Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69e2ffd7-fc06-3710-a1e0-96a52d5fb4cc.roa
File:                     69e2ffd7-fc06-3710-a1e0-96a52d5fb4cc.roa (raw, json)
Hash identifier:          hmWFfA5A2pXX1tN4KeSPPPxeWg7lP1W3POEt9ywOVEQ=
Subject key identifier:   C1:43:59:26:95:D8:C4:44:CA:C5:A1:2C:DF:9E:40:F5:57:8F:B0:E5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584523CBAEC8C62E99FE86723500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69e2ffd7-fc06-3710-a1e0-96a52d5fb4cc.roa
Signing time:             Fri 08 Mar 2024 13:29:46 +0000
ROA not before:           Fri 08 Mar 2024 13:29:46 +0000
ROA not after:            Thu 06 Jun 2024 12:29:46 +0000
asID:                     20940
IP address blocks:        2600:141f:c000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:cb:ae:c8:c6:2e:99:fe:86:72:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 13:29:46 2024 GMT
            Not After : Jun  6 12:29:46 2024 GMT
        Subject: CN=4129fcdd-8a68-4a7a-b878-210a0faffb36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c6:27:7c:29:ce:64:9a:78:a8:bb:7d:71:0a:
                    55:04:06:b0:35:ad:c5:45:90:d7:e0:6d:44:cb:a6:
                    50:13:66:d5:ea:65:ac:b8:8b:95:6d:d5:19:92:37:
                    d3:4c:23:43:85:ab:0f:93:3a:90:eb:7d:08:cb:9e:
                    28:59:66:0b:7e:bf:04:22:06:b6:46:5f:a1:66:94:
                    d1:d8:fd:73:d3:6e:26:c5:bb:2e:38:30:9c:b9:e6:
                    b6:01:3b:17:e8:93:4f:41:c1:5b:85:24:57:bc:69:
                    1a:42:96:61:b4:50:2a:0e:cd:31:27:a0:f4:e8:aa:
                    06:ad:59:00:a5:6e:f5:2f:f4:15:52:66:ac:7a:5f:
                    37:eb:aa:e4:da:d2:95:c7:23:3e:1c:17:b6:06:de:
                    90:80:be:d7:d3:0c:fd:bc:04:5f:4d:12:5d:a2:a8:
                    3c:f7:be:f4:e1:e8:85:d1:70:f7:0d:fd:b3:91:6a:
                    d3:56:71:2a:c0:df:e4:98:19:90:a2:e9:57:12:ce:
                    48:19:a0:8a:b2:bb:f0:f5:81:5f:8f:cd:4d:41:9c:
                    ab:7a:19:41:51:b5:17:34:3f:41:c2:54:40:e6:09:
                    c8:3a:69:db:3f:da:91:ba:21:3f:e6:b8:16:fd:32:
                    1a:bb:45:e8:0b:0d:75:e2:69:82:9e:21:3a:14:e7:
                    76:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:43:59:26:95:D8:C4:44:CA:C5:A1:2C:DF:9E:40:F5:57:8F:B0:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69e2ffd7-fc06-3710-a1e0-96a52d5fb4cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141f:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:36:53:90:00:29:09:cf:d6:56:52:55:64:ee:55:96:d8:5e:
         95:af:a4:ee:09:2e:42:7a:bd:54:67:60:a1:0b:4f:d7:91:ca:
         c7:0b:40:28:1e:16:a5:35:d8:45:6f:c6:8c:e2:a3:14:b1:50:
         72:da:4c:31:4d:d1:90:46:1b:d0:49:cb:b3:13:3b:81:90:de:
         f2:ab:4f:f1:b1:d0:68:d3:3c:8c:4a:68:ad:72:76:87:ac:cc:
         1a:19:b4:95:37:6e:b9:39:5a:a4:2c:b4:25:11:20:fc:3e:30:
         bc:c9:84:b2:ae:b0:10:ce:38:2b:c5:02:16:b6:f9:6f:ec:3e:
         3f:5d:53:25:5a:0c:24:c5:a2:7f:2e:da:66:fe:52:54:ff:15:
         14:98:b0:b0:14:ff:b5:4b:87:54:7c:b1:02:01:d9:82:c1:7f:
         80:78:78:44:40:ba:85:19:8f:0b:68:62:d4:d5:8e:36:43:73:
         31:3f:b7:f5:87:fd:2f:21:5c:fb:5b:5d:40:af:41:10:cd:c5:
         87:75:cc:b6:e6:4b:30:4d:bf:ec:3a:16:d0:9b:9e:a4:cd:bb:
         f7:ca:11:fc:ab:bd:e9:39:da:a8:1c:8f:20:5a:47:a6:1c:6a:
         53:b8:ae:6b:f0:7a:66:ab:b0:66:a5:2a:98:52:c0:b2:34:7a:
         84:1d:cb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:53 2024 by rpki-client on console-fra.rpki-client.org