Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31f1f47c-2c65-3ebd-9006-7375955e4ed0.roa
File:                     31f1f47c-2c65-3ebd-9006-7375955e4ed0.roa (raw, json)
Hash identifier:          uy2a4uy5bJ0/LKaTofpbpyvknV3um5Eis8DYndayWSg=
Subject key identifier:   B6:7E:F0:72:60:5C:19:96:87:97:F4:30:95:5E:ED:A4:20:14:1F:2A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AE36D6FCC8DA12047D8DA080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31f1f47c-2c65-3ebd-9006-7375955e4ed0.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        2600:1408:9000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:d6:fc:c8:da:12:04:7d:8d:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=f90a65a6-ee86-42bc-a2a5-9cb86d4b2d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:27:da:79:e8:01:bc:1a:70:91:e4:d3:91:38:
                    f5:be:64:de:94:3c:69:19:0e:f9:b2:10:92:93:73:
                    97:1f:a1:d3:3a:17:7a:26:63:9d:a8:da:46:c7:ce:
                    0a:2e:4b:06:98:2f:11:55:98:38:db:a2:39:c8:f4:
                    db:37:2d:24:29:1b:76:5c:93:da:e1:f6:cf:eb:94:
                    d9:56:64:01:67:91:18:84:40:d3:68:91:52:67:ee:
                    1a:45:0b:7f:24:b6:b2:82:83:a9:bd:6a:05:e7:4a:
                    ee:a7:07:69:16:8f:9e:f7:53:94:19:48:f8:4b:7e:
                    85:d6:10:1f:e8:f3:6f:6b:ad:4b:e2:4e:f7:f9:e7:
                    03:19:d1:3c:55:f2:00:27:fe:4d:16:0b:52:3a:c6:
                    83:5c:cc:50:1f:2a:71:8a:cc:ef:3b:95:7f:31:a7:
                    c7:e3:cc:da:aa:81:e6:77:78:ee:dd:fe:04:f6:d3:
                    9f:a4:21:a9:e7:41:a9:fe:0e:60:0c:a8:e1:1e:e7:
                    f3:05:95:65:ed:b6:47:d5:98:76:dd:4e:c9:c3:ed:
                    f5:54:8b:e6:b7:52:2e:f2:5b:ae:56:b8:18:7c:75:
                    e4:3b:6f:6d:3d:7e:62:9a:75:5e:df:76:3f:21:9f:
                    28:ad:84:a8:1d:7b:d8:4e:97:d8:10:97:6f:f6:49:
                    63:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7E:F0:72:60:5C:19:96:87:97:F4:30:95:5E:ED:A4:20:14:1F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31f1f47c-2c65-3ebd-9006-7375955e4ed0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:9000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:28:1d:cb:b1:8d:1d:2d:d6:a8:60:e2:0b:3d:fc:72:df:ac:
         9e:7f:4e:c1:0f:85:7f:90:9e:b6:ec:0f:25:e8:a3:63:1d:c3:
         8c:56:f6:8c:5c:e2:2c:13:c8:95:1b:f5:37:df:19:98:01:d4:
         14:5f:cd:5b:b8:9c:eb:79:75:10:0a:93:03:aa:a0:6a:47:5a:
         32:a0:90:43:8f:c7:14:6f:8b:7c:2c:ba:ae:6a:90:f1:53:4b:
         1c:e9:47:76:0d:e5:72:3f:69:46:66:dc:f8:6b:07:cc:33:48:
         cb:f1:48:ae:87:af:1d:71:b9:a6:27:11:8a:60:9e:7c:10:45:
         29:a6:81:ef:75:72:c7:8a:0d:9e:a4:a2:60:47:b9:33:6c:31:
         1e:51:a2:81:74:67:a7:37:cb:cf:b4:ff:58:c3:4f:7a:2c:a8:
         6c:52:3d:52:5a:11:57:76:38:3b:13:4c:7d:a4:ac:b1:8e:07:
         b3:d8:82:48:d8:91:ee:25:e1:fd:2e:18:a3:ee:52:bc:5d:c9:
         28:4f:fc:52:d6:93:94:5f:b2:ab:fd:d2:39:79:58:30:bb:b7:
         6b:e8:de:db:0b:4f:71:3e:99:80:fd:df:f6:9e:a4:80:60:a5:
         31:13:69:1f:d1:3c:76:f9:c8:d7:68:76:8d:d6:83:9e:6b:96:
         43:19:07:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:33 2024 by rpki-client on console-fra.rpki-client.org