Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fe15f21-a3bf-3d1f-8669-16162af17154.roa
File:                     3fe15f21-a3bf-3d1f-8669-16162af17154.roa (raw, json)
Hash identifier:          jbr160BGz3TOrIwMVmDOxfhpw94i7AOxrlw34CmgWeA=
Subject key identifier:   4E:EE:F6:21:16:8C:E1:93:72:7E:82:43:8A:30:B0:30:D8:A3:56:31
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858450D49F672B937AB68371A0900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fe15f21-a3bf-3d1f-8669-16162af17154.roa
Signing time:             Thu 29 Feb 2024 12:00:37 +0000
ROA not before:           Thu 29 Feb 2024 12:00:37 +0000
ROA not after:            Wed 29 May 2024 11:00:37 +0000
asID:                     20940
IP address blocks:        2600:1400:b000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:49:f6:72:b9:37:ab:68:37:1a:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 29 12:00:37 2024 GMT
            Not After : May 29 11:00:37 2024 GMT
        Subject: CN=68857918-f0e3-4329-b322-b77ebd960bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:06:2c:5b:fe:cc:29:e4:df:c2:d2:8d:4e:54:
                    82:64:4b:28:cc:4d:ad:ed:a1:15:f4:d6:58:3c:f2:
                    21:fd:2c:ed:5e:eb:41:51:3d:34:a8:88:12:e7:82:
                    44:a6:62:70:af:56:d8:14:c3:83:5b:64:a4:b5:89:
                    0a:d2:53:f1:1c:a0:fd:bd:e6:7a:27:06:4b:d0:27:
                    e6:75:69:72:a9:61:6b:29:ed:9d:66:76:63:1d:d0:
                    17:f4:83:26:e2:8c:df:53:f4:4c:5e:d6:e3:0e:36:
                    4c:51:80:9a:20:36:c8:77:14:7d:d2:74:82:c0:7e:
                    49:64:28:92:20:54:ad:17:f9:3f:f8:5e:38:8c:a2:
                    ae:62:83:a9:77:a3:a9:96:98:e4:3e:8f:8d:3d:cb:
                    3a:00:fd:49:8d:fd:0f:56:ca:2a:ae:f3:53:09:4c:
                    94:6f:b4:c9:0f:4b:f2:30:cd:12:00:0d:ed:cc:02:
                    02:7f:74:35:8d:d1:9d:37:1e:ed:21:97:0d:f0:b3:
                    1b:10:3c:b4:8f:b2:6d:4a:28:9c:5e:0b:fd:5f:2e:
                    fe:4e:44:fa:aa:7f:67:00:d2:e6:e5:1a:73:a1:6f:
                    ea:74:7c:4a:e5:75:14:1a:8e:64:81:a9:b5:93:4e:
                    3b:ca:d5:c6:0e:fd:df:d9:01:b4:aa:e9:ce:31:f9:
                    71:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EE:F6:21:16:8C:E1:93:72:7E:82:43:8A:30:B0:30:D8:A3:56:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fe15f21-a3bf-3d1f-8669-16162af17154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1400:b000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:5a:50:a0:15:15:02:22:48:51:75:df:fa:02:19:09:02:f1:
         e5:a4:e8:8c:a4:ab:63:7a:5a:ca:7e:7c:b9:13:c6:cf:ab:f0:
         48:a1:8f:eb:51:29:57:3b:ba:4b:55:6b:7e:4b:6e:f2:2b:a7:
         8d:a6:83:c7:6d:51:bb:ec:0c:34:40:42:39:89:ae:14:32:b2:
         e8:7f:ba:6a:b3:17:bd:e3:d8:51:af:ab:ef:bd:1f:0f:bd:bc:
         b4:b6:94:b9:0f:65:99:01:56:72:38:25:45:d2:11:6f:ae:d9:
         a1:0c:bd:5e:02:2a:e3:c3:6f:59:ba:68:7a:f1:ae:1b:4b:82:
         35:49:3e:fe:b0:26:5d:5a:99:f5:4f:ab:ea:09:c2:49:b0:d2:
         dd:2e:b2:f1:de:b2:a5:70:34:31:a7:5b:d6:e9:3e:67:6b:8e:
         c6:c8:50:c1:38:c7:b1:90:e0:11:98:f1:f5:33:2a:8f:3e:5e:
         09:04:c2:88:26:36:24:18:fa:0a:fe:ad:10:90:2a:aa:90:11:
         57:c1:61:4b:e4:2c:0b:d0:f9:07:2d:81:1e:94:4e:23:2d:64:
         f5:1a:fa:68:17:43:35:9f:32:7f:cb:35:e7:f2:46:0b:a9:1a:
         08:6b:c2:df:f2:b2:db:4a:43:dd:60:4c:9e:71:12:7f:75:55:
         d7:2b:8c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:15:21 2024 by rpki-client on console-ams.rpki-client.org