Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ed94464-6ffc-349f-ba5d-b3e058101d1f.roa
File:                     4ed94464-6ffc-349f-ba5d-b3e058101d1f.roa (raw, json)
Hash identifier:          /GnzEd/0N5t2EaTr98gdB68vVnnDLy9IIiMA7/birlU=
Subject key identifier:   0C:CE:D0:37:4F:0B:13:66:95:EE:09:62:1F:B9:66:39:F4:5D:43:4D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858451844BD9643867699A18BDFC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ed94464-6ffc-349f-ba5d-b3e058101d1f.roa
Signing time:             Mon 04 Mar 2024 10:23:59 +0000
ROA not before:           Mon 04 Mar 2024 10:23:59 +0000
ROA not after:            Sun 02 Jun 2024 09:23:59 +0000
asID:                     20940
IP address blocks:        2600:140b:c000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:18:44:bd:96:43:86:76:99:a1:8b:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  4 10:23:59 2024 GMT
            Not After : Jun  2 09:23:59 2024 GMT
        Subject: CN=1326a1f1-4e81-4836-945f-ed2bed80dd30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a0:ae:bb:73:6b:f2:b0:bd:f8:55:b1:11:1d:
                    eb:57:8f:59:76:8d:6f:9d:69:04:30:c5:0c:31:b6:
                    f8:49:e4:1c:13:b9:41:79:f1:a7:ce:e0:34:1a:0f:
                    e5:39:21:fd:56:9e:53:3d:e7:b8:35:dd:a1:50:78:
                    e7:41:7a:9a:d6:4d:a1:cf:30:9d:06:ab:84:b5:c8:
                    96:82:bc:5d:6b:10:bf:20:e3:f9:9b:5e:ce:18:78:
                    8f:df:d1:8a:60:de:37:8b:21:a2:07:44:7c:1b:09:
                    81:3b:23:32:6d:2b:63:1e:34:c8:b5:fa:34:24:28:
                    c0:f7:e2:0b:94:b9:de:50:92:aa:26:d8:14:f7:89:
                    39:0b:c8:06:9b:88:2c:41:f2:d6:0e:b6:b5:ab:74:
                    9f:ef:b8:c0:99:56:60:40:47:70:6f:d6:bf:9a:50:
                    de:22:18:1b:dd:4c:30:81:c3:3b:43:21:06:6e:80:
                    81:1f:d4:77:35:29:a9:c9:be:3b:50:9c:3d:8d:64:
                    a7:f0:f1:f9:26:1e:cb:e1:05:43:44:46:be:3a:1c:
                    1e:31:5b:2a:96:e7:c3:33:ef:33:2f:93:cc:ea:c7:
                    91:db:17:e2:73:f1:36:e8:5e:b0:fb:aa:44:14:cb:
                    7a:da:1e:80:c1:86:79:e1:b0:e0:de:4c:cb:67:a9:
                    c3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CE:D0:37:4F:0B:13:66:95:EE:09:62:1F:B9:66:39:F4:5D:43:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ed94464-6ffc-349f-ba5d-b3e058101d1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:78:49:e6:1a:17:69:4a:20:3e:a5:67:89:61:e4:0b:05:db:
         1b:92:24:a4:73:55:6c:cb:4d:69:d3:7c:33:56:5b:0c:3d:83:
         08:0d:eb:08:11:fd:13:bd:43:6b:69:d8:3a:b2:a4:75:4f:92:
         71:42:34:42:a1:2f:09:28:9e:fc:2f:87:9e:e0:2d:89:6c:d2:
         75:9e:71:a1:9e:cc:4c:52:f0:f7:05:e0:10:a6:ad:75:10:fd:
         af:b1:0e:43:0c:58:36:4b:5f:ff:f9:4c:c7:b5:dc:1e:67:a7:
         77:8f:36:58:33:5b:5f:f5:5d:30:9b:54:41:fa:8b:47:bd:15:
         6e:cc:46:65:7a:bb:48:fc:84:ae:11:d2:1e:ee:5c:5a:24:2a:
         b6:51:76:6f:e4:78:8f:fe:31:04:6d:fa:52:ad:2e:33:12:1c:
         b7:56:c8:38:c9:5e:72:37:27:77:64:8d:12:ff:32:5b:26:31:
         f1:a2:d8:fd:ec:eb:5f:0b:fd:a9:6d:c5:75:1d:56:55:b0:6a:
         90:30:1c:99:ee:8f:d6:a3:f3:ad:57:65:5c:2a:dd:d1:ae:5e:
         7d:40:d8:d8:c5:d5:62:82:30:a5:f5:2e:da:35:46:9e:e7:12:
         93:e3:8e:82:88:2f:f7:b8:42:e9:98:e1:7d:30:ff:f0:cb:b1:
         a4:87:4b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:10:45 2024 by rpki-client on console-fra.rpki-client.org