Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80908f16-27e7-3d44-a93e-3f446fbe8993.roa
File:                     80908f16-27e7-3d44-a93e-3f446fbe8993.roa (raw, json)
Hash identifier:          p5n3+US4Y/BGQz4IX70PL/GEXZTOsuFUio0HieDAwbo=
Subject key identifier:   8E:F7:DB:82:52:7B:EA:9E:F8:A6:B0:79:2F:63:5B:B9:6E:67:6B:96
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584523C8F36F91F1DAE79FE217C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80908f16-27e7-3d44-a93e-3f446fbe8993.roa
Signing time:             Fri 08 Mar 2024 13:24:15 +0000
ROA not before:           Fri 08 Mar 2024 13:24:15 +0000
ROA not after:            Thu 06 Jun 2024 12:24:15 +0000
asID:                     20940
IP address blocks:        2600:1419:600::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:c8:f3:6f:91:f1:da:e7:9f:e2:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 13:24:15 2024 GMT
            Not After : Jun  6 12:24:15 2024 GMT
        Subject: CN=c5df58aa-5107-48d6-ae49-3b32feafa2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2e:a8:b0:76:3d:7e:55:7d:99:af:9d:92:42:
                    63:a9:44:63:39:6a:79:5a:0b:a2:18:36:bc:2f:9a:
                    77:b7:aa:15:3c:17:6d:e1:2f:cd:2d:ba:a8:f5:38:
                    4f:aa:fa:b4:5d:36:99:b8:ba:f9:19:d2:a2:ac:c2:
                    00:3e:ea:be:e4:a0:9b:97:a6:0f:68:93:73:63:3a:
                    a6:21:59:ec:1f:43:f5:77:ad:dc:03:80:2a:7c:a9:
                    07:d1:fe:31:42:ad:c4:8b:9d:20:ab:68:24:83:04:
                    b0:8b:d7:a5:3f:af:5c:dc:e3:e1:8e:4b:b5:b6:dc:
                    de:2b:13:82:a3:7b:3a:e6:c7:7a:eb:a9:ec:4b:50:
                    4c:32:9e:e0:4f:c6:ec:f5:44:7c:93:88:a5:1f:b8:
                    9c:aa:da:14:27:67:f5:5b:9a:f2:8b:07:42:04:1b:
                    bc:25:aa:89:71:f4:3d:47:9a:69:3c:8b:a0:59:67:
                    0c:f9:4c:ae:64:53:ea:01:ee:01:dc:26:99:1b:3c:
                    b0:04:80:15:cb:af:1a:79:ca:c8:52:de:67:62:81:
                    a1:8c:93:98:9d:e6:ba:07:45:49:0f:ba:1a:fb:4f:
                    7c:fc:f0:57:92:0d:70:15:7d:a3:fc:b8:96:c9:41:
                    83:16:11:bc:db:59:48:29:75:6e:37:74:57:49:d3:
                    7e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F7:DB:82:52:7B:EA:9E:F8:A6:B0:79:2F:63:5B:B9:6E:67:6B:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80908f16-27e7-3d44-a93e-3f446fbe8993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1419:600::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:f6:61:6d:d8:2e:db:81:d7:56:24:c9:f3:65:ea:fa:8e:2f:
         7f:59:fa:1b:48:e4:05:64:bd:79:d8:2c:a1:f6:1f:21:6c:ca:
         5f:94:9a:2b:4a:d1:0d:29:5c:71:cc:e8:ee:8e:09:04:b7:f6:
         1f:cb:55:7c:ea:a9:cf:20:30:ca:bc:88:59:88:54:96:32:a7:
         71:49:7e:b5:61:a9:75:0a:7e:51:53:e8:dc:8b:85:79:0e:0f:
         99:78:5f:13:0d:f8:8a:5d:44:f8:a3:c2:03:c1:44:3c:94:1b:
         12:76:e1:0d:4e:6f:17:b2:c9:4e:47:bd:e4:08:da:7a:46:af:
         7d:4b:68:82:0b:f0:e3:14:c8:7b:d4:8b:56:50:4c:a3:19:08:
         d3:30:1f:10:6d:45:da:94:86:a1:4f:ee:d7:b3:c4:aa:ec:1f:
         ba:a7:dc:f1:09:54:a6:84:8f:b9:6b:1e:ed:64:eb:49:22:5c:
         3f:34:78:80:6f:38:66:3a:24:e5:5c:77:6d:00:4d:c3:95:02:
         ac:87:74:de:32:fd:97:68:67:54:4c:55:4e:45:9d:78:b1:fb:
         77:8a:81:4b:fc:45:01:49:3a:21:1f:06:13:82:e6:14:69:d6:
         1c:07:61:59:d2:7e:1f:a2:77:88:6b:cf:3c:c6:75:c6:1a:20:
         90:1a:3d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:36:29 2024 by rpki-client on console-ams.rpki-client.org