Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/621c7196-4d50-32f5-808d-8910680ae84c.roa
File:                     621c7196-4d50-32f5-808d-8910680ae84c.roa (raw, json)
Hash identifier:          aWn26JqK1+3sNKQy8Y22CuPXCDlb722f17kw0rVw3uw=
Subject key identifier:   74:D3:29:47:CD:C1:6B:CF:4B:C9:90:3D:50:AD:1B:4E:15:D4:47:75
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847362B52358A324E242B72F880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/621c7196-4d50-32f5-808d-8910680ae84c.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     21342
IP address blocks:        2600:1405:7800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:52:35:8a:32:4e:24:2b:72:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=bd0af90d-eb26-45b1-892a-24eed5792481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:13:5e:0c:15:88:0e:de:00:83:13:ca:88:bb:
                    84:c1:95:49:4d:b5:2d:99:60:5f:2d:ea:50:32:7d:
                    5b:ca:bb:a9:e1:38:0b:cf:bb:64:58:39:fc:2a:23:
                    74:43:d3:c7:ed:62:b7:34:b2:f1:e9:fa:c1:5b:20:
                    0a:ea:cf:67:c8:68:34:c2:42:99:64:75:d3:64:1d:
                    e3:06:ca:66:6c:8c:0b:5b:6f:c4:73:ba:3e:ef:75:
                    42:f3:b8:68:eb:98:78:41:0f:43:0a:fd:d4:02:9b:
                    aa:eb:3f:77:72:26:8f:a9:97:c9:02:a9:5c:6d:5a:
                    0c:b1:4e:91:4b:fb:07:52:be:d1:49:19:a4:54:d5:
                    48:5d:f6:8c:c7:be:ce:28:c5:88:22:0a:cc:a8:a1:
                    03:fb:f1:05:d2:0e:b4:80:2c:fc:31:0a:00:c8:b4:
                    0f:2d:b5:8d:ed:20:c4:5b:98:19:83:3c:35:8a:47:
                    0d:92:51:bd:2f:6e:5e:63:20:88:7e:57:e3:ec:94:
                    d7:b9:6a:23:00:3a:3a:14:dc:28:0e:42:2d:a9:4b:
                    85:72:f4:25:56:b2:9f:2a:48:05:b9:af:54:9c:42:
                    90:0f:ed:14:a8:df:48:f7:31:5b:06:99:d4:2f:3e:
                    e2:b6:34:5b:26:e7:24:6d:a0:5a:e8:c1:d9:4d:0a:
                    1f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D3:29:47:CD:C1:6B:CF:4B:C9:90:3D:50:AD:1B:4E:15:D4:47:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/621c7196-4d50-32f5-808d-8910680ae84c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1405:7800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:70:26:cb:66:94:59:8f:cb:af:8a:eb:25:cc:ab:3e:b9:26:
         c8:85:37:03:5e:74:2a:a0:d2:5f:6c:7f:ab:d0:66:58:e1:ee:
         7c:68:59:3f:f8:3f:a4:12:67:15:63:e8:2d:46:0d:d3:15:71:
         88:a3:c9:19:a0:73:58:bc:4e:b2:c9:54:ad:aa:d4:57:22:85:
         f8:35:6e:7e:ee:75:fa:7d:4c:25:bd:e6:28:08:83:fb:dc:a2:
         4a:ac:ec:08:e7:a8:e0:9b:57:f8:ae:09:d5:3f:b4:6c:17:fd:
         ec:bf:8a:33:b0:90:d4:88:82:c0:93:13:0e:90:d0:06:e4:c4:
         0c:fc:1d:b9:35:7d:75:f9:83:6c:fb:1f:94:3e:5e:01:ec:4e:
         68:5c:08:c3:18:27:e6:33:97:9d:9b:9f:3b:af:38:fc:7e:39:
         24:b9:b4:37:63:70:03:f0:00:02:ef:18:e4:90:ba:1f:a3:49:
         4d:18:85:89:ee:f6:2f:8b:12:3d:98:fc:c2:a3:12:1f:4b:a8:
         6d:9e:09:3d:e0:23:38:2c:d7:e0:4a:b3:76:cc:d3:cc:6d:b3:
         52:c0:80:2a:df:9b:79:c4:59:00:f2:22:5b:a4:7b:d9:14:86:
         12:06:5c:45:f2:51:d6:df:ad:1f:00:6c:c0:44:0a:b4:83:64:
         4b:bf:9f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:16:57 2024 by rpki-client on console-fra.rpki-client.org