Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/090c54e0-bac6-357e-85fd-62f859412b02.roa
File:                     090c54e0-bac6-357e-85fd-62f859412b02.roa (raw, json)
Hash identifier:          L4lF5VWgFmXnpKzTUAKyhWABgktlrwOFVj/O1U4UNQc=
Subject key identifier:   BA:F7:D8:42:CA:0B:CE:5F:68:39:C7:DB:28:01:4B:F5:6E:9E:59:47
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845E193B977B200AA65FF5D3580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/090c54e0-bac6-357e-85fd-62f859412b02.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     32787
IP address blocks:        2606:6c00:204::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:b9:77:b2:00:aa:65:ff:5d:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=3169f068-53d5-409c-9000-b1e7af013165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e9:fb:02:5c:2a:53:6e:97:ba:d2:f8:a3:70:
                    83:5f:76:1a:e7:a0:94:8c:18:6b:39:79:b3:84:c6:
                    d4:41:c6:88:4c:e1:f2:cf:1e:63:b8:98:ff:89:db:
                    00:fe:68:9f:22:f4:7d:a2:1c:18:a6:6e:c1:ef:74:
                    af:86:0d:e7:19:2b:c6:e1:bb:56:c6:bb:47:01:bf:
                    e1:36:22:c5:1b:88:f9:93:40:65:f0:5c:48:e9:bb:
                    23:bd:1e:34:b1:fb:8c:44:f0:5a:ed:05:c6:be:22:
                    a2:3e:df:71:a8:64:d4:50:6b:54:78:33:5b:dc:53:
                    31:21:6b:62:ae:50:a4:d1:d2:83:02:02:43:1c:03:
                    d7:ae:a1:a4:84:2c:5e:29:e4:c1:f1:67:d9:76:56:
                    79:6f:d5:b2:44:cd:77:54:35:86:f1:99:f0:95:03:
                    94:37:79:7b:e1:a4:68:ff:f7:8b:c5:4c:79:6a:37:
                    b1:42:6b:c8:61:fe:eb:01:5f:0f:56:03:e2:61:9a:
                    7a:91:d4:3a:0c:43:11:60:84:b0:75:ba:e5:5d:ed:
                    55:b7:2a:19:f7:12:81:29:ac:d8:80:07:55:58:5c:
                    98:a4:81:77:1d:1e:84:35:c8:06:6f:53:eb:df:77:
                    4f:1d:51:eb:2b:e7:72:01:6d:64:93:8f:f9:29:a8:
                    8b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F7:D8:42:CA:0B:CE:5F:68:39:C7:DB:28:01:4B:F5:6E:9E:59:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/090c54e0-bac6-357e-85fd-62f859412b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6c00:204::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:9e:04:41:93:8e:fa:2d:22:81:e1:e6:4c:9f:fc:6c:af:60:
         37:35:97:8b:0d:2a:ee:19:0f:26:54:9b:2c:46:8b:27:89:73:
         57:14:c8:77:e7:e8:dc:0d:58:7c:a9:6f:8b:cb:8f:56:b2:2b:
         4b:83:08:e4:ce:40:42:fd:dd:1b:b5:ee:ba:77:9e:e6:0c:dd:
         82:fe:24:e3:2b:25:81:58:fa:e7:2c:ff:e4:46:d7:d4:a6:7b:
         48:2e:c5:53:46:fd:39:52:09:73:33:79:b5:22:fa:c5:32:68:
         8e:62:67:bf:2c:8b:11:44:cf:96:63:63:60:a5:76:2f:e4:94:
         53:ec:c2:f8:f8:19:5c:d0:b4:a7:e2:d6:aa:5e:13:65:d0:58:
         29:58:d4:e6:38:08:e1:10:2c:b5:89:46:4c:6d:58:dc:f2:30:
         c0:5e:e2:6c:f1:58:f5:78:c9:58:b3:e1:d8:d9:18:c6:f0:6a:
         5c:b0:2b:da:e9:01:87:03:34:f9:cd:0a:d2:a9:46:c3:4b:9e:
         ef:b1:51:f8:8f:1e:28:54:7d:0e:d8:fb:b1:2b:ec:df:43:fa:
         81:14:64:03:1f:54:5e:ed:62:1d:4e:7d:8b:7f:04:1c:6d:46:
         a0:bd:23:e8:c9:14:d5:c0:14:13:6c:cf:1a:1a:ed:db:3a:0a:
         7f:63:78:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:45 2024 by rpki-client on console-fra.rpki-client.org