Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3500782d-09f3-3c89-9c40-4613a5928fd0.roa
File:                     3500782d-09f3-3c89-9c40-4613a5928fd0.roa (raw, json)
Hash identifier:          OX43HDy8zJkOeuvQxelt8L4fuRMnN+r/9gy3H9V7xaw=
Subject key identifier:   16:46:5E:0B:4A:A7:D2:18:D2:F2:7B:89:CD:9B:6B:FC:A8:E4:FD:31
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B696C1A48D003B353FA58A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3500782d-09f3-3c89-9c40-4613a5928fd0.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        2600:1417:2000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:c1:a4:8d:00:3b:35:3f:a5:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=a22c3066-1044-408d-8bff-6d6199c452dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f3:e3:24:0d:a0:78:fe:85:2b:28:f9:2e:03:
                    1b:c9:a2:6c:de:58:ba:4d:88:69:30:be:34:98:c2:
                    e4:27:fe:0e:3a:f8:dc:bb:3a:7b:c6:1a:f9:90:78:
                    26:35:81:e0:f1:85:03:fc:4e:a1:cb:f6:9e:22:ce:
                    c7:98:34:4d:5f:fa:32:c1:b3:77:00:eb:4b:97:da:
                    fd:ca:ce:49:79:64:17:53:a0:30:62:06:7a:dd:60:
                    f5:f6:64:e2:61:ea:31:2e:3c:75:03:36:53:88:2a:
                    07:32:f2:46:b8:07:40:bd:b4:1f:b3:d0:cb:b2:7e:
                    49:ee:1f:aa:ca:fe:73:5d:b5:ac:b3:8d:30:88:67:
                    88:b3:05:ff:cf:0f:1b:cb:5d:4b:b7:80:6d:7a:18:
                    8f:bc:6d:8f:f5:72:07:08:2c:84:27:3c:fe:73:fd:
                    5a:44:fa:3e:14:57:3c:bf:ab:c4:e8:a7:5e:68:35:
                    4c:21:c2:ca:01:b3:1e:d7:88:56:01:df:18:37:bc:
                    ee:69:5b:4d:37:13:a7:5e:2d:60:d1:d3:30:9d:f9:
                    63:41:bf:21:16:6b:9e:de:c2:92:0b:89:22:f0:ed:
                    bd:84:39:ee:ce:cc:69:ee:23:21:bd:70:d1:7d:5c:
                    68:11:c8:af:76:39:53:de:d9:4c:85:52:7f:1e:23:
                    b9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:46:5E:0B:4A:A7:D2:18:D2:F2:7B:89:CD:9B:6B:FC:A8:E4:FD:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3500782d-09f3-3c89-9c40-4613a5928fd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:07:40:02:8d:c9:18:fa:c5:d3:bf:ec:b4:45:98:a8:54:fb:
         dd:09:ec:3a:a7:06:e6:5d:f9:3e:28:61:4d:b3:61:3a:7b:32:
         25:dc:bc:1e:d5:0c:0f:28:32:97:8e:37:32:34:37:ff:a3:75:
         8b:93:86:51:74:39:86:53:2b:31:18:a7:ba:ed:44:e1:0a:7c:
         6c:1e:cc:b4:a7:2b:09:22:43:ad:d8:11:12:b9:64:bc:51:ed:
         34:1e:76:70:c3:2a:90:6f:06:bc:fd:9c:e0:b7:d7:71:c8:15:
         4e:2e:71:10:fa:47:3c:ba:ac:b8:9c:29:8b:6b:6c:67:4e:e3:
         e2:f9:f6:14:75:a0:56:76:39:94:ac:56:43:b0:9e:75:da:0d:
         9a:f0:f8:d8:d4:8c:b1:73:f4:8c:cf:d2:f7:7e:4b:87:35:82:
         b2:b1:97:19:53:14:b0:dc:3f:83:8c:9d:f5:7f:f9:d2:5e:b7:
         7f:0b:f9:d4:c0:f5:b6:98:9a:f4:6a:13:a4:f4:d9:57:a8:38:
         93:78:1b:4e:02:5d:bc:cf:ed:c8:fd:8d:e4:28:58:de:04:1a:
         08:9e:e2:05:40:23:f7:79:6d:c0:fa:a1:31:7f:1e:a3:81:df:
         1b:11:9b:05:e3:74:66:df:d3:4b:eb:b7:0e:e7:b2:43:01:1c:
         87:1f:19:d1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe2lsGkjQA7NT+lioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTAzMDEzMDA0MFoXDTI1MDEyODE0MDA0MFowLzEtMCsGA1UEAxMk
YTIyYzMwNjYtMTA0NC00MDhkLThiZmYtNmQ2MTk5YzQ1MmRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/PjJA2geP6FKyj5LgMbyaJs3li6TYhpML40
mMLkJ/4OOvjcuzp7xhr5kHgmNYHg8YUD/E6hy/aeIs7HmDRNX/oywbN3AOtLl9r9
ys5JeWQXU6AwYgZ63WD19mTiYeoxLjx1AzZTiCoHMvJGuAdAvbQfs9DLsn5J7h+q
yv5zXbWss40wiGeIswX/zw8by11Lt4BtehiPvG2P9XIHCCyEJzz+c/1aRPo+FFc8
v6vE6KdeaDVMIcLKAbMe14hWAd8YN7zuaVtNNxOnXi1g0dMwnfljQb8hFmue3sKS
C4ki8O29hDnuzsxp7iMhvXDRfVxoEcivdjlT3tlMhVJ/HiO5ywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBZGXgtKp9IY0vJ7ic2ba/yo5P0xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzUwMDc4MmQtMDlmMy0z
Yzg5LTljNDAtNDYxM2E1OTI4ZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFyAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF4HQAKNyRj6xdO/7LRFmKhU+90J7DqnBuZd+T4oYU2zYTp7MiXc
vB7VDA8oMpeONzI0N/+jdYuThlF0OYZTKzEYp7rtROEKfGwezLSnKwkiQ63YERK5
ZLxR7TQednDDKpBvBrz9nOC313HIFU4ucRD6Rzy6rLicKYtrbGdO4+L59hR1oFZ2
OZSsVkOwnnXaDZrw+NjUjLFz9IzP0vd+S4c1grKxlxlTFLDcP4OMnfV/+dJet38L
+dTA9baYmvRqE6T02VeoOJN4G04CXbzP7cj9jeQoWN4EGgie4gVAI/d5bcD6oTF/
HqOB3xsRmwXjdGbf00vrtw7nskMBHIcfGdE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:34 2024 by rpki-client on console-fra.rpki-client.org