Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b3732f9-d5df-34f8-a106-8bf5b5602ca0.roa
File:                     4b3732f9-d5df-34f8-a106-8bf5b5602ca0.roa (raw, json)
Hash identifier:          M/YQn8EAQ02MFuNp1VYqE9+7pJZiNxTG7jUtWqrnOiU=
Subject key identifier:   48:47:5F:81:F1:09:08:DE:9F:15:D9:F1:28:8F:2D:1F:EE:22:C2:F2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847CE6F481F9CA8AD1E51907480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b3732f9-d5df-34f8-a106-8bf5b5602ca0.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     9498
IP address blocks:        2600:140f:a400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:48:1f:9c:a8:ad:1e:51:90:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=eccc5022-9a9b-4a91-aa78-5bfcb9292704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:45:b1:db:9a:a6:96:b6:33:9f:b9:6b:81:7b:
                    d1:67:a0:7c:a6:bc:b6:1c:42:12:78:f2:d1:b9:4d:
                    41:d8:1d:c5:36:6c:95:48:20:6f:58:81:43:db:d6:
                    bd:c2:60:e5:20:a9:8d:2d:a3:e4:e3:42:06:ef:87:
                    75:d7:76:5c:54:20:df:2b:65:cc:7f:07:59:85:dd:
                    8b:c0:ac:72:2c:5f:85:48:d3:1e:14:50:95:28:d1:
                    bd:e0:06:60:26:89:ee:a7:a4:bd:56:f0:f1:ca:5a:
                    3d:50:bf:7a:26:87:11:8b:c6:87:49:87:02:08:d0:
                    57:4f:1a:31:7b:68:d7:69:58:07:d4:ca:ab:fd:a8:
                    91:18:e5:3c:4b:12:36:6f:87:49:25:f6:9a:05:7a:
                    7b:1e:db:7c:24:49:04:51:6c:b3:9d:8f:da:12:4e:
                    78:37:2a:89:4c:bb:4b:a8:2c:ec:0f:0e:18:e9:30:
                    86:5a:bc:92:d2:04:fa:6d:0d:8e:52:e0:07:e6:a8:
                    47:8f:e4:14:59:b2:c2:8c:6a:b4:86:79:8d:7a:2f:
                    94:f0:6c:9e:63:f2:4e:a2:c5:c6:c3:2a:f2:43:92:
                    a1:95:db:f2:1b:1a:dd:5b:60:a7:83:cf:d2:b9:f6:
                    83:f1:e8:95:74:a0:3d:f1:df:b9:20:03:ea:e4:b7:
                    3c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:47:5F:81:F1:09:08:DE:9F:15:D9:F1:28:8F:2D:1F:EE:22:C2:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b3732f9-d5df-34f8-a106-8bf5b5602ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:a400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:40:71:eb:16:60:99:08:60:b9:76:b2:fd:2a:63:e5:a0:a4:
         29:98:6b:1c:03:46:81:53:43:fd:f5:95:90:d6:cf:8d:2f:6e:
         6f:7b:b1:18:87:85:63:2b:78:06:c1:1d:76:93:7f:48:5e:b5:
         c4:d9:0a:fa:1d:ae:bc:7a:f1:23:02:84:f7:0c:88:13:d8:70:
         1e:6c:9a:69:47:ce:32:bc:81:16:4d:a4:c8:9f:2e:53:ff:03:
         2f:55:bb:67:59:82:2b:ea:76:cf:b9:62:e3:e8:04:08:12:d5:
         60:0e:17:52:6d:d2:54:12:ad:df:c4:24:01:36:d2:23:6a:c6:
         77:8f:82:05:6c:3c:21:52:ff:fa:e4:fe:77:8f:7f:28:23:51:
         4f:f2:20:4a:42:61:e7:65:2f:c0:d8:9f:a7:39:60:37:07:63:
         e9:37:37:1a:88:e5:ed:a3:95:bb:0d:78:b7:64:3c:43:96:2f:
         39:1c:83:29:72:cd:76:57:67:50:d7:49:f6:4a:cb:7e:e4:b1:
         af:83:a0:8f:b5:b4:27:da:f6:01:7f:e0:8c:45:be:59:fe:31:
         48:6c:2e:0f:dd:e6:dc:12:3c:48:81:9c:06:b4:78:a1:7e:aa:
         d7:6c:68:aa:11:00:07:c5:d7:00:ef:7c:f0:15:36:1f:30:40:
         ea:7b:9e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:12:40 2024 by rpki-client on console-fra.rpki-client.org