Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b62b8a1-5c7e-3e2c-999f-cb5c7d97fa87.roa
File:                     9b62b8a1-5c7e-3e2c-999f-cb5c7d97fa87.roa (raw, json)
Hash identifier:          7FexRfHbf3pxsad+MX6iBlyzxLCsiLEEuKntrQSss40=
Subject key identifier:   8F:5E:B4:DA:7A:E8:52:BD:24:4C:E3:40:2C:AA:2A:69:E9:CB:01:AC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845840DC50D234107A83DDB2E60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b62b8a1-5c7e-3e2c-999f-cb5c7d97fa87.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     35994
IP address blocks:        2600:1406:47::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:c5:0d:23:41:07:a8:3d:db:2e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=8ea13dd6-4a23-4f8b-9363-9c475ab697b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c3:34:76:34:8b:6b:72:8a:0d:63:59:bc:d0:
                    5a:f9:57:2a:c0:09:e4:4b:83:f2:eb:2a:2c:1e:4a:
                    76:47:bb:4f:10:9c:7d:15:80:1d:c1:93:0a:4d:5c:
                    d4:c4:7c:ca:81:56:4a:ff:0c:8c:10:28:2c:2a:9b:
                    3c:79:6f:04:43:ba:9d:5f:97:47:f3:d0:87:e4:43:
                    1b:c7:0b:9a:bf:9b:4c:9f:61:15:28:23:6e:1d:b3:
                    fa:e9:1e:8a:e0:69:b1:e9:b8:e3:7f:5c:77:ce:2c:
                    d8:20:5c:1a:91:b4:9c:e0:ef:4a:23:2a:c0:84:64:
                    a3:19:7e:fb:ea:ce:7f:ec:16:bf:1a:7e:42:31:e8:
                    00:87:89:03:85:f0:bb:53:84:8a:da:56:ef:f1:23:
                    b4:9f:ee:99:8c:eb:ce:16:81:63:82:b9:5e:4b:39:
                    28:f7:2c:90:20:f2:90:8d:9b:68:02:29:10:51:45:
                    ad:98:6b:aa:44:ad:04:70:ed:29:84:8e:5d:94:ea:
                    45:14:18:4a:e2:48:1d:d4:f8:fb:75:85:c1:3e:05:
                    47:e0:25:ae:bd:2b:7d:cc:f7:7c:61:55:17:2f:e2:
                    8b:8c:f9:a7:51:4e:b0:d1:a5:1c:54:2d:d6:1a:90:
                    20:28:a2:09:1b:3b:7b:37:c3:7f:76:b5:36:9a:4f:
                    34:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5E:B4:DA:7A:E8:52:BD:24:4C:E3:40:2C:AA:2A:69:E9:CB:01:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b62b8a1-5c7e-3e2c-999f-cb5c7d97fa87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:47::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a0:50:a1:7e:e5:89:6c:6a:60:24:37:86:b6:d8:a6:da:54:
         6f:2b:48:9a:b4:85:15:cb:f1:4d:42:6f:3a:5f:6a:31:72:b8:
         75:bc:bc:ca:fc:d8:02:62:ab:95:45:5e:66:63:a6:23:85:89:
         23:94:8f:50:06:40:c3:72:da:77:0c:30:2b:c5:f4:a5:56:c3:
         de:32:2f:de:82:b6:bf:2a:4b:09:31:89:6c:f9:b5:8d:60:5f:
         28:fb:e6:eb:1b:c1:7f:11:22:42:8c:e4:a1:5f:8a:76:22:bb:
         05:e8:30:24:1a:a1:7b:44:b6:8e:9e:6a:bf:dd:76:b2:7f:1c:
         8e:d3:96:dd:94:da:62:8c:4f:b8:f1:1f:eb:7e:e4:90:b5:02:
         bc:36:77:eb:bf:c9:ac:ba:12:d4:1e:82:9e:3a:18:f9:38:87:
         b9:1b:92:05:bd:68:7e:8e:08:a8:f9:a8:38:2c:bc:73:3f:99:
         40:72:25:49:90:56:ec:a9:5f:e4:6c:cd:2f:a6:35:fd:eb:ca:
         60:b8:2b:4b:f9:91:6e:ab:d6:48:18:d0:9f:cd:10:aa:e9:aa:
         95:f4:cf:57:0d:76:f9:ed:34:71:8c:65:28:e9:48:c2:e4:f5:
         39:a4:80:4a:d5:28:a3:ff:61:f3:c3:bb:50:5c:2a:67:be:85:
         77:07:14:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:09:29 2024 by rpki-client on console-ams.rpki-client.org