Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aa23ad0-1462-34aa-bd52-a8cadcc9317a.roa
File:                     4aa23ad0-1462-34aa-bd52-a8cadcc9317a.roa (raw, json)
Hash identifier:          fzSMGhSQ73QYHVDqcwAquqMYhvqEkWZFrBhWTGS6Dtk=
Subject key identifier:   FA:85:D1:B3:88:B6:D3:F3:29:84:36:28:E7:C4:75:F8:2E:56:B8:29
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AE36D67AAFE424EFFFD06000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aa23ad0-1462-34aa-bd52-a8cadcc9317a.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        2600:1406:4c00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:d6:7a:af:e4:24:ef:ff:d0:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=acdbbcbf-f00a-4b23-ac7e-7965b3f30a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:50:68:ea:b4:06:38:59:ef:1d:22:52:18:2c:
                    3a:d3:81:49:b7:37:89:83:3b:ca:9b:91:97:35:fd:
                    09:28:55:b6:aa:ad:c2:2f:aa:a0:0e:12:ea:c0:58:
                    ce:14:96:1c:6e:bb:07:75:ea:ba:1b:20:cc:74:1b:
                    c4:dc:cd:b9:2b:d1:1f:3d:a8:08:81:0b:84:d0:84:
                    a3:45:a0:19:0a:9a:ed:a1:35:63:99:f8:dd:c9:50:
                    6c:d6:5f:79:30:90:08:b4:88:96:d6:23:0c:17:4c:
                    f9:c7:d8:84:fb:c8:ee:fa:34:3f:a5:99:fc:f2:bf:
                    0f:88:9e:cf:83:d1:8d:21:8d:5e:14:be:8d:0c:7e:
                    e5:b8:9a:d2:ab:a8:f0:68:c0:29:98:81:8c:22:67:
                    e9:bb:8a:88:1e:6e:2c:2d:02:91:61:60:df:83:be:
                    52:58:d8:4a:24:12:15:04:c3:0d:54:06:82:69:3a:
                    c9:46:2a:7a:01:00:e6:dd:8b:dd:67:32:3e:9a:25:
                    4d:25:b5:f5:cf:0a:2f:13:ec:64:bb:e3:48:a0:f2:
                    bd:a2:83:8b:e8:5c:b1:25:7c:59:8a:69:65:ca:91:
                    3d:76:52:c4:a4:31:97:a7:97:c6:31:8d:14:b1:49:
                    ff:38:0c:11:0e:c4:48:e7:34:99:1e:a1:3e:d2:5e:
                    24:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:85:D1:B3:88:B6:D3:F3:29:84:36:28:E7:C4:75:F8:2E:56:B8:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aa23ad0-1462-34aa-bd52-a8cadcc9317a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:4c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:54:2c:6e:5a:16:c7:a2:1e:05:61:ac:2c:aa:27:57:2d:d3:
         49:86:f0:2b:8f:5e:86:e9:e6:5f:0f:7a:28:e2:07:34:f4:cd:
         bb:13:da:68:85:db:28:bd:af:16:36:89:e1:98:1f:71:50:98:
         22:3b:00:8a:3e:81:f3:2d:e9:81:58:b7:25:94:5a:4b:6f:ea:
         ba:dd:ab:2a:b6:1d:b8:61:27:4a:15:fe:5d:56:d6:4f:27:8c:
         f4:9f:12:7b:eb:8b:a9:2b:36:f3:9a:4c:9e:fe:b2:c8:04:14:
         20:03:7b:7d:eb:ce:2e:6a:19:8e:cb:5b:88:57:95:75:d1:c2:
         3a:ce:2f:c9:a9:61:6d:1d:df:99:f6:83:ee:ff:73:e3:1e:ed:
         c3:51:82:2f:b0:6c:55:88:b4:52:e5:40:9a:13:54:e2:28:83:
         23:d6:f3:02:a4:c0:6b:c1:b5:7d:17:c5:e7:ef:27:cd:dd:7f:
         29:3f:bd:29:99:2c:e9:13:35:3e:b7:20:cc:59:1c:a5:4f:99:
         41:1a:c5:b5:a8:bb:62:03:c5:32:7f:66:aa:8b:73:4a:eb:e1:
         b2:3b:61:0d:cf:48:4e:f7:b0:63:e0:a2:da:f3:5c:80:73:e7:
         6d:d4:e1:05:de:72:06:5e:7e:83:ce:dc:58:35:08:a7:37:d7:
         94:e3:cf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:44 2024 by rpki-client on console-fra.rpki-client.org