Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd2038d5-5424-3dd5-951c-ce00d2739888.roa
File:                     dd2038d5-5424-3dd5-951c-ce00d2739888.roa (raw, json)
Hash identifier:          m5twHioaE7AlofsRXWmKpFzwsRwZZ6EorrVuTVsDR6M=
Subject key identifier:   2A:A0:23:5F:BD:30:E9:C4:55:1B:25:32:92:48:60:45:7A:C3:36:A8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858451AFC4FE226D7030347A4E440
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd2038d5-5424-3dd5-951c-ce00d2739888.roa
Signing time:             Tue 05 Mar 2024 09:45:28 +0000
ROA not before:           Tue 05 Mar 2024 09:45:28 +0000
ROA not after:            Mon 03 Jun 2024 08:45:28 +0000
asID:                     20940
IP address blocks:        2600:141c:4800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:fc:4f:e2:26:d7:03:03:47:a4:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  5 09:45:28 2024 GMT
            Not After : Jun  3 08:45:28 2024 GMT
        Subject: CN=938eb182-d83c-4b3f-99ac-071241cfb2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:57:13:23:fd:a0:ba:5c:26:61:50:ea:11:bf:
                    62:fa:86:be:11:de:20:3e:93:38:21:70:6f:a3:fc:
                    97:f2:22:93:6b:eb:d7:f4:4c:4f:16:31:52:f5:a5:
                    7f:3f:27:d7:aa:95:0d:82:7f:7f:af:eb:08:7b:ed:
                    9b:1b:73:e3:e3:a1:9a:32:49:5d:32:2f:03:f0:2f:
                    8c:72:b7:47:31:e9:2c:50:95:b8:b0:f2:be:3b:60:
                    99:b9:5f:69:a3:d6:a0:e5:1a:71:31:45:cb:20:6c:
                    96:82:c2:52:07:eb:cb:be:bd:63:95:65:02:0f:18:
                    9e:54:c5:a8:00:96:4d:1e:ff:b7:e7:25:85:53:b0:
                    ad:7a:4a:1a:2f:1d:20:c9:02:3e:68:b7:3a:fa:a8:
                    e9:36:6c:5b:6f:5f:f6:48:f8:38:89:14:3c:da:7b:
                    c6:36:63:62:c6:bf:54:1d:d2:23:c5:90:dd:34:25:
                    e9:6e:29:b9:28:3a:e7:df:b8:43:7c:2b:e3:18:2e:
                    ec:a8:e8:18:d8:f2:5c:7a:d1:a2:30:cd:b3:f4:c5:
                    8e:62:90:a1:a8:12:44:f7:9a:09:58:d3:ca:5f:74:
                    a8:31:c9:15:20:b6:da:fa:85:67:80:83:ef:01:91:
                    09:79:31:b4:5c:44:89:25:73:11:bf:6d:14:06:75:
                    70:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A0:23:5F:BD:30:E9:C4:55:1B:25:32:92:48:60:45:7A:C3:36:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd2038d5-5424-3dd5-951c-ce00d2739888.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141c:4800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:02:e4:ce:b0:10:d0:97:99:2c:fe:64:2d:fd:d2:16:35:7f:
         ef:63:36:3d:aa:1e:a6:6c:4a:23:9e:d5:65:72:ec:dd:8b:9c:
         1c:c2:10:63:67:53:0d:b1:5b:ea:4c:7b:23:e6:4d:32:03:b3:
         f6:20:d1:d9:57:09:13:6b:2f:19:e7:0f:1d:15:95:f6:7e:f7:
         cc:49:9f:b0:b5:95:c9:fe:42:8a:75:f0:69:94:c0:24:eb:84:
         3a:ea:2d:ae:dd:60:d8:a5:01:f8:50:90:83:73:0e:e9:80:53:
         9a:87:5a:14:fb:85:e7:6e:c5:ce:61:bb:6a:a5:10:ef:3a:06:
         4e:6d:6e:6d:a7:d6:b6:e6:5b:47:71:12:8a:ae:d2:a0:ef:62:
         56:bb:b7:54:65:9d:c0:82:a4:3f:15:be:f1:4e:1e:b3:df:42:
         8f:56:b9:3e:86:95:e2:03:35:5e:01:8c:7e:87:b8:31:44:68:
         da:91:4d:2e:83:4b:2d:eb:ca:df:8d:f9:e4:0e:be:a3:8d:22:
         fe:ef:00:3e:03:a6:6b:9f:d5:8c:1c:a4:a5:97:df:58:cf:20:
         9e:91:c3:0e:9b:28:d6:17:b0:3c:98:99:9d:b3:8d:c4:4e:14:
         f7:94:a9:2f:4b:d5:12:3c:85:0e:31:b0:93:83:d0:a2:50:a8:
         f4:e3:3c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:03:19 2024 by rpki-client on console-ams.rpki-client.org