Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b29d28c-f5f4-3583-be91-dd5523157bb7.roa
File:                     4b29d28c-f5f4-3583-be91-dd5523157bb7.roa (raw, json)
Hash identifier:          PofRn92oD/9kdcPt1IjRoeRo8RGRKDEJ6+ERbyr/85I=
Subject key identifier:   BD:9E:93:FF:7D:23:49:DF:BB:8C:01:DF:FC:79:71:DB:2F:05:2A:D0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452146ABC50D2221F7E6742B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b29d28c-f5f4-3583-be91-dd5523157bb7.roa
Signing time:             Thu 07 Mar 2024 15:50:09 +0000
ROA not before:           Thu 07 Mar 2024 15:50:09 +0000
ROA not after:            Wed 05 Jun 2024 14:50:09 +0000
asID:                     20940
IP address blocks:        2600:140a:5000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:21:46:ab:c5:0d:22:21:f7:e6:74:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  7 15:50:09 2024 GMT
            Not After : Jun  5 14:50:09 2024 GMT
        Subject: CN=fe7b9abd-bafa-4301-8d2b-448c1d0c26ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d3:4a:a2:dc:fa:69:b0:5d:be:a1:d2:5c:59:
                    83:31:40:a1:9e:63:ec:d0:27:35:40:fa:e3:67:0c:
                    09:7a:d3:b3:5b:5c:e0:ea:c5:32:73:05:b7:cd:39:
                    e9:0e:53:6a:f2:f7:9f:cd:0c:0d:cb:0a:2e:78:80:
                    72:7d:38:71:72:f1:d2:77:0a:bf:a1:30:01:ee:24:
                    2e:e0:6f:f9:67:ba:cf:6e:97:19:cc:9b:dd:3e:b1:
                    8b:b7:16:83:4f:77:40:76:c8:db:a1:23:0f:8d:54:
                    08:08:f9:91:b8:d8:c2:b1:95:f9:76:2f:a5:c6:fd:
                    2e:37:56:0f:ea:97:6a:da:cd:67:74:52:92:b1:8e:
                    9b:f7:1e:29:0f:a1:d1:fb:df:03:48:7e:21:0f:1f:
                    43:2e:11:f0:2f:40:d6:ac:c4:91:91:70:4c:b5:15:
                    50:b5:48:c4:ab:89:2e:73:b2:47:3f:77:58:40:87:
                    2f:03:21:a8:44:54:73:f1:3c:20:fe:bc:65:c8:55:
                    08:c3:db:6c:f6:b2:c4:5c:28:23:f6:90:61:b8:6a:
                    82:16:9f:64:05:67:7a:e6:f4:49:ce:3c:94:10:a8:
                    47:b2:b8:83:ab:30:1e:f7:d5:14:48:44:08:de:c0:
                    50:01:e9:6e:2c:ff:03:fe:72:a3:c1:cc:9a:99:fc:
                    00:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9E:93:FF:7D:23:49:DF:BB:8C:01:DF:FC:79:71:DB:2F:05:2A:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b29d28c-f5f4-3583-be91-dd5523157bb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140a:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:4a:3d:1e:be:20:7a:b8:1d:39:fc:6f:07:7a:88:3b:bd:d7:
         59:6c:1b:7d:31:03:ff:20:d7:5b:24:23:87:8b:6e:6d:6c:1a:
         32:87:e5:b0:73:02:77:04:3c:5d:51:5b:15:c7:b6:7f:1c:17:
         34:aa:64:8a:cf:0d:e3:2f:07:c4:c3:2c:99:12:8f:f7:06:05:
         ee:35:63:01:88:a6:66:6c:2b:89:0a:c6:af:9e:e0:76:46:7a:
         5a:79:be:bd:6e:2c:6d:7d:7e:ac:87:75:cc:b9:53:7d:55:ea:
         cc:fe:86:06:ce:ab:d6:5e:41:6e:16:11:d8:9d:98:88:7d:d3:
         02:c6:68:6d:5f:da:cc:36:2d:17:3f:6d:8f:1d:5a:97:3a:2d:
         9d:06:3f:dd:17:d5:fb:f7:40:39:e2:fc:91:aa:02:c0:43:96:
         25:6d:d3:f5:23:a8:e0:a5:0f:7b:e6:74:d6:a9:9c:c1:31:65:
         b2:cb:9b:92:d4:29:0b:49:ec:15:a7:ed:e0:63:53:c1:d0:ec:
         48:33:af:e1:1a:71:d7:c9:64:ee:ef:22:cd:ad:af:8f:76:36:
         12:ac:c7:77:82:71:e8:87:cd:e5:a5:9b:89:ef:cb:49:21:c6:
         94:9a:85:08:cd:47:31:43:63:cc:ab:cb:52:a1:97:29:19:a5:
         9e:4c:ba:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:13:03 2024 by rpki-client on console-fra.rpki-client.org