Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f9e81b0-c751-31a4-bfa5-1a2a0073dc16.roa
File:                     2f9e81b0-c751-31a4-bfa5-1a2a0073dc16.roa (raw, json)
Hash identifier:          R2M3WT0Ci4NLZGEvFwdLZH1XahMohnwTRXhGNFUN4Uc=
Subject key identifier:   9F:2E:24:70:94:19:87:55:34:A4:BF:61:1C:1C:61:C0:E8:47:D1:72
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584523A60F603D4E6D5A225F3680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f9e81b0-c751-31a4-bfa5-1a2a0073dc16.roa
Signing time:             Fri 08 Mar 2024 12:13:57 +0000
ROA not before:           Fri 08 Mar 2024 12:13:57 +0000
ROA not after:            Thu 06 Jun 2024 11:13:57 +0000
asID:                     20940
IP address blocks:        2600:1407:6400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:a6:0f:60:3d:4e:6d:5a:22:5f:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 12:13:57 2024 GMT
            Not After : Jun  6 11:13:57 2024 GMT
        Subject: CN=d9fa03f0-ab7f-41e7-ab83-0321c7c15470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9e:6c:21:88:43:15:b8:98:d4:22:73:ad:64:
                    e2:38:c3:a6:ba:99:d3:d5:ad:04:36:e1:85:2b:6c:
                    42:05:f8:93:da:91:6b:fe:61:51:45:2d:f7:a0:40:
                    03:99:da:82:d0:a3:56:7d:55:ed:a3:b7:c6:1f:13:
                    90:52:f5:6a:37:46:bb:fe:f2:3e:56:53:be:0c:b3:
                    41:2b:da:66:0f:a5:41:97:c0:07:d7:38:64:79:ed:
                    87:95:f7:85:e9:b2:17:6c:5f:aa:13:69:0c:d6:f1:
                    76:72:d1:1b:b0:8b:e3:9b:ff:af:90:89:61:9e:56:
                    c3:1a:31:ea:ba:1b:46:41:e7:eb:7b:a9:bb:38:04:
                    20:fc:44:6b:0a:01:e2:9d:9b:20:42:50:f4:23:ef:
                    55:97:ef:6d:cf:7e:74:ec:45:05:a3:7e:f7:f2:94:
                    97:90:4a:5c:9f:97:0e:e3:f2:e0:ba:e3:c7:13:71:
                    39:13:ab:c7:ef:fc:39:68:d4:ad:e5:25:d4:45:8d:
                    72:fc:b3:ef:ea:ad:b7:97:e5:a6:79:30:c4:d6:db:
                    9f:a2:0a:ac:c7:8e:81:8e:2b:9b:38:27:da:88:a6:
                    24:c5:91:9e:26:be:61:39:43:e5:c0:48:41:7c:5f:
                    b6:54:bb:ff:2d:59:09:d2:ea:5e:d6:2a:64:d9:f2:
                    6c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2E:24:70:94:19:87:55:34:A4:BF:61:1C:1C:61:C0:E8:47:D1:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f9e81b0-c751-31a4-bfa5-1a2a0073dc16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1407:6400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:0d:e7:2d:a0:c2:fd:74:dc:8e:6c:97:61:14:70:71:99:14:
         e3:ed:7b:16:a9:60:48:1b:d9:b0:79:8c:95:0a:24:98:33:9b:
         eb:09:02:bc:4a:a8:2f:2e:5b:ee:9c:9e:e2:9b:15:be:2e:29:
         18:3f:c2:bc:01:2e:07:03:3e:df:cb:15:2c:68:88:57:0c:1a:
         e2:e6:b2:10:c8:48:bb:6b:6e:77:38:62:89:9b:ff:de:f7:e3:
         09:ea:bf:48:18:ab:af:29:a4:25:a6:04:40:d3:6e:a5:3a:c0:
         6a:49:d6:a1:05:c8:7f:69:02:77:e7:f7:b6:b0:a2:b3:37:19:
         3b:2d:3c:17:83:09:55:4f:5e:0e:b2:07:ae:58:97:a4:b2:40:
         df:38:b3:39:e4:9c:bb:4c:28:8e:0b:92:67:61:15:bc:80:d8:
         0c:6d:76:b9:8f:19:df:a3:d1:b6:4f:5b:09:e9:93:68:40:4e:
         e6:a6:65:51:b5:7b:67:42:45:24:0e:8a:c2:60:35:e3:25:37:
         0a:0d:e6:87:33:a2:15:8a:45:bf:0e:ec:bf:36:c8:f6:63:cc:
         a3:c5:1c:c3:ba:fd:68:d6:20:72:3d:cd:54:f2:1c:53:f3:00:
         68:68:8a:7b:69:55:a0:0f:91:a0:23:5a:ee:6c:1c:ac:91:df:
         80:18:1b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:16:42 2024 by rpki-client on console-fra.rpki-client.org