Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd57f63-4dd8-37c7-a673-4f1887b0f75e.roa
File:                     1dd57f63-4dd8-37c7-a673-4f1887b0f75e.roa (raw, json)
Hash identifier:          Py6RfHGqWTwG0z2HxQ57WswMmbaJaC9wVfsLviMKyUA=
Subject key identifier:   26:38:F4:DF:1D:CC:6A:B4:EB:F7:AB:09:E5:4E:95:0B:DA:FA:B9:2B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584523BB520A00F3EBC811052D20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd57f63-4dd8-37c7-a673-4f1887b0f75e.roa
Signing time:             Fri 08 Mar 2024 12:56:48 +0000
ROA not before:           Fri 08 Mar 2024 12:56:48 +0000
ROA not after:            Thu 06 Jun 2024 11:56:48 +0000
asID:                     20940
IP address blocks:        2600:140b:2200::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:bb:52:0a:00:f3:eb:c8:11:05:2d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 12:56:48 2024 GMT
            Not After : Jun  6 11:56:48 2024 GMT
        Subject: CN=9b0506ee-41b0-42ad-b4f9-e3f1ac22a50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cf:40:9e:74:99:ff:e9:28:61:7e:19:8a:b3:
                    a1:e2:19:3a:ab:0a:d3:56:a5:5e:db:2a:e1:46:43:
                    38:97:f5:a5:38:ed:81:2a:0e:d7:3f:31:77:f4:15:
                    d2:23:9b:78:db:ed:04:3d:cd:50:17:ce:92:39:21:
                    02:b8:da:fc:65:30:bb:70:c4:01:db:6b:71:ef:ed:
                    f7:73:67:1a:aa:7f:f5:f5:c2:98:eb:dc:80:19:5e:
                    ca:1e:86:7e:33:2e:75:4a:9e:d3:d1:a9:b3:26:3f:
                    00:01:47:95:59:51:15:5e:fe:7d:15:e7:d4:36:80:
                    a6:e4:6e:31:c2:46:81:7f:3b:d1:83:a0:2e:2b:30:
                    6d:ea:88:20:34:e5:59:d6:7f:eb:a7:e3:a0:fb:ee:
                    c2:60:f8:20:34:d8:86:94:4b:90:9d:68:25:0a:fa:
                    d0:ab:51:d2:16:70:95:ca:0b:6c:bb:d3:16:9b:f4:
                    22:52:e2:ed:6d:12:f1:1d:2b:6e:6c:90:3c:f2:a2:
                    f6:78:d5:c5:63:7b:2b:68:e9:46:df:d1:7e:51:ba:
                    d8:a2:23:e8:a1:de:45:85:b4:b8:0a:64:21:86:aa:
                    d4:ad:57:3c:11:73:bd:fd:e1:5e:9c:c9:f7:3c:81:
                    63:da:2c:eb:81:cd:48:8f:72:7d:c1:25:0a:2c:4a:
                    b1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:38:F4:DF:1D:CC:6A:B4:EB:F7:AB:09:E5:4E:95:0B:DA:FA:B9:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd57f63-4dd8-37c7-a673-4f1887b0f75e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:2200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:e2:c5:6a:82:dd:e2:18:8f:66:ca:fa:d0:22:7c:88:44:b9:
         42:37:a4:b1:85:56:1a:51:e3:b5:3c:70:b8:96:d4:98:39:e0:
         a5:b4:07:82:29:fc:82:5e:0f:ac:99:66:4d:72:d5:bd:96:ef:
         a1:06:12:ad:db:35:93:fb:3c:8f:a0:54:dc:a8:44:0f:57:44:
         40:6c:74:a0:f5:c8:5f:0b:e7:a6:2e:61:20:49:bc:94:37:09:
         d3:e0:e4:4e:58:97:af:89:13:c4:85:c2:7b:b3:c5:dd:a0:cc:
         74:76:ce:de:11:68:97:f8:ac:07:db:8f:10:2a:ab:88:e5:48:
         12:23:0a:ca:a6:d4:41:df:30:be:52:8e:82:c3:8c:27:2e:42:
         68:53:7f:8f:d5:04:28:63:74:86:f7:08:b8:a9:24:ca:35:6c:
         65:63:1d:76:41:49:33:f2:2a:0a:96:b2:20:69:89:5c:22:08:
         38:5a:db:97:d0:6f:4b:53:ba:40:9e:a4:12:23:6c:d6:62:0d:
         3e:14:5e:70:5f:bf:37:a9:17:d6:dc:4f:ac:f7:46:b6:35:cc:
         73:2b:32:27:df:91:7f:b1:a4:45:f2:c0:80:e6:8f:f1:34:5d:
         f3:42:b2:10:4e:15:1d:98:b3:99:2d:2a:7f:55:85:e6:88:46:
         3e:bc:1f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:47 2024 by rpki-client on console-fra.rpki-client.org