Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5590595c-2ea3-39b0-83b9-3a72a4aed30d.roa
File:                     5590595c-2ea3-39b0-83b9-3a72a4aed30d.roa (raw, json)
Hash identifier:          t+w+qfA4XWfh/xvGmYB728i2wFT4yxA+2GSpXmpK01I=
Subject key identifier:   37:A9:A4:69:F1:14:10:67:76:D3:F5:A0:51:01:19:B1:D1:0E:EA:89
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847CE6F469B6F74A8789C583760
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5590595c-2ea3-39b0-83b9-3a72a4aed30d.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     24319
IP address blocks:        2600:1417:32::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:46:9b:6f:74:a8:78:9c:58:37:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=ab76e91f-89fb-40d6-b002-7023c1e0b3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:7d:ba:55:94:ca:99:35:8e:8f:e4:e9:6b:
                    34:21:cf:16:dc:f4:46:0b:f3:02:f3:58:23:b3:f7:
                    47:52:91:8e:5f:fa:c1:8e:06:61:1b:a4:91:81:33:
                    c0:40:14:35:9f:8d:45:2b:f5:a8:e4:64:ca:af:58:
                    c0:a6:96:2f:b2:1e:36:3d:dc:56:10:d9:5a:1f:82:
                    93:5f:04:89:97:4c:cc:08:54:1f:a6:9f:2a:b7:97:
                    2b:b7:c1:97:44:55:73:3a:70:70:42:b1:20:36:39:
                    37:dd:43:e4:2f:36:d2:50:60:64:20:70:b7:cd:be:
                    47:dc:f0:e2:6d:07:14:5f:62:85:df:13:f4:ff:d2:
                    55:81:2a:85:82:1f:8e:e9:1b:f6:67:54:ad:a7:15:
                    65:21:1a:2e:e2:e6:11:4c:5c:55:75:9c:49:b6:9a:
                    4e:29:37:01:1c:e0:da:09:47:b6:67:d5:11:8f:ea:
                    c0:41:04:1f:33:28:67:8c:b8:6f:a0:8a:47:35:16:
                    98:ab:e3:20:b6:aa:4f:6d:55:9a:f7:df:6b:97:a2:
                    b6:ed:9f:31:e0:9b:8e:75:0f:f8:8f:13:08:24:f4:
                    18:43:60:78:ae:02:6c:06:82:a3:41:a2:a6:51:90:
                    af:63:70:12:21:fc:bd:6f:e5:3b:1a:6d:ff:3f:2a:
                    c1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A9:A4:69:F1:14:10:67:76:D3:F5:A0:51:01:19:B1:D1:0E:EA:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5590595c-2ea3-39b0-83b9-3a72a4aed30d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:32::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:b9:e8:57:54:e9:41:d3:21:bc:c3:d5:fc:09:6b:28:6c:36:
         84:41:2d:88:29:82:5f:59:d3:9e:bb:7e:73:56:dc:31:9d:ca:
         86:fb:d8:9a:26:f7:6f:8b:c1:45:a1:c3:f0:4e:20:e0:f7:a3:
         f9:fb:a6:51:27:74:4d:0a:81:ad:36:f0:fb:94:88:55:4e:2b:
         51:00:09:60:41:86:0e:e0:1c:ca:02:ed:d3:c8:c5:2d:4d:ba:
         53:01:7c:8e:e9:a6:85:f4:f8:0d:b4:24:8c:5a:ab:f1:42:d6:
         ec:c1:1c:2c:25:f8:eb:d4:1d:9e:d8:da:f3:2b:6f:e8:3b:cd:
         f8:96:45:6b:ca:4e:0c:ca:a1:2a:8d:05:02:ab:4a:9b:a5:c4:
         28:18:55:25:c5:fd:d8:a2:28:3d:e8:1a:b4:22:4a:94:b9:d6:
         ab:9c:fb:cc:8e:e2:05:4b:f9:e9:1d:32:d8:51:23:a9:f3:48:
         72:6e:51:fc:c6:98:89:a6:e9:e4:c5:51:7b:ca:7b:18:f7:89:
         08:d3:b1:f2:6b:bd:b0:50:3e:24:d2:03:d4:0b:3c:7d:7f:0f:
         d6:b5:12:5d:5e:2b:9e:7d:9e:8c:32:05:38:b7:72:9d:16:f9:
         c7:9b:56:c4:8e:7e:7d:5b:96:cb:71:9a:98:98:8e:8c:02:e1:
         07:15:fa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-ams.rpki-client.org