Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7bffbaaf-ddb5-3cf4-8190-1b4373d643aa.roa
File:                     7bffbaaf-ddb5-3cf4-8190-1b4373d643aa.roa (raw, json)
Hash identifier:          EE34mC9ou1AwuIuCyvx4M0d39bAviwHLUA9RgZYFhX8=
Subject key identifier:   8F:21:E2:71:D4:8B:56:14:D2:CD:6B:58:0B:E0:C0:5F:E8:4E:0D:4D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C1DF6CBF01F4A23606B20740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7bffbaaf-ddb5-3cf4-8190-1b4373d643aa.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     20940
IP address blocks:        2600:1400:8000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:6c:bf:01:f4:a2:36:06:b2:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=d954a35d-dd3c-4d96-be0a-db67f80dc557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:57:1a:d2:44:43:f9:8a:3b:9e:75:ea:55:11:
                    8d:ed:4d:24:e9:90:eb:bb:7a:5b:7c:7d:6d:a6:ed:
                    5c:1b:5d:3b:67:39:de:f7:cd:5f:36:18:84:84:37:
                    05:43:ac:01:64:0a:50:ce:ba:47:12:83:14:08:15:
                    be:79:04:1c:18:41:0a:db:c0:49:f3:43:2c:6f:08:
                    6b:23:ce:8b:a0:2d:ce:6e:bd:9c:55:20:a4:ba:f5:
                    d3:4c:b0:f7:c1:32:09:de:a3:27:32:55:94:23:4f:
                    47:9c:20:5e:6c:a2:c7:7c:bc:24:22:f7:df:62:69:
                    10:bb:7a:b0:63:58:7a:3d:e9:b5:22:8e:1d:13:14:
                    a8:d0:bc:26:05:05:22:30:72:52:f4:d0:53:47:b8:
                    c2:43:e3:c9:7e:40:39:06:1f:a0:44:4c:86:1b:6a:
                    3f:84:8e:80:cd:6b:c2:c2:a4:21:f0:92:38:15:a2:
                    43:05:35:84:41:c4:9e:c2:5a:6e:a0:c2:58:1f:3f:
                    92:97:64:fb:b9:a3:04:7b:dc:d6:df:db:b5:a8:2d:
                    40:9b:ea:90:c2:f3:cd:6a:a7:fb:1a:8e:e7:31:67:
                    58:46:47:e4:d5:6a:de:80:2f:60:d6:0f:07:3a:24:
                    75:f4:df:0b:24:8d:e6:bb:ba:5c:79:cc:56:d3:c1:
                    bf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:21:E2:71:D4:8B:56:14:D2:CD:6B:58:0B:E0:C0:5F:E8:4E:0D:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7bffbaaf-ddb5-3cf4-8190-1b4373d643aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1400:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:da:33:a8:b9:b3:5e:6b:51:72:9a:59:11:f5:9e:79:12:c6:
         57:b7:61:7c:85:ee:95:86:fb:80:ab:7f:bd:a0:25:d0:15:fc:
         89:9f:82:ed:fd:f6:77:a1:29:43:35:e7:ef:85:8b:d8:83:21:
         42:7a:47:79:9c:a7:65:c7:ea:4c:f9:c8:a3:ac:15:29:e5:70:
         e9:2e:b1:e4:86:0a:6e:51:5a:2d:22:1d:e1:df:9a:fd:f6:95:
         8f:b5:3c:0a:00:60:6c:42:81:64:b1:9e:21:cf:73:ab:3e:71:
         00:b0:e6:80:20:4b:4e:0c:68:5c:b1:a5:38:52:88:31:d9:62:
         43:5a:75:9a:52:27:bb:e8:03:3e:28:f4:c1:61:f8:0d:b9:f4:
         56:86:cd:48:f8:09:c6:83:85:2b:a7:c9:a2:2d:89:21:a4:2c:
         44:b0:2d:83:c5:ec:ce:01:49:35:a4:6d:3f:88:8d:e9:b9:67:
         dd:a7:76:1b:c0:8a:9f:1d:ba:e8:0d:c8:05:3a:0d:91:32:78:
         c7:e0:32:4f:0e:0e:ed:ba:a8:e9:f0:23:79:dd:06:52:af:1c:
         15:33:04:c1:57:38:0a:40:11:12:1e:40:35:98:34:6d:8c:f1:
         a3:73:37:31:53:47:d2:e6:63:71:56:79:66:fe:df:0b:0f:71:
         a4:99:a0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:05 2024 by rpki-client on console-fra.rpki-client.org