Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5211d599-1fc2-37b7-aa91-fc2f454ed870.roa
File:                     5211d599-1fc2-37b7-aa91-fc2f454ed870.roa (raw, json)
Hash identifier:          SJf6TMdYLbR73Dhh6tSc2aza+xIcYQ/vq9a0+MeUWUE=
Subject key identifier:   63:70:FB:A2:1F:6F:AF:BB:8B:AD:E2:29:BD:38:BE:94:15:18:01:7D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584742BB43CC39171F049D4F91C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5211d599-1fc2-37b7-aa91-fc2f454ed870.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     35994
IP address blocks:        2600:1408:8000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:43:cc:39:17:1f:04:9d:4f:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=2359fbc6-5333-4b29-81f5-ef74edb71af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a5:1c:4c:40:3e:b2:7f:99:41:5f:38:7b:2b:
                    37:5f:4d:de:43:99:59:d4:cf:95:4b:29:1f:05:b1:
                    d0:72:88:2c:1f:e2:69:a0:c5:c2:24:60:f3:a7:b2:
                    90:d8:2e:33:1c:97:70:79:d2:98:b8:9a:2b:5c:63:
                    d6:4a:5e:54:d5:8a:82:a0:85:a1:bb:95:0e:42:ad:
                    33:75:03:45:c1:6c:a1:b8:a4:19:3a:cc:8d:3b:50:
                    73:97:4a:eb:38:64:22:c9:45:ee:e7:1e:9a:93:d1:
                    be:77:dc:06:7f:71:8c:e9:1d:6e:92:21:3a:e1:29:
                    79:78:05:cf:5f:04:53:95:f1:54:f4:42:2f:9f:db:
                    69:6e:d7:c9:67:a9:46:dc:e5:8a:9a:45:c0:aa:e3:
                    01:a4:bd:e4:6d:cd:29:f4:89:18:2a:16:83:a3:1b:
                    8d:f3:50:28:f3:d3:3c:0d:d0:ad:48:68:24:83:a9:
                    7a:55:73:20:12:50:ad:c5:25:ec:45:74:a7:2f:f5:
                    3f:eb:21:06:01:a1:a5:1b:97:0c:23:46:c0:a0:32:
                    2e:a8:5a:2f:70:43:9d:94:93:1e:e5:d1:5a:db:91:
                    e3:8d:2e:a4:6c:c8:8e:2b:00:f9:94:5f:e8:b3:ec:
                    95:30:ce:66:98:4f:9f:3c:9e:fe:74:5b:19:69:85:
                    63:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:70:FB:A2:1F:6F:AF:BB:8B:AD:E2:29:BD:38:BE:94:15:18:01:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5211d599-1fc2-37b7-aa91-fc2f454ed870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:94:3c:65:bc:df:29:1c:9e:5d:b1:4b:08:1e:f1:d6:fc:41:
         99:d8:8c:0b:f8:f9:4e:31:7a:c1:f1:a0:e9:be:1a:1e:fd:cc:
         5e:fc:6b:0d:c0:97:aa:96:88:6f:e5:09:f5:67:cb:44:09:5e:
         34:2b:ee:e5:65:6c:5f:68:52:f2:03:62:8b:84:91:36:48:2e:
         59:9c:72:e7:67:9a:a6:13:2f:b9:53:8e:6b:90:d7:31:7a:93:
         5d:ca:10:a1:51:36:5c:fb:cc:80:26:4c:f2:6e:a9:f6:50:3c:
         ec:37:8e:e5:bd:58:2f:f4:fa:d0:51:cf:7c:eb:1d:11:ae:95:
         d1:47:1e:a6:97:2f:8f:c8:eb:7b:a9:85:47:1b:b9:0f:28:aa:
         db:a7:18:32:e6:3a:ec:9d:80:de:7c:54:13:35:51:91:85:74:
         f8:9c:dc:86:3f:cf:73:bd:12:66:03:0c:8f:3e:cc:98:00:80:
         01:29:ba:f2:19:90:37:93:8a:b8:76:10:21:24:c0:7b:92:8b:
         99:e6:a2:8b:3b:e9:58:b2:19:75:6b:72:22:62:b1:4e:af:19:
         1b:0d:ea:9f:8c:32:b7:03:05:c1:43:e5:19:ae:a0:d7:b4:9f:
         d6:d5:4a:2c:12:01:aa:30:09:46:3b:80:28:86:89:5d:44:a0:
         97:42:bd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:47:01 2024 by rpki-client on console-ams.rpki-client.org