Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/205f01d0-c7e7-3973-b475-5fbe1ee10a2c.roa
File:                     205f01d0-c7e7-3973-b475-5fbe1ee10a2c.roa (raw, json)
Hash identifier:          S6hkrGdklv/GA1kCvI6afdoXwdgAhtddtV1uXR/EbE0=
Subject key identifier:   CE:D5:98:EE:2D:B0:8E:6E:83:D2:BF:B2:C5:40:F9:7D:1C:80:C7:7E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AB6C1F597A05C26DC4A62660
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/205f01d0-c7e7-3973-b475-5fbe1ee10a2c.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     20940
IP address blocks:        2600:1404:d400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:1f:59:7a:05:c2:6d:c4:a6:26:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=9211b2f6-33fd-43b3-a774-d0a12743cdcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:01:4a:81:62:d9:23:63:dd:d7:ef:a9:6b:
                    df:6a:da:f3:f0:f0:ee:c4:9b:34:6d:9d:fd:e5:08:
                    00:a3:8f:22:7e:57:f6:35:81:06:4d:7e:0a:f3:bc:
                    ed:ab:84:ce:52:0b:41:ab:bb:99:d0:d1:75:54:ab:
                    ae:ae:cb:59:87:2b:75:24:d4:9f:f1:6d:d0:20:0f:
                    26:0e:7a:9c:5e:13:dd:b3:cb:b8:3d:c6:40:73:87:
                    d6:f2:71:bc:d5:9b:a5:52:7f:cf:ac:a0:ce:fd:73:
                    7f:bf:8d:a2:ea:ac:91:9d:26:92:f2:91:98:cc:78:
                    58:e3:af:b5:d4:09:03:78:1b:9e:4c:12:59:cc:91:
                    d2:7d:53:9e:e5:97:2c:d1:84:4a:34:b6:b2:6b:57:
                    c2:d8:2c:cd:58:8d:8d:42:76:f1:15:da:cc:ce:e2:
                    8a:94:50:8c:c8:f6:6b:37:fc:19:fd:92:89:fc:ce:
                    10:c3:4b:c5:13:ec:93:fe:34:4c:75:cc:f4:6e:02:
                    d1:5f:ab:76:34:ed:13:f9:66:b3:4b:25:a8:4c:a2:
                    14:eb:8d:38:96:35:8d:a8:f6:b7:d5:c3:a5:b1:5f:
                    48:ca:48:fb:8a:6c:8a:d8:1f:37:0f:d4:64:42:93:
                    ed:39:1a:cf:84:e4:76:65:c3:d8:93:be:8b:dd:aa:
                    ba:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D5:98:EE:2D:B0:8E:6E:83:D2:BF:B2:C5:40:F9:7D:1C:80:C7:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/205f01d0-c7e7-3973-b475-5fbe1ee10a2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1404:d400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:a9:19:ab:59:05:e9:06:3d:29:da:e2:3f:20:ee:d0:0f:f8:
         c0:81:f8:b3:14:79:62:b9:73:f2:04:f9:77:12:50:b9:6d:4f:
         67:e9:df:63:c0:59:80:3d:52:da:4f:84:29:92:c3:d2:87:c0:
         37:79:e9:4d:89:ad:21:6c:13:b9:fb:03:d1:20:4f:56:04:a7:
         d7:35:80:21:0a:cf:22:70:c8:23:6e:96:c4:21:cc:06:40:68:
         8d:26:cf:be:0b:74:7a:d5:9a:1b:20:25:4c:81:ef:8f:ab:16:
         ef:a5:ac:29:e3:e3:ba:71:a7:a6:dc:9d:50:57:9d:69:33:13:
         88:35:dc:ac:94:e7:26:c1:7e:7a:52:73:84:f1:be:98:ee:d8:
         85:e3:33:65:b9:6b:06:c0:5b:44:a2:f2:2f:6b:e9:26:a6:c6:
         20:94:62:91:2c:1f:16:c9:f6:c1:6b:c8:c4:dc:17:0c:f7:79:
         35:cd:80:93:cd:35:a4:6a:55:55:42:3d:dd:9a:b5:ba:c2:ae:
         87:d2:db:35:f8:6c:e6:91:d7:64:56:01:45:f3:0b:d7:b6:47:
         bc:c4:ca:c3:48:af:a4:de:44:01:0d:cc:99:ac:65:53:87:a2:
         4c:86:20:3f:d3:ea:6d:57:3c:20:ff:f7:4a:ce:a9:bc:b9:d5:
         c8:ca:e6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:25 2024 by rpki-client on console-fra.rpki-client.org