Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e15591b-8194-35ed-bcb5-5b5ae35de6c9.roa
File:                     9e15591b-8194-35ed-bcb5-5b5ae35de6c9.roa (raw, json)
Hash identifier:          R5C5QLROhWbx14+UoDhIiANHjz+Fz7u5m4CnY1d5mtQ=
Subject key identifier:   0A:98:39:39:B0:44:C8:6F:BF:25:23:6D:F1:B8:27:16:D8:23:F3:51
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452372E8FA254C6CBA78FF7F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e15591b-8194-35ed-bcb5-5b5ae35de6c9.roa
Signing time:             Fri 08 Mar 2024 10:30:54 +0000
ROA not before:           Fri 08 Mar 2024 10:30:54 +0000
ROA not after:            Thu 06 Jun 2024 09:30:54 +0000
asID:                     20940
IP address blocks:        2600:1413:5000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:72:e8:fa:25:4c:6c:ba:78:ff:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 10:30:54 2024 GMT
            Not After : Jun  6 09:30:54 2024 GMT
        Subject: CN=07b1c03f-79db-44b8-8fc7-dd513ea0f711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:82:c4:3c:7e:5f:91:6c:9f:d4:0a:1b:f4:0e:
                    51:9f:10:95:6d:e6:63:ec:cd:97:da:a6:e0:a8:60:
                    c3:85:10:8a:83:2c:3d:8b:97:47:57:dc:bf:da:19:
                    c7:52:43:00:09:6d:2c:29:58:ec:a8:75:02:40:fa:
                    91:89:da:2a:8b:4c:e8:c0:e5:e3:75:25:65:dc:57:
                    0b:e6:df:af:86:d0:41:47:6c:03:5e:30:74:b4:8c:
                    49:32:80:73:8e:50:4c:d9:07:6a:6a:5a:a9:d0:19:
                    be:c2:fa:8a:2f:91:a9:9f:13:ea:a8:c0:55:25:e9:
                    0b:22:7e:c9:93:a2:13:8c:61:31:3e:f0:11:b2:bc:
                    93:63:98:e1:7a:9a:f4:e3:56:99:14:e1:23:46:07:
                    e5:ea:d6:f2:20:cf:d6:a4:db:bd:53:88:fe:a7:a4:
                    d7:6d:75:53:47:ba:19:51:b3:f5:6a:c0:3f:36:d1:
                    b0:1f:30:fb:13:ca:bc:17:b7:d7:d1:78:60:bd:b3:
                    c2:de:aa:ed:ec:15:37:9c:48:51:06:44:34:b2:15:
                    ba:24:61:12:06:cf:44:ee:62:bf:4f:41:6a:6d:76:
                    29:57:27:2f:95:eb:58:64:bb:f7:3e:26:a9:43:0b:
                    ec:31:3c:9f:21:9e:2c:b0:10:f3:95:cb:e9:2f:73:
                    e5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:98:39:39:B0:44:C8:6F:BF:25:23:6D:F1:B8:27:16:D8:23:F3:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e15591b-8194-35ed-bcb5-5b5ae35de6c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1413:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:5c:ed:e6:ae:66:c6:c4:59:9f:19:cc:fc:1e:2d:ef:cf:56:
         ac:ab:bd:0a:2a:88:bd:7d:8a:17:85:f5:97:e6:5f:94:d2:f5:
         2e:82:ab:4b:81:a0:9b:ed:3a:51:28:6e:50:ee:aa:f8:7e:6a:
         f2:8b:83:c7:09:5b:9e:13:dc:da:92:e2:b1:e1:9a:12:46:f2:
         c2:c8:2c:c9:5d:1b:37:91:cc:ee:29:1d:77:45:b5:3c:93:af:
         36:34:89:d6:a4:0b:8a:50:45:30:18:70:0f:45:dc:13:91:86:
         78:38:05:c1:69:4d:b0:d9:df:53:dc:9a:48:d6:f7:13:74:14:
         7b:76:e2:3a:ff:0b:b9:5a:fd:df:ba:08:2b:69:c5:56:df:3f:
         de:6b:be:95:fa:71:22:07:d9:f3:5f:e2:de:09:d3:40:4b:2e:
         ab:6b:9a:dc:ca:7a:12:0f:5d:3d:62:f2:c8:cd:3e:43:38:2b:
         28:75:ae:79:f8:13:2a:3d:5c:5c:7c:69:30:4c:43:74:75:eb:
         bd:f9:b1:4a:79:fa:3d:0b:3c:61:32:ac:57:5c:12:ec:69:fd:
         35:9f:4b:d9:32:9e:40:98:d0:e5:06:23:c7:c4:c9:0b:2c:3c:
         a3:09:f6:f8:d4:9d:d1:d7:dc:c8:46:3a:18:99:54:fa:8b:3f:
         42:74:31:e9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUjcuj6JUxsunj/fwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDMwODEwMzA1NFoXDTI0MDYwNjA5MzA1NFowLzEtMCsGA1UEAxMk
MDdiMWMwM2YtNzlkYi00NGI4LThmYzctZGQ1MTNlYTBmNzExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oLEPH5fkWyf1Aob9A5RnxCVbeZj7M2X2qbg
qGDDhRCKgyw9i5dHV9y/2hnHUkMACW0sKVjsqHUCQPqRidoqi0zowOXjdSVl3FcL
5t+vhtBBR2wDXjB0tIxJMoBzjlBM2Qdqalqp0Bm+wvqKL5GpnxPqqMBVJekLIn7J
k6ITjGExPvARsryTY5jhepr041aZFOEjRgfl6tbyIM/WpNu9U4j+p6TXbXVTR7oZ
UbP1asA/NtGwHzD7E8q8F7fX0XhgvbPC3qrt7BU3nEhRBkQ0shW6JGESBs9E7mK/
T0FqbXYpVycvletYZLv3PiapQwvsMTyfIZ4ssBDzlcvpL3PlQQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAqYOTmwRMhvvyUjbfG4JxbYI/NRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWUxNTU5MWItODE5NC0z
NWVkLWJjYjUtNWI1YWUzNWRlNmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUE1AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFtc7eauZsbEWZ8ZzPweLe/PVqyrvQoqiL19iheF9ZfmX5TS9S6C
q0uBoJvtOlEoblDuqvh+avKLg8cJW54T3NqS4rHhmhJG8sLILMldGzeRzO4pHXdF
tTyTrzY0idakC4pQRTAYcA9F3BORhng4BcFpTbDZ31PcmkjW9xN0FHt24jr/C7la
/d+6CCtpxVbfP95rvpX6cSIH2fNf4t4J00BLLqtrmtzKehIPXT1i8sjNPkM4Kyh1
rnn4Eyo9XFx8aTBMQ3R16735sUp5+j0LPGEyrFdcEuxp/TWfS9kynkCY0OUGI8fE
yQssPKMJ9vjUndHX3MhGOhiZVPqLP0J0Mek=
-----END CERTIFICATE-----
Generated at Fri May 17 16:16:51 2024 by rpki-client on console-fra.rpki-client.org