Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/442942b3-be87-35e4-b885-74352261cd7d.roa
File:                     442942b3-be87-35e4-b885-74352261cd7d.roa (raw, json)
Hash identifier:          zGSRKp14HqR8+MhipukEFZKQsVmuKXbZdcL3uXHe2Sc=
Subject key identifier:   21:92:8F:51:A9:5B:41:FF:01:85:C8:7E:21:13:B9:D3:20:36:EF:7A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584523B7B2408F751E6F71027E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/442942b3-be87-35e4-b885-74352261cd7d.roa
Signing time:             Fri 08 Mar 2024 12:49:30 +0000
ROA not before:           Fri 08 Mar 2024 12:49:30 +0000
ROA not after:            Thu 06 Jun 2024 11:49:30 +0000
asID:                     20940
IP address blocks:        2600:1409:6800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:b7:b2:40:8f:75:1e:6f:71:02:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 12:49:30 2024 GMT
            Not After : Jun  6 11:49:30 2024 GMT
        Subject: CN=ab1404d6-c5db-4d7d-b64c-c3df69c0a20a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:73:47:70:75:32:30:a9:28:df:df:6f:8a:bd:
                    57:4e:8a:22:5e:76:23:93:43:89:be:9e:2f:aa:83:
                    17:0f:5f:db:f0:29:72:03:0d:fc:4b:2f:3b:a8:2d:
                    71:e1:54:d7:ed:0a:24:e5:44:c7:3a:5a:c5:5b:46:
                    4a:24:21:f1:17:16:86:53:6c:2e:26:e4:03:30:d2:
                    3a:96:07:64:24:9f:1d:50:dd:05:1d:d3:be:ce:2d:
                    00:00:ca:96:0c:cf:e2:1e:ba:7c:cd:76:49:d7:88:
                    0c:c2:74:ca:8b:19:73:26:f7:3d:6f:5b:4b:08:39:
                    3c:8c:4d:3c:ef:e1:a7:83:97:ef:70:08:24:44:c8:
                    60:da:9c:cc:51:62:6d:4e:5f:1e:38:76:76:2a:0d:
                    30:04:d7:c6:ef:16:30:29:8e:5f:29:6e:10:6b:70:
                    de:77:09:d2:a0:a1:82:fc:37:88:43:f4:05:67:49:
                    a1:66:26:64:26:1d:04:8b:1e:3a:8d:e4:68:22:6e:
                    2c:96:af:1d:d0:14:75:44:f2:6c:1b:5e:9d:0c:0b:
                    17:d5:77:df:1b:b2:1b:86:af:bc:e2:e3:79:09:e1:
                    a6:c8:4c:76:27:e4:e5:09:1e:30:7d:82:04:1b:2b:
                    5f:24:cb:8e:cb:5d:a8:0b:a8:35:d4:44:e5:5f:9a:
                    26:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:92:8F:51:A9:5B:41:FF:01:85:C8:7E:21:13:B9:D3:20:36:EF:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/442942b3-be87-35e4-b885-74352261cd7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1409:6800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:58:80:37:15:88:51:5d:bd:63:0e:7c:2c:e6:3b:31:14:c4:
         73:f5:f6:e2:c2:22:87:a1:6b:04:ca:e2:be:fe:5f:7c:18:35:
         c1:e2:f8:c6:2e:42:bf:5f:6b:9e:1d:3f:7c:4d:9f:d2:b4:51:
         d8:ae:d5:78:45:5a:f9:7d:33:ca:c7:d7:b1:fb:17:6f:fb:d6:
         f6:2c:7c:28:a1:86:29:67:47:cd:a8:90:d4:48:59:e4:44:9d:
         3f:3e:02:ad:b5:74:5a:d9:1b:8c:c9:6d:d2:9f:fe:56:66:91:
         97:91:a1:a0:5f:2a:f8:cb:d2:b8:03:40:ea:fd:a0:10:1a:cd:
         fc:bf:1b:64:84:a2:75:2d:1d:c8:7b:2f:1a:6a:fe:d4:e3:c5:
         b0:e7:a8:a4:74:56:44:6e:0e:3c:fa:50:6b:57:48:d1:e1:94:
         37:ba:b9:3c:5a:c6:3f:b1:87:b8:83:34:cc:14:b7:ec:5f:cc:
         64:0f:1e:99:26:ef:9d:03:7b:05:44:64:30:d6:16:c0:ad:a9:
         90:9e:29:7c:d0:9c:d3:53:79:ed:59:65:e0:20:5b:3c:53:fe:
         d5:31:0a:2a:d1:a3:1c:48:97:09:72:6c:d7:02:de:69:61:1c:
         ef:a5:68:86:16:8d:c2:f0:36:d6:19:ac:1d:72:f6:c4:78:3a:
         7c:4f:54:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:36:19 2024 by rpki-client on console-ams.rpki-client.org