Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6f25ab9-ce71-3f9f-bdba-1ea7371f3504.roa
File:                     a6f25ab9-ce71-3f9f-bdba-1ea7371f3504.roa (raw, json)
Hash identifier:          J/ryAWlIHng9E41OfJTD2FrwuSF39UXr+rnlSJyAYqY=
Subject key identifier:   30:4A:83:59:1D:F5:DE:BB:75:C0:AC:21:32:8A:D2:3E:55:23:02:D4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858450FF640CF1D90C4FFB1446280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6f25ab9-ce71-3f9f-bdba-1ea7371f3504.roa
Signing time:             Fri 01 Mar 2024 10:59:22 +0000
ROA not before:           Fri 01 Mar 2024 10:59:22 +0000
ROA not after:            Thu 30 May 2024 09:59:22 +0000
asID:                     20940
IP address blocks:        2600:1406:3400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0f:f6:40:cf:1d:90:c4:ff:b1:44:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  1 10:59:22 2024 GMT
            Not After : May 30 09:59:22 2024 GMT
        Subject: CN=19f268aa-a04a-4e4b-8615-e4dd1bf089e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c9:b1:fc:fc:f2:42:1b:90:08:d1:c8:4b:fa:
                    01:3e:e4:01:60:05:91:f2:2c:c0:20:65:fa:68:de:
                    6d:8e:45:84:6f:b4:12:df:56:de:3f:39:8b:65:01:
                    e6:99:1a:0d:ca:0c:ed:1d:d8:11:b8:ff:0d:dd:74:
                    7b:69:59:8a:b6:31:c4:97:57:69:f7:d9:05:0a:8c:
                    7c:39:a8:01:2e:28:7d:4f:57:56:fb:a2:29:65:22:
                    15:78:59:dc:16:e4:a7:50:21:a8:04:74:8a:94:50:
                    90:c7:db:69:8e:07:85:a1:9b:c3:55:58:3c:35:53:
                    8f:b9:84:9c:3d:22:a3:bc:de:53:05:75:d3:ae:10:
                    c2:aa:b4:79:89:30:ad:9f:18:63:d3:28:cf:9c:58:
                    83:ac:22:8a:d9:b6:b3:e4:ef:5b:38:41:c4:9e:f8:
                    9c:b1:a6:96:55:9e:9e:1c:8b:6a:75:ae:01:7b:e6:
                    60:c8:3f:6b:cc:a5:f2:d3:ca:0a:f0:0d:da:f2:2c:
                    c6:8b:bf:12:8b:91:54:70:bf:15:c9:aa:98:bf:41:
                    30:37:88:2e:45:7d:09:5b:83:37:04:19:ba:06:85:
                    28:78:ad:d8:c2:25:0d:f9:6b:de:92:d8:35:69:e1:
                    04:1c:e3:52:57:92:68:4a:e6:9a:6b:c6:df:d5:31:
                    58:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4A:83:59:1D:F5:DE:BB:75:C0:AC:21:32:8A:D2:3E:55:23:02:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6f25ab9-ce71-3f9f-bdba-1ea7371f3504.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:3400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:55:a9:fd:19:88:71:51:90:62:9f:53:93:06:c9:75:88:a5:
         7c:67:4a:1b:8b:69:4b:41:2d:3d:44:ed:a8:b6:59:79:ba:d0:
         57:bd:ca:c7:55:05:3f:f7:aa:7a:22:d2:f3:08:09:b5:89:99:
         4e:fc:ed:b8:84:0c:09:92:7a:4e:f4:77:6f:3d:27:7e:52:b6:
         ed:83:6c:bd:cc:8c:03:6a:5e:56:16:34:d2:f5:4c:44:14:9d:
         b4:be:16:1c:87:4a:e5:28:d2:e5:c9:71:09:4d:a6:db:ff:20:
         b7:ad:f2:5a:13:d6:d4:d1:29:82:43:01:46:a7:d3:99:9d:d8:
         03:b1:7c:f5:f2:88:2b:45:7d:70:02:0c:43:83:f1:99:a9:17:
         45:55:ac:c6:97:76:ae:09:ab:44:7a:32:f2:f7:4c:6b:84:64:
         80:8b:8a:fd:51:af:5c:a2:69:59:95:b3:0a:ca:5d:76:52:57:
         4a:f1:2e:e6:9c:bb:98:b2:a2:6d:a5:69:b0:c2:fb:1f:b1:c6:
         a0:7e:b1:0a:2f:2a:87:1b:f6:8e:a9:95:3e:c5:c4:1e:f6:75:
         8d:57:44:d3:25:2b:7e:f9:85:17:2d:1b:08:e4:d0:47:4d:1b:
         4c:3f:61:1d:5d:f6:38:3c:bf:c0:bb:ec:ab:fc:05:d6:8f:e9:
         ba:76:0c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:41:19 2024 by rpki-client on console-fra.rpki-client.org