Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55a6b7a0-9e63-3218-8b8a-d1f28bf9a8b4.roa
File:                     55a6b7a0-9e63-3218-8b8a-d1f28bf9a8b4.roa (raw, json)
Hash identifier:          hVh7V53/RsJP2WPBptz9tel7TFBVyzEaoC2uul5/prM=
Subject key identifier:   D8:66:D8:8B:34:E5:3E:D0:AF:C6:AC:3E:93:95:1E:EA:2D:E9:B3:51
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452EA623ED6DAC72BED5EE1390
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55a6b7a0-9e63-3218-8b8a-d1f28bf9a8b4.roa
Signing time:             Tue 12 Mar 2024 10:48:01 +0000
ROA not before:           Tue 12 Mar 2024 10:48:01 +0000
ROA not after:            Mon 10 Jun 2024 10:48:01 +0000
asID:                     9498
IP address blocks:        2600:140f:5800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:a6:23:ed:6d:ac:72:be:d5:ee:13:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 12 10:48:01 2024 GMT
            Not After : Jun 10 10:48:01 2024 GMT
        Subject: CN=bcb9591e-5482-4828-b7e6-3cc8052d1968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c4:e1:8e:46:48:08:a2:94:d4:65:de:f6:a7:
                    41:b5:c0:da:d1:94:6c:81:f3:e2:31:fe:f2:f3:6f:
                    d9:d3:9e:29:1c:14:21:d3:02:0b:1c:e5:8a:db:cb:
                    53:24:79:32:89:31:87:9c:21:f7:e1:8d:88:dd:91:
                    5a:da:98:4e:e5:dd:3e:cb:41:d4:ac:d3:7c:3c:d8:
                    00:fa:a7:fe:c5:f5:b0:7c:30:86:f4:43:a5:eb:d3:
                    a9:65:d6:bc:cf:bf:4a:f6:3d:f0:a2:c4:90:16:09:
                    11:4a:e3:fd:2b:32:c9:d0:57:ec:5f:73:a8:51:5a:
                    f4:9b:d7:47:62:dc:6e:95:18:e6:99:cb:f4:cc:1c:
                    7d:13:f1:78:90:fd:7e:60:a0:a7:7b:7e:76:2a:e3:
                    f1:69:06:22:25:a7:5a:47:24:e4:ac:bf:36:e0:f8:
                    5b:76:00:cd:6d:8d:80:fa:a5:6c:cc:12:10:32:64:
                    c4:ba:e4:2e:2a:df:41:40:f7:ed:d1:51:f8:0f:b0:
                    e2:b0:cd:63:57:34:cd:56:e9:52:d7:69:c6:14:6e:
                    06:17:21:73:87:24:b5:7d:f0:e5:f2:a4:5a:65:e4:
                    d1:1c:7e:97:5f:62:53:6f:06:60:91:be:fa:99:ff:
                    78:44:83:df:30:c8:f3:50:f2:46:14:14:77:7f:db:
                    42:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:66:D8:8B:34:E5:3E:D0:AF:C6:AC:3E:93:95:1E:EA:2D:E9:B3:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55a6b7a0-9e63-3218-8b8a-d1f28bf9a8b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:5800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:08:f0:b5:28:4e:e4:aa:da:90:84:80:d4:e9:5e:94:e8:92:
         af:d6:72:b1:e5:8b:cf:9a:1d:2d:ac:4a:87:47:8b:de:36:0b:
         39:ee:c7:3c:ed:92:b5:58:08:54:dc:0e:42:e3:79:7a:26:d0:
         af:40:28:06:ac:64:d7:9d:75:fd:14:04:82:0c:6c:12:aa:9b:
         31:0b:72:c8:6a:4b:9b:18:a5:f0:2f:a1:92:e6:fa:52:06:a1:
         19:bc:29:3d:3e:c1:99:35:35:ac:57:76:73:09:f0:e8:9d:e2:
         24:4f:87:df:9f:a2:6a:ad:02:27:d3:ef:e3:07:6c:e6:23:f4:
         d1:44:ef:f2:ab:4b:ca:0d:cf:32:27:5b:0c:c6:be:28:5e:82:
         fc:2d:ed:8f:e4:2a:67:a2:6b:35:fd:34:e5:d2:f1:24:e0:55:
         ad:ce:16:28:3f:74:c1:d5:a3:15:b0:48:82:e2:53:a3:b1:27:
         dd:14:0e:e9:34:cc:7a:bc:ff:73:ef:8a:33:50:b0:7a:df:1b:
         f9:81:a3:f0:f7:47:9f:05:4e:61:1f:8c:98:68:2d:a5:6b:38:
         3a:37:16:e7:93:99:c2:8e:c3:f0:cb:d3:0d:12:ec:05:c2:b2:
         c4:36:c7:00:86:28:b0:90:68:7e:1b:6a:c3:07:94:c7:d1:94:
         1a:70:72:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:14:25 2024 by rpki-client on console-ams.rpki-client.org