Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fa62a59-3c7f-3d07-8925-efd6882ce09e.roa
File:                     9fa62a59-3c7f-3d07-8925-efd6882ce09e.roa (raw, json)
Hash identifier:          /KYFYn2dBX4s1t7rEx9Pn5YB+CzLYhf3FlcKWJHc/Po=
Subject key identifier:   93:13:8B:A0:6D:BF:4D:50:A8:1D:5C:78:BA:B0:70:6C:9E:62:82:6B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584523A29E6228CCE971BEE82880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fa62a59-3c7f-3d07-8925-efd6882ce09e.roa
Signing time:             Fri 08 Mar 2024 12:07:01 +0000
ROA not before:           Fri 08 Mar 2024 12:07:01 +0000
ROA not after:            Thu 06 Jun 2024 11:07:01 +0000
asID:                     20940
IP address blocks:        2600:1406:3600::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:a2:9e:62:28:cc:e9:71:be:e8:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 12:07:01 2024 GMT
            Not After : Jun  6 11:07:01 2024 GMT
        Subject: CN=3d07a259-7604-4f25-82bd-27e5c7d44c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2b:8c:3d:ed:65:ef:34:60:20:dc:6a:48:6c:
                    55:be:2e:0e:7a:0a:dc:e7:4a:fc:f8:bf:c8:1c:5f:
                    85:3d:42:ee:ad:54:8e:4b:3f:ce:99:5a:2d:39:d2:
                    43:22:84:41:ca:d1:fd:37:15:c7:54:84:19:3b:f9:
                    48:b7:73:ff:d0:89:df:3c:8f:c1:ec:76:d5:7a:ef:
                    32:3c:91:2e:3f:33:ec:93:6f:90:fb:08:14:b6:3e:
                    6e:d7:68:d6:05:04:1c:03:75:40:51:d8:bb:36:a4:
                    9d:83:91:ca:38:0b:dc:f7:eb:39:b0:28:3a:4d:47:
                    0c:80:cc:ad:98:67:72:3e:11:60:12:93:b7:24:2a:
                    76:d6:c6:18:4f:b3:96:e1:b2:57:c1:52:13:d7:c4:
                    cf:c1:6d:83:76:bc:f3:e0:9c:70:7b:f2:bc:b9:0e:
                    72:03:9f:39:f8:25:d0:f8:c5:3c:ab:c8:a5:62:fd:
                    9e:55:62:1f:3a:75:04:a4:40:34:9b:1a:68:7c:e7:
                    29:0e:9f:b3:40:bb:8f:a9:17:92:ba:5c:51:cd:d0:
                    93:d4:de:a5:76:39:87:8d:73:25:ad:90:25:b6:ba:
                    6e:78:03:f1:0c:25:46:7e:81:d9:fd:d2:01:63:52:
                    e9:42:37:01:9e:79:ba:b8:23:80:e9:a5:58:17:86:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:13:8B:A0:6D:BF:4D:50:A8:1D:5C:78:BA:B0:70:6C:9E:62:82:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fa62a59-3c7f-3d07-8925-efd6882ce09e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:3600::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:86:7c:32:9c:ac:7a:55:2c:12:ca:ba:e7:9a:09:2c:3e:0a:
         aa:68:f4:f8:5b:ee:6e:af:3c:77:c7:a4:8c:18:cb:fa:72:80:
         e7:c1:b9:6f:54:ad:cb:59:26:6c:47:aa:c4:cd:28:74:43:6d:
         3a:cf:41:e2:12:14:71:9c:58:47:ff:1d:76:b8:a4:01:3a:88:
         dd:bf:b6:f1:26:67:76:a1:86:08:0c:d2:a9:21:f0:d7:a8:0b:
         79:87:ad:bb:32:5f:bb:e3:f8:eb:71:00:ea:53:ce:52:64:de:
         89:57:a4:fc:9e:a0:39:8e:1c:93:b6:96:37:64:e6:72:05:61:
         a9:16:18:2d:88:97:56:95:e9:6e:99:54:c6:97:a0:67:5e:ef:
         29:df:09:e7:bc:76:3c:04:1d:50:f8:a8:6a:73:fc:ab:8d:96:
         27:11:a3:33:a6:54:a0:3f:91:3b:cf:56:21:94:5d:a3:a6:69:
         f8:3a:0c:1d:4f:3f:2e:22:13:11:bf:da:3a:aa:06:19:36:cb:
         ad:6b:69:32:2a:08:e6:03:df:3f:d6:0f:27:9d:6b:c6:3c:26:
         35:ed:48:62:64:88:a0:8a:ff:ce:8f:f4:dc:8a:78:2d:ad:44:
         6f:48:32:c8:5a:c6:2d:7e:da:04:1b:50:61:b0:35:f7:2d:07:
         ce:b6:65:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:03:13 2024 by rpki-client on console-ams.rpki-client.org