Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1df61dcb-cd5b-3ece-9872-ca1a4bfc6a93.roa
File:                     1df61dcb-cd5b-3ece-9872-ca1a4bfc6a93.roa (raw, json)
Hash identifier:          oegElYBrMAqgWlOq8U2Q2FeClLjIkp5Cen5CMM3FeMY=
Subject key identifier:   C7:35:51:BB:30:7F:7F:68:4E:EE:0D:6E:C9:B3:8B:76:06:1F:63:C0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845777DDE4CEF4EC6D472067740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1df61dcb-cd5b-3ece-9872-ca1a4bfc6a93.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     21342
IP address blocks:        2600:1405:2c00::/48 maxlen: 48
                          2600:1405:4800::/48 maxlen: 48
                          2600:1405:1c00::/48 maxlen: 48
                          2600:1405:3c00::/48 maxlen: 48
                          2600:1480:580a::/48 maxlen: 48
                          2600:1480:5809::/48 maxlen: 48
                          2600:1405:a800::/48 maxlen: 48
                          2600:1480:5806::/48 maxlen: 48
                          2600:1405:9800::/48 maxlen: 48
                          2600:1405:f800::/48 maxlen: 48
                          2600:1405:8800::/48 maxlen: 48
                          2600:1480:5808::/48 maxlen: 48
                          2600:1405:6800::/48 maxlen: 48
                          2600:1480:5807::/48 maxlen: 48
                          2600:1405:5800::/48 maxlen: 48
                          2600:1405:4c00::/48 maxlen: 48
                          2600:1405:2400::/48 maxlen: 48
                          2600:1480:580e::/48 maxlen: 48
                          2600:1405:1400::/48 maxlen: 48
                          2600:1480:580d::/48 maxlen: 48
                          2600:1480:8800::/48 maxlen: 48
                          2600:1480:580f::/48 maxlen: 48
                          2600:1480:580c::/48 maxlen: 48
                          2600:1480:580b::/48 maxlen: 48
                          2600:1405:400::/48 maxlen: 48
                          2600:1405:e800::/48 maxlen: 48
                          2600:1405:c00::/48 maxlen: 48
                          2600:1405:d800::/48 maxlen: 48
                          2600:1405:c800::/48 maxlen: 48
                          2600:1405:b800::/48 maxlen: 48
                          2600:1405:4400::/48 maxlen: 48
                          2600:1405:3400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:de:4c:ef:4e:c6:d4:72:06:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=e084925d-4766-4bf0-830e-bbfb65e0e4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4d:ce:30:d9:60:74:13:87:de:ce:16:c0:1c:
                    a7:de:86:07:2e:b4:cd:d9:e6:6b:b5:d3:f3:c1:4e:
                    fe:fc:15:1b:0c:e2:47:de:10:05:68:cb:41:8f:5a:
                    1d:ac:2f:9b:b9:ed:eb:84:bd:34:5c:63:a9:86:7d:
                    d6:6c:47:37:ad:46:89:1d:76:43:df:71:78:4d:a2:
                    b6:81:10:e9:f1:48:d2:33:a7:38:b9:9c:38:c3:fc:
                    7d:df:06:a7:0c:0c:b6:fd:f9:9d:1b:49:72:06:a4:
                    77:53:6b:e7:b1:00:55:0e:e4:fe:f5:12:15:00:28:
                    6f:d8:bd:0b:c0:d8:1d:d1:1b:1a:a5:e1:98:89:c7:
                    3b:46:b6:f2:4a:72:21:d2:72:68:82:d5:28:a6:eb:
                    ca:63:7c:af:6c:9c:d8:81:1c:b0:7f:9d:86:d0:ec:
                    a7:57:bf:a5:8f:ce:a8:e2:76:ff:76:d0:bb:73:5b:
                    c9:f5:d2:d3:2b:11:be:11:51:df:fd:73:ae:8e:ca:
                    3f:2a:46:92:dd:03:34:c8:f7:d2:d1:4a:74:9d:c8:
                    03:2e:43:bb:80:70:0c:dd:da:be:36:f8:50:7c:f9:
                    0f:e4:39:35:e1:fa:6f:b2:45:07:07:65:a7:26:a9:
                    74:06:21:36:97:a4:2c:d8:69:84:0c:15:ca:bf:94:
                    66:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:35:51:BB:30:7F:7F:68:4E:EE:0D:6E:C9:B3:8B:76:06:1F:63:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1df61dcb-cd5b-3ece-9872-ca1a4bfc6a93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1405:400::/48
                  2600:1405:c00::/48
                  2600:1405:1400::/48
                  2600:1405:1c00::/48
                  2600:1405:2400::/48
                  2600:1405:2c00::/48
                  2600:1405:3400::/48
                  2600:1405:3c00::/48
                  2600:1405:4400::/48
                  2600:1405:4800::/48
                  2600:1405:4c00::/48
                  2600:1405:5800::/48
                  2600:1405:6800::/48
                  2600:1405:8800::/48
                  2600:1405:9800::/48
                  2600:1405:a800::/48
                  2600:1405:b800::/48
                  2600:1405:c800::/48
                  2600:1405:d800::/48
                  2600:1405:e800::/48
                  2600:1405:f800::/48
                  2600:1480:5806::-2600:1480:580f:ffff:ffff:ffff:ffff:ffff
                  2600:1480:8800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:25:b6:51:b9:17:ea:e2:c2:73:4d:50:9e:76:1c:d7:c7:91:
         38:81:4e:2a:6a:6a:53:0f:24:e5:c4:a4:2a:2f:b3:69:ec:cc:
         92:1a:b1:7f:16:77:c0:48:e9:cb:92:fd:8b:35:3c:c7:ca:70:
         74:92:12:e6:a8:c6:3a:53:57:4e:b2:b8:60:6c:1d:84:ce:ca:
         ee:e0:7a:bb:a8:47:67:29:6c:3c:21:1e:fd:d4:6c:6b:35:f0:
         7c:c3:80:86:74:5b:84:80:e7:49:5d:65:d4:a1:c6:58:4c:42:
         ec:b3:fa:73:de:59:aa:f0:e7:30:70:3d:00:80:aa:11:01:ed:
         46:4b:a8:36:d5:ff:77:e4:c5:a7:fc:10:46:12:09:6c:7b:94:
         28:a6:36:fd:56:9c:e1:8d:1e:6d:4a:08:40:da:bd:70:17:91:
         0e:2c:1f:a5:df:b8:d0:95:45:4b:ce:70:b8:e7:dd:58:38:95:
         25:69:cc:f3:31:3e:c3:1d:8a:e0:1b:45:41:e0:80:93:15:99:
         8d:2a:db:92:c2:a2:f9:5e:90:a1:3c:28:56:61:f0:a7:9b:9a:
         31:74:a1:82:17:0e:72:2d:8c:7a:07:b7:71:dc:8e:ed:14:99:
         6d:97:e3:ae:41:d1:71:c5:ee:8b:75:40:ff:ca:dc:a4:02:2f:
         2a:d9:2f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:15:18 2024 by rpki-client on console-ams.rpki-client.org