Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4494e686-1aaa-3acb-9382-b299803a04ec.roa
File:                     4494e686-1aaa-3acb-9382-b299803a04ec.roa (raw, json)
Hash identifier:          JDDoP9gtC+5N0d6fJQfgVADqfE53bMDzN0JOzvzsjl0=
Subject key identifier:   D4:99:4F:8E:5F:96:E6:64:0E:AD:44:22:3A:D5:8E:BA:D6:3F:CF:F7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C1DF68EF3EBE6A00EB59D300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4494e686-1aaa-3acb-9382-b299803a04ec.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     20940
IP address blocks:        2600:141b:1400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:68:ef:3e:be:6a:00:eb:59:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=d91ddbaa-af73-4fcd-9176-89e76527c1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:31:9a:f3:f9:95:6b:ac:55:90:57:4a:30:e7:
                    b8:24:0f:8f:cd:29:2a:09:0e:11:cc:d0:dd:bc:3d:
                    e0:a1:d7:28:c9:05:07:89:6e:33:f8:95:0d:92:36:
                    bb:1e:10:2e:48:51:d5:17:90:d2:a7:01:8b:62:96:
                    33:1b:c6:2e:f8:c2:0c:7d:38:14:72:e1:a5:c0:10:
                    25:60:63:25:23:fd:aa:b5:c3:1d:72:7e:95:d4:fb:
                    14:a0:f6:b5:25:26:79:62:04:2a:70:d2:dd:09:35:
                    65:37:18:d0:ba:b2:25:31:0b:44:19:7d:4b:07:63:
                    ff:18:62:eb:b3:58:0f:b0:8c:10:f6:cf:86:1b:d6:
                    60:c7:09:b5:91:23:b7:19:fe:bc:02:21:40:53:08:
                    fd:c8:20:ef:0d:29:59:ed:29:e5:f4:32:f1:1a:35:
                    1a:5a:f5:cc:05:44:c8:e1:2a:bf:55:e6:5b:a4:36:
                    fc:e4:ad:39:b5:3f:14:77:b6:62:f3:9e:e9:0f:42:
                    27:aa:a8:b0:61:c6:80:2c:db:08:2f:3a:6c:d4:a0:
                    62:81:4c:8e:71:e3:cf:76:47:75:67:0e:7e:b8:09:
                    bd:82:71:f0:d0:c3:86:95:0c:19:b8:d8:26:11:9f:
                    db:66:0d:d4:fa:d4:64:5d:4d:96:62:ef:a3:1e:a8:
                    cc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:99:4F:8E:5F:96:E6:64:0E:AD:44:22:3A:D5:8E:BA:D6:3F:CF:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4494e686-1aaa-3acb-9382-b299803a04ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141b:1400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:70:da:90:73:dd:c7:23:e4:30:f8:f1:96:35:d9:ea:ec:de:
         da:88:cd:0f:16:74:27:04:87:5a:18:df:ec:08:4e:43:5f:a8:
         f9:5a:19:c9:62:ac:56:81:29:a1:36:bc:73:5b:b8:66:c0:6c:
         ea:5d:66:2a:b2:42:13:ef:31:27:01:0f:bd:a5:04:93:1d:23:
         b2:e1:95:e8:61:ff:65:ce:58:98:4b:21:b2:04:d9:b6:78:f6:
         e2:33:f7:94:2c:bf:75:45:94:f4:08:7d:5f:11:d1:db:28:90:
         10:9c:21:17:8e:d6:d6:9e:f1:a9:e6:14:d5:0c:45:3d:8a:65:
         09:aa:ca:c3:72:a5:86:c5:6f:b9:af:d6:f3:06:fb:26:36:20:
         a9:e5:1d:db:0f:3a:76:13:3c:a0:b7:07:de:01:35:0b:f7:b6:
         eb:b0:6f:7a:af:80:4f:f7:11:2b:66:74:c3:82:41:9f:ad:51:
         ee:89:27:56:19:2c:2b:9a:42:22:87:54:05:41:15:29:9d:1b:
         7d:3f:33:29:4b:a5:bb:6a:2d:f1:b9:eb:a2:0c:49:d2:9f:25:
         42:4e:d1:4b:6b:8f:aa:bc:06:61:a2:17:aa:ba:85:6f:02:e6:
         fc:5b:bd:ae:83:0e:11:44:b0:1b:3c:75:cb:df:7e:d7:2f:43:
         eb:44:aa:27
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfB32jvPr5qAOtZ0wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk
ZDkxZGRiYWEtYWY3My00ZmNkLTkxNzYtODllNzY1MjdjMWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzGa8/mVa6xVkFdKMOe4JA+PzSkqCQ4RzNDd
vD3godcoyQUHiW4z+JUNkja7HhAuSFHVF5DSpwGLYpYzG8Yu+MIMfTgUcuGlwBAl
YGMlI/2qtcMdcn6V1PsUoPa1JSZ5YgQqcNLdCTVlNxjQurIlMQtEGX1LB2P/GGLr
s1gPsIwQ9s+GG9Zgxwm1kSO3Gf68AiFAUwj9yCDvDSlZ7Snl9DLxGjUaWvXMBUTI
4Sq/VeZbpDb85K05tT8Ud7Zi857pD0InqqiwYcaALNsILzps1KBigUyOcePPdkd1
Zw5+uAm9gnHw0MOGlQwZuNgmEZ/bZg3U+tRkXU2WYu+jHqjM/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNSZT45fluZkDq1EIjrVjrrWP8/3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDQ5NGU2ODYtMWFhYS0z
YWNiLTkzODItYjI5OTgwM2EwNGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGxQA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFFw2pBz3ccj5DD48ZY12ers3tqIzQ8WdCcEh1oY3+wITkNfqPla
GclirFaBKaE2vHNbuGbAbOpdZiqyQhPvMScBD72lBJMdI7Lhlehh/2XOWJhLIbIE
2bZ49uIz95Qsv3VFlPQIfV8R0dsokBCcIReO1tae8anmFNUMRT2KZQmqysNypYbF
b7mv1vMG+yY2IKnlHdsPOnYTPKC3B94BNQv3tuuwb3qvgE/3EStmdMOCQZ+tUe6J
J1YZLCuaQiKHVAVBFSmdG30/MylLpbtqLfG566IMSdKfJUJO0Utrj6q8BmGiF6q6
hW8C5vxbva6DDhFEsBs8dcvfftcvQ+tEqic=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:23 2024 by rpki-client on console-ams.rpki-client.org