Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/008bad61-d349-3b9c-844c-e4d7d5e518fb.roa
File:                     008bad61-d349-3b9c-844c-e4d7d5e518fb.roa (raw, json)
Hash identifier:          03tsghExSo44KtH2ZLFvZ/S8XsqVL1jMKS1HDvKRNrI=
Subject key identifier:   36:67:BE:04:BF:BD:3A:6D:1B:44:05:83:1C:76:53:51:32:C6:C7:29
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C1DF6260E519EDC0C8A73180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/008bad61-d349-3b9c-844c-e4d7d5e518fb.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     20940
IP address blocks:        2600:1404:a00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:62:60:e5:19:ed:c0:c8:a7:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=a0bc95b2-3e9a-4562-b913-abdc740f3d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:eb:b4:a7:b9:2d:aa:a2:48:41:31:c8:78:79:
                    41:ae:49:73:27:a5:af:f3:f5:54:5d:3e:52:06:66:
                    bd:30:14:3a:21:aa:c5:86:9b:56:02:7f:6a:dc:e3:
                    68:43:83:ac:6f:9c:d1:b1:b6:1c:de:40:dd:d2:58:
                    ce:67:9e:64:96:84:62:d4:80:16:5e:b4:b7:d2:ff:
                    0b:8d:ff:c9:d4:61:96:b6:92:ee:6b:1c:c5:fa:c1:
                    c0:38:9c:7a:f3:48:8c:7a:f3:e5:50:7a:95:1b:45:
                    80:34:ed:f6:62:6f:81:8c:57:25:0b:31:ab:bb:1d:
                    a3:27:4d:67:39:0d:d9:6b:ce:99:81:98:20:86:80:
                    ec:8b:b5:8c:9d:34:f6:59:75:36:4f:78:8a:05:73:
                    c0:f4:12:d2:5d:51:7f:23:0f:f5:a1:22:b0:56:cf:
                    00:3e:59:de:55:26:57:3c:13:84:27:b6:be:1c:4e:
                    e3:a4:4d:96:f5:1a:42:7a:de:cb:7f:ce:2c:b9:93:
                    d2:01:6a:58:d9:d7:ce:0f:c5:03:c4:77:d3:bf:fc:
                    f4:4f:8a:07:e6:83:56:71:d2:73:4f:c2:d8:70:55:
                    cd:af:90:67:9c:4a:14:67:91:cd:fe:71:d8:17:7a:
                    ad:37:a7:9c:8e:1a:e5:83:87:6c:16:46:eb:37:9e:
                    82:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:67:BE:04:BF:BD:3A:6D:1B:44:05:83:1C:76:53:51:32:C6:C7:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/008bad61-d349-3b9c-844c-e4d7d5e518fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1404:a00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:29:60:2b:f4:c7:97:ce:93:d5:d7:8b:e2:97:8a:68:b9:3b:
         66:5c:4e:d9:ed:f4:0c:4e:25:28:cb:ea:6f:61:71:f3:53:9a:
         ac:bf:2c:66:ff:95:57:73:7a:ed:64:3e:4b:5c:e4:f8:af:30:
         b2:2b:11:41:b6:be:fc:d4:05:7a:c9:ba:72:8d:ea:03:25:d7:
         39:a4:f2:ca:47:a5:b2:dd:0b:0d:50:de:20:59:2d:e5:7a:f9:
         ee:74:70:8f:ce:6c:26:1c:e3:39:0b:e2:a4:4e:6c:44:bb:1c:
         36:3c:4e:bd:d1:bb:86:4f:0d:90:3e:0c:05:36:16:52:de:66:
         d6:6f:63:da:9c:8d:5d:b4:63:9d:dd:d2:c1:7d:ed:ab:bd:e7:
         66:eb:46:1f:01:4c:65:71:9b:46:6b:8a:c4:20:57:22:9e:81:
         c6:11:30:c1:65:91:8e:52:f6:63:62:e3:0c:e9:03:98:43:07:
         09:11:d5:07:a1:bd:29:8c:ae:ca:b6:46:88:b6:cb:9c:21:ce:
         3f:c7:ff:cc:f1:ab:92:ea:db:ec:73:36:38:2f:88:93:9e:2c:
         3c:4a:35:10:4c:9f:f3:ed:5a:1d:d4:3b:c5:fa:5c:27:26:db:
         ef:ee:f2:22:b2:8a:5f:8d:68:99:25:c6:de:c7:2f:08:5c:11:
         7d:fa:4d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:52 2024 by rpki-client on console-ams.rpki-client.org