Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2149a74a-3e40-369d-bb19-f0cce18d779b.roa
File:                     2149a74a-3e40-369d-bb19-f0cce18d779b.roa (raw, json)
Hash identifier:          9OPfiUunENpqtSiG1kmxnwuFGIVfCZgmTeSUtGO1v7A=
Subject key identifier:   EB:94:72:5D:AD:29:D8:28:BC:F6:A2:FB:2F:63:EF:82:B2:BF:2A:19
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452EB49E44BD5E1BAE38712380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2149a74a-3e40-369d-bb19-f0cce18d779b.roa
Signing time:             Tue 12 Mar 2024 11:17:11 +0000
ROA not before:           Tue 12 Mar 2024 11:17:11 +0000
ROA not after:            Mon 10 Jun 2024 11:17:11 +0000
asID:                     24319
IP address blocks:        2600:1417:67::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:b4:9e:44:bd:5e:1b:ae:38:71:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 12 11:17:11 2024 GMT
            Not After : Jun 10 11:17:11 2024 GMT
        Subject: CN=5a00d1ef-3485-419d-a085-298277520890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4d:af:b4:22:2f:be:8f:c5:d9:3c:3e:56:bb:
                    55:5c:53:06:6e:15:7e:54:58:07:cd:16:c8:1c:47:
                    fa:94:e4:fb:d7:46:e5:67:45:54:7d:3f:05:5d:38:
                    15:46:dc:90:b1:98:14:15:ba:32:51:1b:ac:5b:f2:
                    df:63:a3:f3:31:6e:29:5a:57:5d:0e:fb:d1:55:d4:
                    5d:13:e3:c7:dc:9d:b7:8b:a2:a9:83:ac:3c:22:35:
                    57:1a:e8:3f:21:81:8e:b8:59:15:1c:fc:ac:e0:ac:
                    ca:97:f1:58:ab:f9:ed:5b:79:13:3d:58:ac:17:b3:
                    1c:28:97:78:60:23:f3:fa:c6:11:e0:89:cd:5a:4b:
                    57:c8:e4:d8:4d:d6:5d:b0:24:2b:f2:cc:c7:26:a8:
                    47:1c:98:1e:14:db:c3:83:ab:a2:4e:e9:03:cb:cf:
                    1d:8e:4e:b7:04:88:4d:36:88:9f:b1:3f:d7:41:21:
                    06:7d:be:3f:fe:bc:37:85:4a:ca:c0:8e:d8:3f:e4:
                    be:26:3b:66:d1:b9:e0:e6:23:88:2b:88:52:c3:7f:
                    a2:c4:54:d7:34:a5:4a:4b:18:fe:b4:3b:55:c9:bf:
                    7f:fa:b5:82:75:1e:d9:94:ba:b9:9a:90:67:c0:1e:
                    e3:89:1c:5d:ab:63:6b:84:b0:ac:2f:05:72:73:e9:
                    3d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:94:72:5D:AD:29:D8:28:BC:F6:A2:FB:2F:63:EF:82:B2:BF:2A:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2149a74a-3e40-369d-bb19-f0cce18d779b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:67::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:a2:24:f3:e8:6d:76:34:42:04:e5:50:46:00:3b:f3:df:db:
         5e:15:71:87:ae:e9:eb:6e:3b:64:49:d6:f1:e1:43:86:49:82:
         62:8d:7a:8b:05:de:d7:44:6a:f6:9a:d8:48:69:14:f5:10:41:
         5b:27:6f:c1:64:ec:05:6e:81:b2:5c:ce:9c:49:59:f9:22:ea:
         b8:74:59:ff:6d:17:7b:f1:68:65:01:bb:39:dc:bb:ed:c3:48:
         e2:66:f3:35:a8:f3:48:c0:b5:38:33:2e:97:5a:06:1e:0a:f1:
         d5:f4:19:cc:ef:43:17:c0:6f:c3:b7:29:fd:cf:62:6c:b1:65:
         bb:87:19:18:f0:c6:ee:62:67:ef:9d:c8:64:f8:b1:9f:0c:07:
         13:55:11:34:4a:c9:9c:dc:65:43:6d:b0:5a:c3:25:d3:e4:ae:
         ff:76:c5:cf:5e:8f:70:9a:cd:d5:a1:33:10:ab:2a:4c:ff:fa:
         96:6e:ea:d7:30:77:91:b8:ff:d4:69:f2:6c:b6:ae:a9:e9:5a:
         80:97:a9:5d:56:b2:91:35:27:86:ad:eb:0d:5a:94:84:d1:fd:
         a7:5e:f9:0c:44:35:fd:9b:69:9d:d0:60:dd:d0:b8:02:dd:e9:
         4d:32:4d:91:d8:c9:5c:47:4a:5b:cc:86:12:67:b5:a1:02:8e:
         c3:81:67:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:47 2024 by rpki-client on console-fra.rpki-client.org