Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/15f781a1-11c4-363c-886b-f6f07741b7ec.roa
File:                     15f781a1-11c4-363c-886b-f6f07741b7ec.roa (raw, json)
Hash identifier:          IJ7NdxHaHKruW6lOOXn27e/ejYQTwG2C1m9AD4xaj+0=
Subject key identifier:   A3:52:8D:F9:25:A3:BC:39:1A:77:92:23:8D:2E:27:A2:20:D0:8C:92
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452C0AE6B2AE4B68ED0B58D5C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/15f781a1-11c4-363c-886b-f6f07741b7ec.roa
Signing time:             Mon 11 Mar 2024 12:23:36 +0000
ROA not before:           Mon 11 Mar 2024 12:23:36 +0000
ROA not after:            Sun 09 Jun 2024 12:23:36 +0000
asID:                     35994
IP address blocks:        2600:1406:ec00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:0a:e6:b2:ae:4b:68:ed:0b:58:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 11 12:23:36 2024 GMT
            Not After : Jun  9 12:23:36 2024 GMT
        Subject: CN=1ff44e12-b32d-4c68-a0bc-b4ecbe7b4180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cd:ec:28:ba:28:2a:8b:f5:40:d4:df:31:cf:
                    b0:97:8f:76:30:81:de:c2:bc:b5:a5:42:fa:38:0e:
                    68:36:c2:41:74:61:6f:0d:eb:56:f8:a6:a3:c5:f1:
                    a4:b1:06:3f:2b:94:b7:68:a3:26:55:5f:d2:1d:ca:
                    b0:52:63:f6:18:2b:62:52:1d:02:83:6b:c2:a6:67:
                    c5:e4:88:00:11:7a:52:d0:ce:83:f5:ca:3e:d2:b0:
                    11:ac:46:4c:9a:c3:36:0c:6b:6e:21:c4:d6:e3:c8:
                    79:e1:a9:e5:83:39:db:2f:cc:1b:59:34:68:42:e5:
                    9a:2e:94:a7:9b:b3:76:64:57:8e:c6:e6:73:75:37:
                    47:9a:0b:b0:51:a1:d0:e5:cb:a7:4c:f5:f7:22:6c:
                    b5:90:e3:2e:44:1d:f6:d0:a8:62:53:e7:ae:53:b5:
                    04:69:cc:78:9e:b5:1e:67:bc:56:a5:96:80:7d:af:
                    c0:30:58:7b:aa:92:9c:4d:18:33:aa:fb:fc:cb:f6:
                    d0:04:26:11:de:48:b4:91:e4:7c:17:03:a9:61:23:
                    bb:37:a2:f9:9c:af:6e:6b:64:71:bd:98:88:91:4c:
                    44:cd:40:d8:81:a1:02:ad:98:3e:17:ad:db:ee:f0:
                    06:fe:c2:f3:fa:58:0d:4e:cd:7b:03:d9:43:44:6d:
                    f7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:52:8D:F9:25:A3:BC:39:1A:77:92:23:8D:2E:27:A2:20:D0:8C:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/15f781a1-11c4-363c-886b-f6f07741b7ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:ec00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:92:62:9c:e9:c2:99:a9:6b:f1:09:8c:46:56:66:1b:32:01:
         74:83:90:2d:bc:26:90:00:f2:4e:e8:e6:ae:e9:7f:2c:32:ec:
         b0:52:6b:fc:b0:d2:97:c4:52:fb:4e:e3:30:32:ff:75:35:9f:
         30:1d:dc:be:75:1f:74:7e:ae:ce:75:f9:d7:c9:41:cc:07:86:
         8b:28:19:d5:24:42:e7:33:69:72:3b:5d:7f:75:52:d6:06:ca:
         d3:5d:8c:b7:e4:5c:84:5c:94:9a:77:91:34:d9:f7:a2:0a:54:
         9f:42:13:ac:5f:3f:68:46:21:c6:a2:52:97:70:76:5e:42:68:
         a4:c5:de:f3:16:1f:7c:5b:82:ef:73:9e:8a:93:af:fe:38:01:
         23:16:cf:c1:1f:4b:72:41:92:a0:ab:3b:4b:f4:b4:d2:ea:bc:
         c4:f5:89:ee:ec:5c:2b:76:8b:bd:58:79:e9:e0:3f:ce:ab:3d:
         c2:de:a2:df:ec:59:7c:67:be:a2:52:ed:0d:3e:ec:b7:b5:a6:
         31:ef:f4:4b:6b:f1:5f:4c:90:91:1b:1b:f1:60:1d:e6:a9:81:
         12:33:e7:2c:d9:5a:04:16:09:d6:b0:ed:72:d3:3d:f3:fd:35:
         dc:df:8b:7f:ec:e2:ca:8f:b0:6f:ea:40:8f:57:6e:34:b5:31:
         cd:59:cf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 16:55:01 2024 by rpki-client on console-fra.rpki-client.org