Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d91fef9-6c69-3e69-bc3d-562560f995f8.roa
File:                     2d91fef9-6c69-3e69-bc3d-562560f995f8.roa (raw, json)
Hash identifier:          uxqcgjTuG+Ss3ecRL1QFGzj9Dv6v0ROhCuSSTKzohgg=
Subject key identifier:   A9:81:7A:28:C9:48:08:24:8F:47:19:59:7D:41:4A:D9:79:A9:EE:AC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AB6C1FA21F2FA6A67DA9F200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d91fef9-6c69-3e69-bc3d-562560f995f8.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     20940
IP address blocks:        2600:1401:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:1f:a2:1f:2f:a6:a6:7d:a9:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=73cd9be3-a7a8-400f-9566-df1e35ab317b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:98:3d:99:a8:7c:aa:a5:b0:40:18:8d:d7:2b:
                    74:f6:28:c9:6b:af:ac:e6:2f:9e:63:35:4b:94:c6:
                    3a:aa:9f:2b:bb:7c:5f:d6:a9:15:ad:0f:1a:31:a8:
                    a8:8a:a0:aa:8d:d1:af:7d:f1:82:49:d4:34:78:8e:
                    63:1f:07:30:9f:86:83:c9:20:31:ec:84:11:7c:e4:
                    6f:ed:be:38:fe:02:f6:7a:80:bd:49:33:4e:e7:e8:
                    45:cf:7d:62:df:d5:d2:2d:de:2b:75:99:41:49:65:
                    57:8a:90:c2:74:2d:a2:e4:25:3a:c1:9f:90:2b:d4:
                    99:7c:95:63:08:5b:7a:78:c9:a7:e0:cb:65:0c:c6:
                    37:86:ea:74:e3:58:66:5d:1d:c2:e0:eb:1e:51:06:
                    34:00:fb:4d:10:ae:e9:b5:76:47:91:4d:1b:eb:bd:
                    f3:4f:4d:7b:f1:f1:df:ce:ed:d6:94:d1:50:da:6a:
                    23:3d:91:01:72:9e:71:a4:3f:f2:2d:f4:58:45:75:
                    e0:ee:05:1b:3c:bb:66:f8:08:36:af:38:1f:3a:be:
                    22:39:01:21:19:11:3b:c3:e7:3c:f1:dd:2a:a9:c9:
                    5e:fb:a6:fb:e6:00:7e:40:3d:37:48:0f:34:f2:e4:
                    75:44:0d:1d:6a:2e:6a:26:7a:ff:da:d8:c2:e2:a5:
                    3a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:81:7A:28:C9:48:08:24:8F:47:19:59:7D:41:4A:D9:79:A9:EE:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d91fef9-6c69-3e69-bc3d-562560f995f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1401:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:45:b6:0e:b7:bf:4f:ad:49:52:c5:62:1f:7a:d4:5a:0d:6d:
         da:d6:9f:38:85:b2:2d:ff:83:c4:34:86:6d:91:85:6c:3a:51:
         75:d8:91:9b:39:6e:ff:ff:c7:35:2a:e2:26:15:ac:3c:7f:e3:
         af:53:14:d0:24:14:f6:b3:36:b8:fa:f7:f6:52:3e:8e:ec:5a:
         77:d6:69:39:48:31:0d:b0:70:53:a2:95:e1:7a:be:34:83:ec:
         7f:d0:2a:16:c2:9c:70:13:1c:d1:cf:a8:90:6a:37:29:70:51:
         43:20:05:d8:c9:24:93:d2:94:bc:55:f6:a2:be:90:49:f9:33:
         79:8a:ec:16:53:d6:df:88:22:9d:b2:8f:46:ab:38:21:5f:f6:
         61:4b:f7:2b:46:30:ff:55:2b:e6:c0:b5:74:d8:2d:3d:8e:4d:
         14:9e:4e:f0:89:a7:c4:15:2a:db:cf:10:b4:b0:f0:5a:66:49:
         d1:85:af:3f:33:15:1a:9a:9e:70:1b:e9:50:3e:cf:11:ad:32:
         16:ae:0b:7b:01:f2:ee:9d:6f:27:6f:6f:cc:40:ff:cf:cf:aa:
         40:2f:38:85:4f:92:b4:0a:bf:22:cb:e4:21:ed:1a:79:d5:19:
         bf:ef:33:6b:94:d6:42:74:b6:e7:5e:95:86:0c:01:e9:42:bf:
         e5:43:ad:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:13 2024 by rpki-client on console-ams.rpki-client.org