Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77ef8925-e2a0-329c-94cb-319987dc7e51.roa
File:                     77ef8925-e2a0-329c-94cb-319987dc7e51.roa (raw, json)
Hash identifier:          ECbjGhzY+5psSUxZswGQ41ZQ0g2FxuRHYjdU447AoHA=
Subject key identifier:   F4:A0:D9:F1:C0:46:52:A9:AF:52:B4:25:2A:8F:C9:B6:37:82:06:F4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858450FF67220A1C8E23BD37D9080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77ef8925-e2a0-329c-94cb-319987dc7e51.roa
Signing time:             Fri 01 Mar 2024 10:59:45 +0000
ROA not before:           Fri 01 Mar 2024 10:59:45 +0000
ROA not after:            Thu 30 May 2024 09:59:45 +0000
asID:                     20940
IP address blocks:        2600:1409:d000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0f:f6:72:20:a1:c8:e2:3b:d3:7d:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  1 10:59:45 2024 GMT
            Not After : May 30 09:59:45 2024 GMT
        Subject: CN=4aca7765-034f-44da-8518-ec4ec6451d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:20:87:3a:3c:0d:99:40:aa:e6:90:14:42:e4:
                    1e:ca:d2:63:cb:45:e7:1c:dd:6e:b1:87:0f:52:0b:
                    b6:05:8a:29:cd:40:dc:f9:e7:57:7f:cc:e3:75:8d:
                    33:d7:6a:63:cd:3c:b5:6c:af:d8:f6:a8:7f:d0:7c:
                    9f:c2:82:9c:b6:96:25:a5:3b:5e:25:e2:b5:b5:fb:
                    8e:8c:a4:71:94:47:43:c9:6d:a8:96:59:85:b5:4b:
                    d4:79:9e:25:18:12:9d:94:0a:6e:ac:36:35:77:e8:
                    86:7a:a0:84:ea:3a:d8:93:82:13:a9:37:0f:a5:00:
                    cb:1a:8a:94:bc:8e:67:2e:e8:a7:87:e4:06:c5:57:
                    9e:a0:a7:6d:06:35:a1:cf:b3:43:32:64:6a:af:58:
                    97:ea:d4:6e:54:d3:57:e7:4d:c9:aa:c8:4f:85:5f:
                    17:fe:61:32:fc:83:51:a5:d1:0b:2d:67:6f:53:c2:
                    18:ff:e6:a9:cb:64:03:4e:40:94:30:ec:59:c6:f5:
                    83:c6:d2:99:d7:a4:af:8c:bd:e9:35:a0:85:64:b5:
                    b4:2d:46:e7:94:02:0c:8d:67:5c:e4:49:75:1f:c7:
                    d3:d6:25:52:be:ae:2f:5d:f4:14:49:fd:85:a2:37:
                    74:2c:87:27:c1:c1:50:35:e0:7d:79:1e:dc:94:97:
                    fe:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A0:D9:F1:C0:46:52:A9:AF:52:B4:25:2A:8F:C9:B6:37:82:06:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77ef8925-e2a0-329c-94cb-319987dc7e51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1409:d000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:2d:8f:cc:ef:03:25:b2:e6:7a:9e:6e:fa:2b:b7:cc:af:aa:
         35:27:15:53:85:c2:6a:94:a6:17:33:de:27:e6:52:96:b6:90:
         bf:5a:40:b0:ce:58:3e:d1:d9:f3:15:7a:51:54:01:75:fa:87:
         ba:5a:98:0e:b9:47:a7:4c:06:b0:e5:24:fc:da:fc:77:26:02:
         41:2e:b4:40:59:a6:4d:57:26:ac:90:9c:cb:57:1a:25:7a:55:
         3e:52:09:50:24:a5:f7:e4:4e:2b:6d:cb:75:ec:c2:12:6e:1f:
         c0:a0:d5:be:7f:d6:00:f4:9f:fc:ad:d1:07:22:85:c9:48:fa:
         78:50:10:96:de:ac:0b:30:21:04:07:5e:7b:39:78:d6:e0:f6:
         12:70:5b:3f:f4:50:04:5c:bd:c8:bb:b2:4e:00:76:39:ee:ea:
         eb:1b:23:c8:90:89:56:10:24:cc:09:b0:30:a1:1c:5c:09:69:
         6a:ef:ff:6c:86:52:18:d3:9c:33:cb:30:82:46:94:cc:24:85:
         8f:f0:2b:49:43:fd:a5:94:73:65:06:71:05:71:31:41:a7:74:
         e3:ed:03:64:8b:78:0d:66:99:c8:6b:d3:7f:de:0a:83:f8:81:
         73:4d:b7:65:55:34:56:ae:81:a8:8b:2c:6c:ba:72:95:22:9f:
         66:97:13:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:55 2024 by rpki-client on console-fra.rpki-client.org