Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f30f068c-b238-3341-96a7-82f5b80fa423.roa
File:                     f30f068c-b238-3341-96a7-82f5b80fa423.roa (raw, json)
Hash identifier:          aGRoVsEYa+/iwJs92q0YT6umMj914gy1VQnF7+sl/Mw=
Subject key identifier:   D2:E6:01:B0:4D:40:2A:58:F7:07:F9:80:E7:12:54:5E:7B:09:1B:6F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584523BC85DDA56232D0A11A1700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f30f068c-b238-3341-96a7-82f5b80fa423.roa
Signing time:             Fri 08 Mar 2024 12:59:13 +0000
ROA not before:           Fri 08 Mar 2024 12:59:13 +0000
ROA not after:            Thu 06 Jun 2024 11:59:13 +0000
asID:                     20940
IP address blocks:        2600:1413:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:bc:85:dd:a5:62:32:d0:a1:1a:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 12:59:13 2024 GMT
            Not After : Jun  6 11:59:13 2024 GMT
        Subject: CN=fc64eb5b-0a21-498f-a256-4584152e44f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:32:5e:ef:20:c2:41:c0:f4:89:03:99:5a:bd:
                    b7:53:a9:ba:1d:36:4c:e9:45:7c:8b:cf:e6:c5:5b:
                    07:26:27:e1:ce:b6:78:1a:a2:8e:5a:7d:0a:a5:a0:
                    ea:9e:36:45:f6:73:5e:51:42:16:7b:b9:5a:3e:93:
                    5d:4a:5b:eb:96:cd:3e:3f:7b:96:40:e5:73:75:23:
                    bc:b1:23:aa:54:a0:a1:6f:23:27:be:51:4d:81:57:
                    20:32:43:a6:ec:f2:b0:a9:87:7c:f3:69:d9:e2:f6:
                    a2:84:54:10:85:87:8b:04:cf:d4:48:b4:95:46:7e:
                    72:75:51:2f:d9:38:bc:ab:c3:c9:cf:80:37:e8:1d:
                    b4:0a:c0:d1:b8:87:17:69:80:01:0e:48:4a:0d:1d:
                    1a:ba:d9:9b:b6:23:4d:2a:32:15:43:3f:24:27:74:
                    46:d1:ee:44:55:a1:30:08:d0:2e:12:81:77:89:7b:
                    07:58:a8:0e:36:16:89:a3:99:48:4e:af:74:45:f3:
                    55:c6:37:cd:0f:66:6a:af:26:fd:75:c1:6c:1d:fc:
                    2e:86:f9:a0:e9:a9:4b:ba:85:17:c5:f5:33:71:a0:
                    39:95:b1:04:5c:b5:03:f0:0a:0d:16:e7:12:78:a5:
                    60:eb:c1:e5:1a:8d:e5:fa:18:20:a3:a2:df:8f:fe:
                    d4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E6:01:B0:4D:40:2A:58:F7:07:F9:80:E7:12:54:5E:7B:09:1B:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f30f068c-b238-3341-96a7-82f5b80fa423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1413:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:55:1b:1c:22:07:42:53:21:e7:4f:f1:72:41:8b:ba:f0:b9:
         5f:7a:85:3a:dd:f3:71:3a:73:47:de:b9:c2:2f:aa:76:01:29:
         f7:c7:68:9f:99:59:d7:34:68:9b:a0:51:53:7f:80:8c:93:69:
         83:b6:6f:05:0b:2a:ec:77:5b:1a:4d:33:b6:e4:88:cf:9a:db:
         cb:d1:55:0e:e6:25:f1:6a:d9:00:56:a7:ad:ff:9a:4a:56:63:
         f3:88:10:5b:66:d4:d8:b2:5f:11:34:b1:18:2f:87:73:83:dd:
         04:0b:17:3a:d7:5f:2e:4d:3b:f0:b7:6b:9c:35:7d:2f:2a:8b:
         74:5b:59:05:6b:72:ac:5d:ee:5b:a3:4d:a5:b5:0f:1c:16:94:
         19:13:93:e2:68:6c:1c:23:41:2c:0b:06:53:b3:6b:a1:0a:2c:
         2c:74:cf:1d:cc:42:1e:66:38:63:d2:3e:18:0f:ea:96:fb:d5:
         49:28:45:b0:2a:75:2a:61:18:c1:8e:ae:a0:1e:87:c7:fb:52:
         1a:94:dc:ec:d1:63:0c:7d:6c:39:2b:fb:c0:d4:09:f9:f1:7c:
         76:1f:43:6f:c9:fe:67:6f:98:17:21:b3:93:bd:49:9c:14:53:
         e2:91:3f:2e:35:0a:43:c1:fd:fe:c2:68:74:7d:43:1b:3e:58:
         9d:64:56:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:09:38 2024 by rpki-client on console-ams.rpki-client.org