Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c0510c1-da35-311b-afd9-9c94cfffe7c9.roa
File:                     6c0510c1-da35-311b-afd9-9c94cfffe7c9.roa (raw, json)
Hash identifier:          YHQagsq2A3LaP/f2jB9Q3Me4A2Moz6xjRV9mBT7TTnM=
Subject key identifier:   28:FD:D2:07:10:56:52:59:B1:DB:47:9E:6F:1F:8F:F4:69:3F:A2:09
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452C2D98F3CF6C19E2111ABE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c0510c1-da35-311b-afd9-9c94cfffe7c9.roa
Signing time:             Mon 11 Mar 2024 13:33:31 +0000
ROA not before:           Mon 11 Mar 2024 13:33:31 +0000
ROA not after:            Sun 09 Jun 2024 13:33:31 +0000
asID:                     35994
IP address blocks:        2600:1408:4400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:2d:98:f3:cf:6c:19:e2:11:1a:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 11 13:33:31 2024 GMT
            Not After : Jun  9 13:33:31 2024 GMT
        Subject: CN=d8a9a1bb-de2b-4096-b7b6-148d208822dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0c:58:04:64:7d:81:0f:88:38:0c:f6:98:4f:
                    14:da:23:b2:a4:e5:a6:fd:5e:34:70:3b:be:7c:45:
                    38:36:66:0e:46:0c:de:db:e6:ec:7c:22:7e:bc:76:
                    3b:e2:b9:b0:7b:80:75:ce:9f:c6:f5:49:f6:39:3d:
                    1c:6b:45:27:3c:fe:58:ef:3f:be:22:df:eb:ed:41:
                    75:42:bc:fe:ba:e2:f5:4b:59:ce:3f:b8:7c:24:55:
                    56:ce:6c:2b:ac:c9:eb:07:2e:ce:72:5d:ae:62:dc:
                    1a:80:f0:ce:0f:b1:81:28:50:63:75:10:26:d7:71:
                    28:f0:24:f3:0e:dd:b0:7b:74:0e:78:5c:d4:22:51:
                    3c:41:5e:9a:58:83:bc:fe:4a:7c:da:20:ba:d9:c3:
                    9f:1e:1b:ea:15:57:f2:61:d7:73:15:6a:1a:6d:08:
                    f8:9e:ac:fa:81:37:a4:d6:4f:ef:65:78:44:65:5f:
                    8d:dd:b1:ae:86:d8:f3:01:e9:dc:7b:9e:6f:0b:a5:
                    12:cd:1e:e8:15:19:41:85:d8:b2:76:ad:4f:26:a6:
                    a2:c8:3b:1b:00:53:93:17:7e:81:6c:98:17:95:ea:
                    c3:67:c9:7e:4b:a7:32:cb:23:74:9b:4a:fe:1c:a8:
                    ed:64:af:d3:97:03:3e:8e:01:31:d0:64:7d:56:0a:
                    d4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FD:D2:07:10:56:52:59:B1:DB:47:9E:6F:1F:8F:F4:69:3F:A2:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c0510c1-da35-311b-afd9-9c94cfffe7c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:4400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:75:16:91:43:2d:b8:74:4b:7c:4c:f4:9e:33:3d:94:c4:dc:
         9d:61:2d:37:90:52:cf:93:23:8f:99:94:20:a9:49:89:17:c5:
         2c:c7:3f:87:7b:ec:2d:0b:92:3a:f6:06:67:e9:ff:70:48:1e:
         c2:41:b0:42:16:a0:34:d3:6f:fc:52:91:3d:23:a4:64:89:85:
         b5:ae:ea:e3:6a:41:d9:5e:2e:f4:87:d7:3b:2b:0c:6e:4b:13:
         d9:18:60:a4:29:62:cc:e4:c4:45:ea:5c:1c:bc:c6:76:2b:c4:
         14:dc:78:41:35:ed:c8:7f:a1:3e:49:ed:0e:51:96:2f:67:14:
         fe:d3:24:5e:0f:09:dc:9e:57:34:52:ea:0e:b6:98:d6:6b:46:
         27:9f:86:19:49:94:02:d5:e1:3e:02:40:c7:7e:38:f6:73:de:
         bd:cd:b0:3c:a2:c6:83:9a:df:9e:bc:56:4e:1c:48:bb:6c:74:
         40:20:2a:6e:a2:d0:40:c7:f3:b6:25:22:77:32:83:0a:5f:5d:
         35:5e:09:9a:f6:b1:5d:dc:f4:ce:c5:b6:77:07:96:13:19:79:
         1e:44:8d:12:47:dc:87:44:b7:ec:6d:8e:15:db:b9:61:ab:fa:
         ae:4b:fb:c4:f0:4a:a3:84:f3:6a:a2:19:60:17:cf:d2:78:b3:
         ad:b3:ae:65
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUsLZjzz2wZ4hEavoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDMxMTEzMzMzMVoXDTI0MDYwOTEzMzMzMVowLzEtMCsGA1UEAxMk
ZDhhOWExYmItZGUyYi00MDk2LWI3YjYtMTQ4ZDIwODgyMmRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQxYBGR9gQ+IOAz2mE8U2iOypOWm/V40cDu+
fEU4NmYORgze2+bsfCJ+vHY74rmwe4B1zp/G9Un2OT0ca0UnPP5Y7z++It/r7UF1
Qrz+uuL1S1nOP7h8JFVWzmwrrMnrBy7Ocl2uYtwagPDOD7GBKFBjdRAm13Eo8CTz
Dt2we3QOeFzUIlE8QV6aWIO8/kp82iC62cOfHhvqFVfyYddzFWoabQj4nqz6gTek
1k/vZXhEZV+N3bGuhtjzAence55vC6USzR7oFRlBhdiydq1PJqaiyDsbAFOTF36B
bJgXlerDZ8l+S6cyyyN0m0r+HKjtZK/TlwM+jgEx0GR9VgrU9QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCj90gcQVlJZsdtHnm8fj/RpP6IJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmMwNTEwYzEtZGEzNS0z
MTFiLWFmZDktOWM5NGNmZmZlN2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCEQA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB51FpFDLbh0S3xM9J4zPZTE3J1hLTeQUs+TI4+ZlCCpSYkXxSzH
P4d77C0Lkjr2Bmfp/3BIHsJBsEIWoDTTb/xSkT0jpGSJhbWu6uNqQdleLvSH1zsr
DG5LE9kYYKQpYszkxEXqXBy8xnYrxBTceEE17ch/oT5J7Q5Rli9nFP7TJF4PCdye
VzRS6g62mNZrRiefhhlJlALV4T4CQMd+OPZz3r3NsDyixoOa3568Vk4cSLtsdEAg
Km6i0EDH87YlIncygwpfXTVeCZr2sV3c9M7FtncHlhMZeR5EjRJH3IdEt+xtjhXb
uWGr+q5L+8TwSqOE82qiGWAXz9J4s62zrmU=
-----END CERTIFICATE-----
Generated at Tue May 21 02:10:03 2024 by rpki-client on console-ams.rpki-client.org