Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2400525-a9dc-3418-aa44-320c689f34e9.roa
File:                     c2400525-a9dc-3418-aa44-320c689f34e9.roa (raw, json)
Hash identifier:          ORADCkyCxKbzVQXJQfA7tV0jYaTRZEhkg5ry8IS7f20=
Subject key identifier:   F5:CC:BC:0F:40:31:A0:13:22:FF:73:41:61:D8:C5:2E:B4:C9:4F:FF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452C2DA4BAEE2CCD11D97D8390
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2400525-a9dc-3418-aa44-320c689f34e9.roa
Signing time:             Mon 11 Mar 2024 13:33:36 +0000
ROA not before:           Mon 11 Mar 2024 13:33:36 +0000
ROA not after:            Sun 09 Jun 2024 13:33:36 +0000
asID:                     35994
IP address blocks:        2600:1409:3400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:2d:a4:ba:ee:2c:cd:11:d9:7d:83:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 11 13:33:36 2024 GMT
            Not After : Jun  9 13:33:36 2024 GMT
        Subject: CN=0e004241-cc59-4b29-a18f-1949b75b7b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:3b:a3:23:2c:ef:ed:ce:fd:4d:7e:fc:f4:
                    6b:4a:a3:8c:b3:34:84:3a:8f:02:79:da:d1:04:91:
                    90:7e:e2:68:6b:c7:f0:4a:94:c5:5c:12:78:28:bc:
                    7f:ca:2e:7d:0b:d2:99:b4:29:93:b8:67:57:55:c3:
                    ec:24:ce:6b:df:0a:52:c2:77:7c:93:41:cd:3a:4d:
                    75:20:d1:25:07:5a:06:88:6a:8e:0f:bd:7d:1f:57:
                    47:20:ce:a7:a6:56:b8:8c:50:68:bf:0f:0b:c3:05:
                    e2:36:35:8e:5c:bc:0e:d8:e4:5c:b1:95:f9:d7:fc:
                    97:7b:48:0e:52:65:a3:60:8b:39:1c:39:04:0f:1c:
                    1c:71:92:cf:a3:a7:21:89:68:4b:58:9a:f5:0e:b0:
                    3f:45:71:eb:41:b8:85:fc:96:d0:d6:c0:2d:12:85:
                    f3:37:8c:e4:10:d7:a9:39:8a:f4:9d:b7:11:92:dc:
                    00:51:50:19:e3:7d:df:44:7f:7e:d5:20:4f:5e:df:
                    f2:ed:8f:6c:fc:67:6d:75:51:0e:df:c8:44:0d:2e:
                    14:03:e9:a1:f3:fd:a5:41:66:14:37:b2:1f:34:67:
                    2f:36:6a:27:fb:60:08:67:53:ac:74:97:6b:5f:0f:
                    ee:e1:06:61:94:5e:60:92:92:2a:ff:5d:69:b0:20:
                    60:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CC:BC:0F:40:31:A0:13:22:FF:73:41:61:D8:C5:2E:B4:C9:4F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2400525-a9dc-3418-aa44-320c689f34e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1409:3400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:93:9b:88:95:6a:ab:01:c4:36:e1:23:c8:f5:fe:0e:17:e7:
         60:df:f0:e6:4e:42:9d:07:00:41:96:a0:bb:f9:18:0b:89:0a:
         6e:1d:3f:69:e2:39:4c:6c:f3:9f:c0:03:22:2f:28:71:e1:18:
         e6:20:77:73:b4:36:db:43:f0:f4:a6:f1:e3:8a:73:e2:91:27:
         0a:59:92:34:3f:e1:e8:97:e0:01:9e:8d:bb:b7:0a:82:29:c5:
         f5:46:39:95:5e:f6:b1:0a:a6:1e:30:4a:10:e5:d3:fe:41:45:
         f7:ca:f2:c9:55:2e:b8:05:0b:93:dc:b6:72:79:42:1c:5b:cd:
         61:36:3a:1b:92:7a:10:43:38:a5:b3:21:14:1f:75:a5:94:16:
         0e:67:c1:8c:a4:cf:db:8f:8d:1d:85:a9:1a:19:cf:3f:85:9e:
         a3:f2:11:32:77:08:c6:37:66:b8:58:ff:04:01:d4:12:db:b2:
         00:3d:17:bd:d7:17:56:9d:e9:f4:d9:00:ec:c6:0a:83:d6:a8:
         0d:3e:b2:43:77:5f:42:ae:13:45:57:47:9f:d2:de:fb:64:bf:
         f5:fe:2c:a9:b0:59:e5:cc:75:7b:4b:4a:88:d6:4f:76:3e:ca:
         25:ab:a2:fd:0e:e0:92:e9:2d:c9:66:77:aa:54:d6:16:07:65:
         c3:5f:6c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:03:16 2024 by rpki-client on console-ams.rpki-client.org