Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe3420a4-a0e1-3490-b291-a2746f511bbb.roa
File:                     fe3420a4-a0e1-3490-b291-a2746f511bbb.roa (raw, json)
Hash identifier:          azfXpHPtsbUY2eVwRJzQMfqXozeMTKPzuvH7iz8lrZk=
Subject key identifier:   AB:D7:D7:B6:1C:D3:B5:80:F0:6E:79:76:91:06:7C:F9:26:6A:89:33
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858451AFC34C6C0F9F19572EE2E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe3420a4-a0e1-3490-b291-a2746f511bbb.roa
Signing time:             Tue 05 Mar 2024 09:45:15 +0000
ROA not before:           Tue 05 Mar 2024 09:45:15 +0000
ROA not after:            Mon 03 Jun 2024 08:45:15 +0000
asID:                     20940
IP address blocks:        2600:1419:bc00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:fc:34:c6:c0:f9:f1:95:72:ee:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  5 09:45:15 2024 GMT
            Not After : Jun  3 08:45:15 2024 GMT
        Subject: CN=5cf2d140-0103-4998-a4d5-eca4a490b933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e8:36:3f:6d:52:ab:99:7f:7f:ce:4b:0e:45:
                    72:06:f2:7a:21:ee:f8:be:14:cb:cd:8a:16:a7:9d:
                    d7:93:2b:62:61:46:7d:6c:94:f5:b0:c1:05:63:4e:
                    ed:68:f1:dc:8b:4d:41:ba:fd:f2:d1:66:fc:f6:c0:
                    aa:f6:1b:9e:8f:bb:41:d8:e9:a3:da:a0:bd:9d:06:
                    aa:27:2b:d6:42:40:9c:46:a1:68:ae:c9:ab:be:ca:
                    bb:c2:c5:f1:6c:ef:a7:2d:2b:1c:39:09:d7:1d:c0:
                    a7:2f:e3:33:ce:69:33:7a:0a:10:0f:58:dc:9c:34:
                    ab:64:e9:48:b0:c2:32:34:b5:5e:44:f8:77:98:ab:
                    4a:d4:e1:04:69:33:73:31:9b:c8:92:ff:f7:8e:67:
                    7b:78:84:61:35:27:63:5f:01:6d:0e:79:e2:bc:b4:
                    6b:3f:12:70:c7:b2:d1:55:01:f6:e7:a7:bd:26:9f:
                    3c:8f:7c:77:c4:c8:c3:d6:60:10:3a:56:37:c7:06:
                    42:74:a2:2b:e4:06:a3:0e:0d:27:7e:6f:81:a3:ab:
                    e4:d2:37:e8:9c:4e:59:ac:87:a3:b4:6d:11:1e:e9:
                    b4:c9:14:f4:ba:2b:c0:58:78:0a:1e:26:ab:0c:82:
                    c0:7d:d1:4c:90:62:c1:53:2d:ee:0c:e6:65:01:91:
                    db:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D7:D7:B6:1C:D3:B5:80:F0:6E:79:76:91:06:7C:F9:26:6A:89:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe3420a4-a0e1-3490-b291-a2746f511bbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1419:bc00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ff:fa:cd:f9:2c:ad:39:3d:d9:58:62:3b:25:7a:cc:86:39:
         96:5a:fe:53:44:07:6e:ab:39:00:70:4c:45:e7:70:57:9d:ed:
         b7:94:4d:31:b0:23:e3:48:b6:67:13:34:1f:c0:5a:42:b7:a9:
         ba:06:0d:13:80:dd:35:93:7c:a1:bd:47:ac:33:c4:bf:08:52:
         c6:53:88:9c:8e:e7:33:35:fb:af:77:90:87:69:5e:3e:be:d4:
         fe:31:fe:af:1b:bb:4b:2e:6f:6a:53:c8:d0:a9:6b:ca:9a:97:
         50:58:a4:e0:a8:8c:8e:83:eb:be:90:cf:f2:af:55:2c:0c:bb:
         3e:af:9a:d3:6f:9f:00:35:70:a6:7c:2f:c2:ea:81:04:a7:a8:
         8e:f2:ba:75:cc:96:1f:32:34:8a:e2:30:e5:20:60:7f:ef:ab:
         72:a6:c3:40:72:75:f1:2d:8c:0d:ac:95:9d:2c:48:1a:82:2f:
         db:2c:dc:7e:de:91:78:5d:ff:6c:97:e0:d2:c4:57:4b:83:27:
         39:62:22:1a:bd:ac:8b:cc:51:62:49:13:aa:88:29:e5:31:8c:
         e3:7f:ab:23:92:bc:9c:bd:df:69:a3:89:7f:5e:13:5d:81:55:
         3f:18:c2:4a:0c:94:bf:b7:3b:25:ac:45:98:6d:30:ee:07:78:
         24:cf:ce:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:03:22 2024 by rpki-client on console-ams.rpki-client.org