Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52a51b64-b887-39a7-bb66-ecba4def864c.roa
File:                     52a51b64-b887-39a7-bb66-ecba4def864c.roa (raw, json)
Hash identifier:          S/hv2Dh64xBPXq8kHUzYuU8nEcMcjxKN03PXoy6WLp8=
Subject key identifier:   8C:48:4F:6E:A9:B2:1F:6A:CA:3B:71:E8:B0:8C:59:FD:A0:81:AF:E0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847CA3F8D7AEFCF81069D6ECCE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52a51b64-b887-39a7-bb66-ecba4def864c.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        2600:1488:c120::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:8d:7a:ef:cf:81:06:9d:6e:cc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=9606bff8-9fb1-4c4c-8ecb-e316e8bc1e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:49:e8:7d:2f:ca:72:12:6d:dd:7a:33:a0:72:
                    58:da:ca:9e:c7:34:95:49:5d:f9:37:9a:9d:a5:6e:
                    6a:b5:3b:35:02:a9:f6:40:0a:9c:a8:9a:93:45:55:
                    29:e2:35:87:8a:2c:fe:24:a9:92:73:e1:79:7d:98:
                    a8:e8:e4:42:83:1a:ba:88:3d:78:c3:97:e3:97:28:
                    74:31:8e:69:75:25:9f:f8:de:f3:02:64:5c:b1:02:
                    d7:d7:6c:1a:b5:bb:01:1c:fa:0b:8f:79:73:5b:e4:
                    2d:13:15:b3:78:4e:73:e4:41:0f:b3:9a:b2:83:74:
                    72:1f:21:48:0d:db:81:ca:72:1b:90:9e:5d:ef:85:
                    20:2f:a2:ed:9b:8e:1e:c4:f1:c0:9c:78:f1:cc:b5:
                    1a:36:2a:66:8c:42:78:4b:ff:46:20:74:71:78:b9:
                    a4:aa:ce:34:7e:67:09:42:0a:89:54:43:85:f7:50:
                    2f:00:d1:4b:62:1f:7d:a8:31:b9:3a:56:6b:48:37:
                    e7:26:0a:53:ec:f4:ad:dc:fb:f4:d1:be:c4:ed:3c:
                    2a:65:78:74:09:75:8c:c6:5c:b4:62:d6:e8:fa:9a:
                    57:d1:2d:fa:bc:cc:32:74:cb:d1:69:3d:3d:90:f9:
                    dc:08:34:be:ca:79:5e:e6:50:55:72:41:3e:31:55:
                    ad:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:48:4F:6E:A9:B2:1F:6A:CA:3B:71:E8:B0:8C:59:FD:A0:81:AF:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52a51b64-b887-39a7-bb66-ecba4def864c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:c120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:4b:b7:8f:1f:9f:35:6f:c6:45:63:95:ef:e0:e8:70:89:db:
         26:96:29:8a:12:d5:72:35:43:57:b6:14:53:c8:99:c6:3c:b9:
         a3:42:7e:4c:6d:3e:42:f6:74:2d:9c:44:e7:8e:28:66:0a:1c:
         16:fe:32:bc:47:52:c2:8a:c9:68:85:bf:2a:80:35:33:b0:35:
         4e:4a:2d:b5:bf:92:d5:04:8a:d5:75:b4:0f:cd:36:50:0c:05:
         bd:18:db:f6:c8:76:1d:67:11:05:08:27:d0:ed:6f:0d:24:1b:
         93:b5:48:8c:5b:61:03:82:d8:d1:f2:66:df:63:eb:37:7f:35:
         8a:04:95:9d:42:5f:61:11:de:e7:ce:85:4c:df:22:6f:dc:50:
         8f:4a:4c:50:5e:de:28:c2:09:3a:83:4e:86:50:9c:86:50:97:
         91:0b:6a:ca:ed:0e:14:20:b0:8e:a1:24:a3:72:02:33:92:f8:
         40:55:33:fe:2f:2a:6a:32:0e:39:cb:ae:42:4b:58:4f:c7:e9:
         60:ee:a5:38:53:04:8f:8e:47:26:87:98:88:c7:d7:97:2b:5a:
         db:be:49:8d:6f:bd:e6:b5:7a:2e:37:4a:25:ce:16:29:40:e8:
         8e:3f:30:de:a9:f8:68:39:9d:f1:3e:18:ff:2f:fb:6f:9a:58:
         e2:0a:25:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:30 2024 by rpki-client on console-ams.rpki-client.org