Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1bf92939-8f2f-350a-975f-f2d8142279e2.roa
File:                     1bf92939-8f2f-350a-975f-f2d8142279e2.roa (raw, json)
Hash identifier:          BkjF5DmqmcnQZ2+vg2ATdqDbdkwuzcCka11Nyomyrrc=
Subject key identifier:   46:5C:71:6A:10:C7:17:CF:34:77:FF:83:E3:BC:D8:FF:EE:62:C2:F8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AB6C1FB14E4F26425B2188C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1bf92939-8f2f-350a-975f-f2d8142279e2.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     20940
IP address blocks:        2600:1401:c000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:1f:b1:4e:4f:26:42:5b:21:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=5121cbb1-7649-45d5-9dd5-2bf5063e54e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ce:39:1e:91:8c:74:e4:1c:cf:5b:8c:28:21:
                    4b:fe:01:b2:66:a0:ea:ea:59:03:32:3d:71:16:4c:
                    cc:65:77:b4:2b:43:9f:32:83:99:3a:0b:40:7d:37:
                    47:48:72:1e:ae:6d:d0:b7:99:74:88:68:7c:2f:58:
                    43:dd:d5:da:00:20:7e:0f:da:6c:d0:40:f5:eb:b4:
                    e4:61:aa:c9:b2:a6:fb:96:51:2e:f8:53:cb:13:df:
                    b8:f4:33:9f:7c:c2:60:fa:c4:ad:cf:fc:1b:af:0d:
                    c2:aa:3c:24:68:8c:43:78:62:04:fc:c4:ce:21:c2:
                    10:6e:82:83:18:bd:be:82:b3:0a:f4:da:8e:e7:49:
                    7e:ce:11:50:a5:4a:37:29:ac:ed:1c:a6:e0:9f:13:
                    68:7a:d0:a7:a6:99:0f:a4:c0:46:dd:1f:56:84:04:
                    00:df:88:66:22:99:cd:1d:81:7e:e8:77:40:87:b4:
                    77:1e:42:ff:0c:3e:ff:f2:eb:0d:51:35:a6:06:10:
                    e1:6e:01:b3:b4:fd:42:4c:4c:bb:fc:30:c6:5f:59:
                    6d:43:93:36:25:cf:6b:a5:ba:3e:40:0c:05:c4:e9:
                    af:87:02:03:5e:c0:94:71:fb:b3:b7:39:64:7c:e4:
                    d6:dd:70:5e:a2:2b:58:2a:f8:76:be:83:1b:25:3a:
                    e2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5C:71:6A:10:C7:17:CF:34:77:FF:83:E3:BC:D8:FF:EE:62:C2:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1bf92939-8f2f-350a-975f-f2d8142279e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1401:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:9b:9d:3b:0f:38:2c:cf:38:a9:f9:64:cb:40:77:b5:93:dd:
         8b:b4:7e:c7:3b:c1:b3:9e:06:54:94:d3:6a:80:b5:d8:3f:27:
         ad:b9:63:70:eb:33:c3:fa:9f:d6:75:f7:32:74:2a:05:f1:a3:
         06:8d:cc:03:68:13:29:1a:a6:cf:33:e9:6c:81:96:80:52:e6:
         82:c1:1b:02:f7:6c:a4:73:71:6a:fc:01:ad:5d:79:9d:e8:42:
         df:0d:43:32:59:c3:88:7a:d6:a6:42:da:d9:78:ac:2d:bb:48:
         c1:80:26:c2:fe:7b:95:38:7c:3b:6e:35:5d:c9:62:e2:6d:9b:
         91:9c:2d:15:22:53:2f:56:b1:94:20:89:72:4c:4c:43:f1:cd:
         66:d8:85:a0:e5:48:42:27:fa:24:44:95:24:ec:74:50:70:d6:
         44:bd:98:ac:2a:73:ac:d3:ad:cf:0e:ab:70:96:b8:f1:5a:57:
         34:3f:16:05:93:1b:98:5f:78:2a:a3:15:f7:b8:cb:09:10:14:
         7c:f4:b3:dc:f3:d1:43:da:d0:d3:29:ec:fa:f7:a3:51:52:41:
         62:88:60:30:e7:ab:7c:f8:6b:b2:5f:34:1a:1c:04:86:c6:18:
         da:af:38:db:d1:77:e7:4c:5b:90:13:b2:d6:82:e1:1a:e8:b5:
         4c:ca:ab:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:04 2024 by rpki-client on console-ams.rpki-client.org