Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/313c82c6-d14f-368a-b93c-a1b48f61f3dd.roa
File:                     313c82c6-d14f-368a-b93c-a1b48f61f3dd.roa (raw, json)
Hash identifier:          NT5e7Sg/Wj2CxnBVBQkApdHt39rYUNBA9UzHMV04jSE=
Subject key identifier:   3B:2A:65:D8:A1:68:4A:40:48:8B:36:90:D5:F7:74:A5:6A:0B:EC:81
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452BD772A765B94AB306092180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/313c82c6-d14f-368a-b93c-a1b48f61f3dd.roa
Signing time:             Mon 11 Mar 2024 10:39:56 +0000
ROA not before:           Mon 11 Mar 2024 10:39:56 +0000
ROA not after:            Sun 09 Jun 2024 10:39:56 +0000
asID:                     20940
IP address blocks:        2600:1488:6081::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2b:d7:72:a7:65:b9:4a:b3:06:09:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 11 10:39:56 2024 GMT
            Not After : Jun  9 10:39:56 2024 GMT
        Subject: CN=ae4c6b6f-49c5-43e7-94c8-d5815394b014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:76:0f:7a:43:7e:1f:05:1f:89:fe:d1:30:5c:
                    0b:4c:8d:c2:c3:22:3f:8c:5f:66:ff:7d:af:2a:97:
                    78:a5:48:fc:1d:fe:63:aa:4a:73:cf:3d:25:af:db:
                    1b:f0:0c:8a:75:58:9f:0f:b8:62:57:f8:94:6f:44:
                    bb:02:e1:a3:95:9e:75:53:4d:d6:4c:67:bd:5a:36:
                    62:d0:e5:e9:01:f1:3f:82:a6:d8:11:5d:ad:59:ea:
                    96:16:0e:a9:a2:93:0b:7c:31:60:9e:34:e1:e8:30:
                    15:57:9f:9e:0b:53:da:63:b6:0f:90:d6:57:c1:1f:
                    6a:b6:ec:59:92:05:ba:c4:8d:e2:10:63:07:3f:28:
                    e6:37:39:51:6e:38:73:d7:8d:2b:21:96:b2:b2:5f:
                    82:58:ac:ed:fb:e2:f3:dd:97:9e:ea:13:98:76:9a:
                    84:8e:8d:b8:d8:70:b9:7a:8f:13:01:b0:0d:37:51:
                    0b:b6:6f:c1:ef:c2:1a:d0:79:1f:01:03:cd:7f:c4:
                    77:a8:9f:fd:1e:b6:fe:36:4a:b1:4a:39:87:9b:04:
                    d1:e2:80:50:d7:2f:17:f9:e1:b3:b7:35:ac:b2:96:
                    53:10:a0:7f:f6:5e:7b:1d:18:c2:58:e4:bc:1f:bd:
                    98:64:da:9e:d7:d0:8c:e5:7c:9a:5d:cf:af:67:f3:
                    af:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2A:65:D8:A1:68:4A:40:48:8B:36:90:D5:F7:74:A5:6A:0B:EC:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/313c82c6-d14f-368a-b93c-a1b48f61f3dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:6081::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e2:5d:05:5d:66:0f:ca:4b:ae:a0:26:b1:34:78:fb:d6:d4:
         48:59:16:f9:d0:46:64:fe:18:68:f3:ed:fc:22:17:e9:6e:3a:
         f5:f5:b8:d0:72:b8:49:4a:91:12:51:40:7d:2a:6e:3c:1e:89:
         b6:9c:03:5c:86:4c:4c:0e:b8:c7:0e:72:5b:1c:3b:80:2d:ad:
         b7:50:fb:ca:6a:1d:b5:20:18:f3:87:70:83:ed:58:2a:d7:cb:
         81:cc:72:f3:5e:17:29:ba:3d:55:a0:0a:ae:eb:a5:95:39:61:
         48:dc:7c:77:19:23:f3:69:80:5d:35:c4:1e:53:2d:40:18:79:
         3a:77:38:0f:60:e0:9c:39:08:88:a9:22:0d:fa:70:e4:61:33:
         70:33:71:9b:52:22:56:05:5f:8a:c2:3a:07:07:94:67:f9:a1:
         42:d6:8f:fa:f2:64:79:35:be:1b:91:8a:e2:ea:2f:06:27:7f:
         84:dc:30:b0:41:d9:a9:b4:ef:f6:72:76:e7:08:83:cd:0c:c9:
         10:20:c2:8d:25:63:7d:50:51:4f:34:4f:16:8c:38:7a:07:4f:
         f0:3e:03:bc:38:a9:af:2f:bd:14:43:1c:41:69:ec:cb:5d:cf:
         ba:1a:93:d8:55:76:b4:8a:0f:09:39:f0:9e:74:39:80:4c:0a:
         e0:94:79:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:49 2024 by rpki-client on console-fra.rpki-client.org