Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36cd7eb5-a8b8-39d5-8c15-792d095e13f7.roa
File:                     36cd7eb5-a8b8-39d5-8c15-792d095e13f7.roa (raw, json)
Hash identifier:          /9fX1BX6dkGPxWrxWmZXyBcCLcDhCBgizdwQuOr1t00=
Subject key identifier:   76:66:BC:40:03:DA:22:AB:B7:E1:99:78:EE:18:B1:3B:28:15:10:49
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C1DF677792FAFCB6CEB24080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36cd7eb5-a8b8-39d5-8c15-792d095e13f7.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     20940
IP address blocks:        2600:1415:1c00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:67:77:92:fa:fc:b6:ce:b2:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=bfad32d3-5059-4cb7-a232-25414913aadf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:99:f9:6a:cc:c4:cc:dd:72:a3:52:b8:73:36:
                    f0:5f:fd:53:e5:b4:82:0d:88:3b:da:5c:b0:e8:e8:
                    03:90:49:32:db:f5:37:e5:6d:41:60:33:df:03:eb:
                    81:69:08:46:4f:dc:68:b8:72:ca:9f:91:4d:e5:ef:
                    b7:b7:92:93:77:b4:88:57:6a:db:08:83:35:26:cf:
                    58:f9:4f:88:15:73:92:fb:c1:57:cd:66:0b:fe:f5:
                    80:24:c0:69:52:83:a1:d3:c4:97:1e:3e:35:10:e3:
                    f0:9f:ab:f3:c6:2c:0e:3c:5d:3a:a5:82:1f:8a:06:
                    c5:18:7f:08:b8:4f:6a:e3:48:e4:1c:74:f7:b5:ef:
                    f4:92:2a:96:0a:6a:d9:23:a9:02:f8:5b:44:14:12:
                    88:78:ee:5a:02:d3:d7:1f:6c:e5:f9:f7:4c:17:c9:
                    62:8c:0e:13:97:6d:94:ce:fc:89:47:b4:7e:a7:2f:
                    35:f9:9b:b4:fc:84:15:b8:7a:50:64:fb:b1:f3:89:
                    1b:90:56:0d:b9:d5:27:f2:45:1d:48:74:da:d9:d0:
                    04:86:84:ed:6c:af:3f:0c:8b:9c:c6:e5:7c:7a:09:
                    1e:28:6b:22:16:d2:87:e4:39:0a:16:00:ec:e9:da:
                    10:4c:fa:da:fb:44:09:34:9d:e8:4d:c3:d2:8b:15:
                    8e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:66:BC:40:03:DA:22:AB:B7:E1:99:78:EE:18:B1:3B:28:15:10:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36cd7eb5-a8b8-39d5-8c15-792d095e13f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1415:1c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:bf:3b:ed:3d:8e:0f:9b:6e:ba:ba:cd:01:b4:c6:45:a6:f5:
         c4:36:8b:bd:61:e8:5f:a9:33:d6:77:44:68:09:28:06:9d:19:
         b8:8b:dc:22:7d:b9:89:75:0d:a9:7f:9f:e4:6e:7b:1f:05:d4:
         8b:f4:96:57:7f:29:98:c7:c4:85:be:98:c6:97:2f:dd:59:9f:
         99:e4:b7:ea:a2:e0:32:6f:71:d3:e3:7e:ec:70:d3:d4:f9:e2:
         b1:b2:aa:fa:fb:91:ef:df:0a:c0:67:b9:57:5a:75:c2:0b:fb:
         a0:11:40:c2:f1:0a:df:56:47:c4:5e:66:b8:cf:f5:a4:c1:35:
         96:de:9d:57:04:fd:bd:b0:b5:d8:4b:e7:e4:7c:33:ca:c5:11:
         8e:3b:49:1a:43:dc:e3:5f:c7:d6:df:a0:ff:7b:82:1b:4d:2c:
         a8:50:52:12:13:b7:16:f5:03:0b:bf:84:ee:74:f5:e9:c7:97:
         3b:4b:15:a1:f3:9e:78:b7:cd:2d:4c:dc:17:85:5b:52:87:1b:
         61:a3:53:81:69:72:80:66:17:4f:ff:3b:9e:74:a3:a6:4b:ff:
         59:f4:cd:ae:b1:9e:1f:c4:1b:91:13:4a:59:05:68:64:17:9a:
         d3:d3:cd:ea:c1:84:7c:da:2c:79:fa:bd:ce:5a:d0:aa:8f:be:
         c3:31:1d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:35 2024 by rpki-client on console-fra.rpki-client.org