Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42172cbf-6cf0-3da3-8bfb-394d1f2c48f0.roa
File:                     42172cbf-6cf0-3da3-8bfb-394d1f2c48f0.roa (raw, json)
Hash identifier:          dkfQaAwwhSjFFIDM79I538SOM9FkjzH6R/37wbUkX/g=
Subject key identifier:   50:8D:F4:38:70:F5:B4:F7:14:30:F6:C0:F2:EE:D0:EC:FB:5B:74:3F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C1DF63D77B78715C15AC9780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42172cbf-6cf0-3da3-8bfb-394d1f2c48f0.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     20940
IP address blocks:        2600:1404:8400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:63:d7:7b:78:71:5c:15:ac:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=1f1bfff1-69ed-42ba-a1e9-21d96daaf6a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:89:bc:11:29:36:10:02:9b:9e:56:d5:26:3b:
                    10:85:51:5c:a5:70:00:72:a3:91:ff:b3:bb:68:65:
                    5c:2c:e8:07:f1:e2:15:be:2f:74:cb:c0:b0:85:cd:
                    92:79:24:34:e9:7a:1c:35:55:28:ff:ec:ba:4f:27:
                    2d:50:85:ce:9a:ba:24:38:b5:e6:cf:c6:e5:0d:e6:
                    ba:91:a1:a3:eb:c0:08:67:2d:e6:a9:d2:aa:25:0d:
                    75:bf:13:d0:8a:9a:0b:bf:74:fe:fc:3c:dc:47:e8:
                    a2:e5:d0:95:2b:41:d9:7b:d1:7a:61:25:96:4d:e6:
                    40:38:ec:4c:50:b6:db:a5:9d:15:72:27:00:91:eb:
                    f5:30:91:6f:79:bb:4d:95:38:6f:43:35:1f:56:34:
                    17:d1:10:36:48:a2:ea:25:c5:42:22:1c:8d:b5:4d:
                    89:74:c9:c5:37:af:79:7c:e9:8d:09:ce:cf:12:21:
                    50:a6:ea:61:98:a3:6e:68:e9:9b:47:b6:58:a7:6a:
                    f3:36:c2:69:6b:16:9a:f8:fd:2a:d3:79:ba:b6:a4:
                    a1:71:64:b8:81:75:4a:7d:11:7c:bb:ba:8e:b8:d8:
                    c2:b6:52:93:3e:b0:ec:8d:f4:6b:05:1c:0e:57:2c:
                    de:4c:be:a8:46:01:ca:5d:1c:e2:76:12:60:82:3a:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8D:F4:38:70:F5:B4:F7:14:30:F6:C0:F2:EE:D0:EC:FB:5B:74:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42172cbf-6cf0-3da3-8bfb-394d1f2c48f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1404:8400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:f0:9a:ca:78:31:2b:eb:28:a5:c6:2e:ff:55:c6:f0:63:87:
         19:34:66:2e:7b:c4:79:f2:10:d9:0d:c6:16:07:df:fb:51:7e:
         54:f1:75:85:00:ba:25:03:4c:a7:8c:96:dd:d5:a0:3d:f7:11:
         0e:d9:3a:bf:82:d0:a2:42:86:87:dd:82:64:a5:6e:14:2c:65:
         ff:cc:51:02:68:9c:26:86:52:a7:7d:ce:5d:d8:bd:24:c2:b6:
         97:4a:2e:b2:d8:10:b1:9b:bf:13:e2:b7:d3:55:63:7e:80:93:
         9a:fc:de:33:95:7d:56:6d:c0:19:68:35:1a:61:be:08:6d:cc:
         cf:2b:e5:e3:b1:40:99:38:17:d7:5d:0b:2d:55:0d:65:e6:18:
         cc:53:7e:f0:fa:81:47:ee:c4:77:cd:09:3f:b1:83:c1:ed:09:
         59:e6:37:15:3e:4e:0f:a0:cc:31:fe:11:77:69:b9:a0:f6:05:
         d7:cb:44:da:0a:da:20:e1:f1:cc:41:6b:fc:6d:8d:3d:6e:f9:
         37:7d:d6:5c:24:54:5e:50:f8:35:95:57:76:e5:2d:21:9e:c4:
         11:e1:19:18:d9:ca:47:49:b1:e2:ab:1f:aa:f2:0d:4b:86:b3:
         35:9d:28:de:00:80:00:14:64:14:bb:88:be:76:59:f2:a2:a9:
         37:d7:54:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:22 2024 by rpki-client on console-ams.rpki-client.org