Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/531f89bb-17b3-3cf6-b01c-92a78c30793f.roa
File:                     531f89bb-17b3-3cf6-b01c-92a78c30793f.roa (raw, json)
Hash identifier:          wq8paxl7qo6lekOzIz1BEdRHWoP2ytlTLQGVwDStZbU=
Subject key identifier:   FF:EF:4C:E9:87:69:ED:DD:42:F3:78:58:3B:C4:E8:B7:91:F4:52:3F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452BCC8158B0BF77A16E9210C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/531f89bb-17b3-3cf6-b01c-92a78c30793f.roa
Signing time:             Mon 11 Mar 2024 10:17:53 +0000
ROA not before:           Mon 11 Mar 2024 10:17:53 +0000
ROA not after:            Sun 09 Jun 2024 10:17:53 +0000
asID:                     20940
IP address blocks:        2600:1488:4002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2b:cc:81:58:b0:bf:77:a1:6e:92:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 11 10:17:53 2024 GMT
            Not After : Jun  9 10:17:53 2024 GMT
        Subject: CN=50620f4f-714a-4561-8b02-4249aa7de7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0a:31:a9:00:04:95:bb:a2:71:e4:92:94:9a:
                    ae:20:de:5b:6f:6f:5a:20:b5:7f:8e:0d:2d:da:9c:
                    0f:85:b5:58:7c:74:7b:4f:ad:89:24:5c:c7:60:30:
                    48:37:cd:ce:f1:fc:cc:ea:87:74:bd:99:70:81:e9:
                    45:94:9f:28:55:3c:b9:67:7d:9d:2c:ab:f1:39:88:
                    3a:76:bf:04:db:60:de:01:ad:5b:3a:80:15:8b:61:
                    ba:ae:c8:5f:dd:b0:c5:04:38:3b:e1:38:34:42:48:
                    53:35:5e:f2:72:69:57:35:4e:5a:7b:cb:59:4c:97:
                    99:99:8c:87:ef:95:58:62:14:eb:e7:fe:f9:a2:3b:
                    ab:0a:1e:f7:6b:cc:51:88:01:fc:a1:40:72:dd:05:
                    c4:7a:4a:0d:07:f7:62:21:d2:75:a2:81:54:55:72:
                    ae:5b:29:ae:e6:12:ce:7d:ef:75:e4:b8:dd:ae:79:
                    49:42:8d:d7:ed:d3:eb:ce:5b:36:03:83:b2:4c:51:
                    90:9c:9d:3c:db:ec:8f:4b:fe:67:db:55:5c:d6:95:
                    d0:e0:5e:a3:68:1e:50:11:0b:5a:53:d3:21:4c:50:
                    5b:28:be:51:84:39:cc:bc:a8:29:13:5b:17:b4:93:
                    ec:40:58:5d:27:5e:df:c9:2b:f9:ca:b2:24:28:2f:
                    9b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EF:4C:E9:87:69:ED:DD:42:F3:78:58:3B:C4:E8:B7:91:F4:52:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/531f89bb-17b3-3cf6-b01c-92a78c30793f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:4002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:9f:0f:41:21:ae:e3:cf:30:dc:74:92:71:01:7b:06:2b:0d:
         cc:2c:75:cf:ad:f5:7a:97:58:82:9e:99:a4:f9:d9:f9:0c:fa:
         e7:e9:41:17:de:0b:b6:0f:88:51:e0:ba:d9:82:aa:f8:3e:74:
         9b:bb:6b:ae:5f:66:fc:c0:9e:0e:6b:da:66:d1:cc:9b:5b:cc:
         71:95:47:90:ef:00:42:76:5f:df:a4:95:a8:7e:9e:f0:61:f7:
         b8:4a:2f:f1:61:f2:0f:0c:1f:83:c0:41:d9:37:d8:c2:9c:e2:
         d5:91:32:44:b3:c4:aa:47:b1:29:54:c5:b5:6d:7d:12:4b:04:
         37:3b:98:01:e9:2d:7a:04:24:40:27:ac:f2:fc:8b:52:8a:da:
         c2:f1:b6:f6:1b:61:f5:2d:e4:22:51:ab:6d:7a:56:a7:53:fe:
         02:62:39:6c:1f:55:76:ff:46:28:71:7a:3d:18:5c:13:8b:58:
         cf:01:51:30:7b:e9:32:9c:5e:f9:e8:af:c7:67:57:22:c5:35:
         33:6b:b8:d3:39:af:0d:27:27:84:e3:d3:4d:f5:da:0b:a6:24:
         79:95:7d:0a:92:b7:1a:52:84:2f:94:54:0b:40:4c:93:77:f3:
         39:a1:86:a7:41:5a:f8:d1:94:ed:2c:ca:ff:02:35:f8:3d:70:
         d5:66:aa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:13:03 2024 by rpki-client on console-fra.rpki-client.org