:ff:20:b2:07:3c:
                    67:7f:09:84:95:ce:d6:8d:06:f4:fb:80:c7:10:bb:
                    58:eb:d2:33:99:33:e0:67:84:28:94:6b:f3:76:ca:
                    8b:ef:f6:91:d2:9c:37:8a:cd:1e:45:dc:19:ea:a3:
                    ef:7a:21:63:d9:9d:80:40:cb:28:d1:42:ee:8c:16:
                    6b:96:b4:2b:bb:61:6b:6d:15:5b:a1:bb:0f:7a:b4:
                    d7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3B:59:9F:3A:22:7F:7D:97:F0:76:90:7A:F7:27:7D:03:91:A6:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97cc0d0a-fd43-3299-a30e-14d20ccdc906.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:fc00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:99:81:f3:46:f0:a1:00:47:88:1b:7e:c0:bb:43:b7:53:3e:
         68:f2:12:76:02:be:39:c2:bb:81:ec:4b:8f:f5:06:9c:04:d5:
         50:f9:ac:e2:d0:cc:21:7b:ca:bf:1a:33:13:89:18:6d:1b:33:
         f3:c3:f5:bf:0b:2e:ff:d5:c3:32:b9:70:6c:b6:37:ce:9d:67:
         1e:9a:3d:9e:e5:e5:38:8d:a4:7b:bd:46:63:76:07:0b:aa:f4:
         90:72:0c:31:ed:71:34:4a:56:c5:06:7e:2b:9e:95:f9:2a:c4:
         6c:12:66:40:56:55:d0:b6:3d:8b:ef:33:86:50:6a:67:d5:cc:
         3b:14:cb:dd:7c:68:eb:a5:9f:4e:8c:42:00:84:e8:0f:11:78:
         5e:66:85:78:81:31:f1:3e:cf:0b:bf:f8:6b:09:26:28:30:09:
         87:ec:b3:ad:10:d9:19:83:f8:62:f8:b8:a8:11:cb:ab:36:22:
         22:61:e5:92:55:84:22:15:2f:ca:e7:6c:8b:37:d1:89:5a:30:
         aa:b3:05:0b:d8:62:ec:5b:57:45:c6:8a:68:4d:c0:e3:07:3e:
         9a:ab:08:b1:46:15:d9:f1:e5:b4:b7:83:6a:b0:ae:a8:72:2d:
         b2:60:21:78:b3:02:1e:45:39:6c:d7:f6:e9:ce:82:af:12:27:
         3b:c9:df:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:10:13 2024 by rpki-client on console-ams.rpki-client.org