Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ed06705-b504-3d59-9708-9db38a63b98d.roa
File:                     6ed06705-b504-3d59-9708-9db38a63b98d.roa (raw, json)
Hash identifier:          FhaNPC5JZNjfNbYofZaDVcXXR1avhe/O3hZYBlAVee4=
Subject key identifier:   C9:A9:85:42:CB:78:DE:02:C0:ED:DE:4C:F1:C3:CE:89:EA:8E:DF:C6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847CA3F91F949DA33C2378093C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ed06705-b504-3d59-9708-9db38a63b98d.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        2600:1488:60c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:91:f9:49:da:33:c2:37:80:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=64d2ecd8-60e4-4c6a-8037-75917d247f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bc:d1:ac:d8:1d:8a:bd:33:86:e5:5c:77:bb:
                    58:40:84:a0:a2:0d:d0:df:2c:49:b1:2f:7d:5b:a0:
                    fc:74:62:0c:5e:19:0a:e2:e0:89:de:9c:c5:18:ee:
                    ee:c3:b6:75:8e:18:6e:b4:4e:49:b0:92:a3:87:bd:
                    c3:ef:66:73:ac:ac:99:10:b3:95:0b:5c:c6:ad:cd:
                    2b:f1:ec:7f:0e:7a:6e:96:ca:49:23:86:e6:21:c6:
                    22:52:41:9a:97:dd:8a:ba:8a:f3:43:62:0d:0f:e4:
                    2e:07:29:6a:9b:a3:8e:e7:46:95:5e:ae:c5:9c:12:
                    df:67:a5:84:8d:34:e8:18:50:5a:88:cd:22:4c:86:
                    89:dd:e5:bb:44:78:08:5e:d2:53:71:47:96:20:29:
                    8e:da:48:da:4d:90:e1:8b:46:85:49:c5:af:93:f6:
                    30:74:94:d8:df:d0:e9:45:21:82:0e:39:c9:9a:63:
                    41:96:6d:3b:98:f4:58:62:3c:d9:77:65:c1:bd:79:
                    8c:cd:88:91:49:1c:35:f2:a9:04:28:b8:64:01:3f:
                    ac:ca:97:09:bd:d3:a3:47:e2:9c:93:ca:56:8d:39:
                    5c:cc:a3:24:ee:ae:7f:d4:53:18:f1:b1:ad:ae:1e:
                    c0:5c:74:22:4f:09:36:db:9b:52:fd:6f:7d:13:fb:
                    84:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A9:85:42:CB:78:DE:02:C0:ED:DE:4C:F1:C3:CE:89:EA:8E:DF:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ed06705-b504-3d59-9708-9db38a63b98d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:60c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:0a:e0:09:1c:48:ad:2b:91:50:97:34:f2:46:63:e7:10:56:
         dc:db:2d:5e:90:ed:c7:a5:49:3e:57:f2:b1:46:2d:0a:09:9f:
         26:5d:70:57:42:ba:22:42:af:9c:39:50:92:bc:7f:49:66:e4:
         f5:b7:da:c4:6f:41:91:04:1f:e6:1b:b7:ff:1c:8d:2d:1d:bd:
         dc:7b:01:5f:5f:0f:b3:86:5a:09:90:b6:9e:2d:ea:75:eb:42:
         f3:1c:6e:f6:29:6c:43:b5:17:ec:26:bd:ad:b2:04:13:73:db:
         28:15:8b:1a:f1:77:d0:d8:40:04:e3:a9:52:93:54:e8:20:5f:
         80:46:71:c2:a8:7a:a0:0b:5f:8b:b4:d6:22:a1:99:ff:53:56:
         50:32:9b:97:38:e6:5a:7f:93:bb:2f:f1:3a:ef:58:b4:b5:a2:
         84:cd:3b:fa:1f:13:71:5e:1c:0f:f3:db:19:e9:d7:0c:0b:2f:
         69:cd:fb:43:c5:37:3d:5d:06:31:2f:91:cc:3a:98:ae:a2:e2:
         68:64:65:f1:47:65:b5:d9:c9:54:06:ce:9b:b7:c4:d4:28:96:
         4d:f1:81:eb:da:11:f7:40:b8:2c:1b:0a:3d:2f:bf:cd:d0:44:
         cd:1a:5c:18:b3:23:2c:05:46:66:87:ef:b1:9f:96:02:1e:bc:
         d5:b5:0a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:41 2024 by rpki-client on console-ams.rpki-client.org