Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/791b939d-72a7-387b-8a4b-284de9c21075.roa
File:                     791b939d-72a7-387b-8a4b-284de9c21075.roa (raw, json)
Hash identifier:          thSSPIsSpPp1nj9wDxpshIWcFYy3lQpgZEb04wMCzUo=
Subject key identifier:   7B:E9:BD:78:98:BC:F7:97:A0:CC:56:5D:E9:25:7B:0D:17:CE:82:56
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845239BCCFCBACBEE65D76EB7A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/791b939d-72a7-387b-8a4b-284de9c21075.roa
Signing time:             Fri 08 Mar 2024 11:53:17 +0000
ROA not before:           Fri 08 Mar 2024 11:53:17 +0000
ROA not after:            Thu 06 Jun 2024 10:53:17 +0000
asID:                     20940
IP address blocks:        2600:1405:3800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:9b:cc:fc:ba:cb:ee:65:d7:6e:b7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 11:53:17 2024 GMT
            Not After : Jun  6 10:53:17 2024 GMT
        Subject: CN=59413942-ee4a-4181-9c4b-0063d19ee321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7e:00:5f:66:a3:41:d0:76:58:b0:fb:a1:0f:
                    e2:88:e4:39:97:31:e1:66:2d:a3:4e:6d:80:5c:66:
                    28:af:8c:36:9a:61:dc:ab:a8:e1:5f:cb:f9:ed:26:
                    57:39:09:76:8a:96:ce:c5:95:a3:4d:4e:c8:2e:93:
                    29:75:21:03:3c:88:d7:d3:43:7d:35:4a:70:f7:69:
                    c6:9b:ca:1d:5a:ac:8a:45:1a:0e:35:a0:23:79:9e:
                    59:25:fe:c1:90:64:a1:1b:26:2b:5a:34:9f:cb:27:
                    cf:88:46:3c:66:83:b6:33:41:25:7d:be:d6:c7:73:
                    6c:38:06:38:e2:fb:ea:ad:a0:ea:9c:42:46:c0:83:
                    c0:66:18:88:53:8c:8e:b5:2c:77:1e:6c:e3:4a:71:
                    5f:5d:ef:7b:2e:32:1b:9e:37:32:34:4b:38:f8:38:
                    d6:fb:fc:fa:2f:a0:a7:d2:50:cb:93:46:56:f9:60:
                    1e:65:ef:96:7b:d5:2a:32:8f:2c:18:03:14:d8:04:
                    cf:40:9a:04:11:7c:20:b4:dc:fd:df:82:56:c3:1f:
                    8a:9b:29:0e:2f:46:df:45:0d:17:25:42:24:7f:ae:
                    e1:07:76:39:2a:2c:b0:1a:27:da:f9:78:57:ef:aa:
                    54:1c:5e:c5:83:79:3f:2c:25:25:6f:ab:81:61:48:
                    52:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E9:BD:78:98:BC:F7:97:A0:CC:56:5D:E9:25:7B:0D:17:CE:82:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/791b939d-72a7-387b-8a4b-284de9c21075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1405:3800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:8a:d0:7e:b7:f1:2a:d4:3a:4d:ee:bb:93:c9:c7:cb:e3:a2:
         b6:00:f1:03:00:73:82:75:37:e5:9e:8f:9a:da:a3:18:50:75:
         29:eb:21:d2:b8:50:5b:f4:82:6a:bb:3e:72:26:eb:22:b9:be:
         39:07:22:08:2d:d5:78:9f:d9:40:2c:8c:02:d7:c6:9b:dd:e2:
         ae:69:f3:ae:87:81:eb:44:97:e0:c2:18:db:25:f4:f9:bb:9d:
         f1:d7:77:e7:48:b0:8a:f1:c5:3a:d3:df:bf:7f:39:28:1d:a9:
         39:4f:17:fc:30:6a:c3:30:3a:ac:c2:c7:b5:df:79:10:b1:1a:
         6b:dc:3a:00:22:58:c9:95:cf:f2:9f:36:40:25:6e:9f:f5:f5:
         cd:65:77:df:2e:07:89:28:ce:0e:0f:b0:05:11:3d:ff:16:2d:
         c3:cf:45:c4:c3:7b:1b:c3:8f:a8:07:f4:08:28:5a:93:5c:f3:
         fb:28:71:3e:53:92:fd:e5:82:36:89:dd:a8:64:88:d1:5b:0d:
         98:be:a3:f8:50:3f:14:f9:62:5c:52:38:d3:b2:0b:62:15:eb:
         1c:91:b1:5b:23:21:bd:64:47:8a:f2:f7:53:c8:3f:c2:c2:b3:
         0c:fd:dd:ac:f7:09:7d:a8:31:5e:bf:55:9d:75:f5:d7:d7:af:
         0f:a6:70:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:55 2024 by rpki-client on console-fra.rpki-client.org