Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8377c20d-5aa3-333b-b58e-c5b5d69ffbbe.roa
File:                     8377c20d-5aa3-333b-b58e-c5b5d69ffbbe.roa (raw, json)
Hash identifier:          wR9fr9nr+MQqg9Mnw2c9qakrQL2CLjKNdsIEtw7dX6Q=
Subject key identifier:   DB:09:47:89:13:E5:89:6E:81:27:6A:A8:74:36:5E:42:DF:16:6A:54
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452C2DA9D08A576D2D5F6AE600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8377c20d-5aa3-333b-b58e-c5b5d69ffbbe.roa
Signing time:             Mon 11 Mar 2024 13:33:39 +0000
ROA not before:           Mon 11 Mar 2024 13:33:39 +0000
ROA not after:            Sun 09 Jun 2024 13:33:39 +0000
asID:                     35994
IP address blocks:        2600:140a:2000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:2d:a9:d0:8a:57:6d:2d:5f:6a:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 11 13:33:39 2024 GMT
            Not After : Jun  9 13:33:39 2024 GMT
        Subject: CN=61789e35-bbee-4174-97c5-4271d72b83e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:42:d6:37:4b:d3:d7:c8:b8:93:29:3c:75:8d:
                    e9:3f:24:d5:fa:10:ca:9a:c0:7f:a3:5e:f7:3b:38:
                    4d:e0:23:ae:57:07:f6:51:94:87:71:25:a4:51:5e:
                    dd:44:4b:08:51:df:0d:e8:2a:bc:31:22:3a:72:2c:
                    9d:9f:eb:a7:81:61:57:e7:af:9f:83:54:d0:66:00:
                    a8:c7:78:de:a9:96:0d:8c:c1:47:56:aa:01:e7:67:
                    ae:ca:39:4c:cd:b1:b3:f1:fd:23:a0:68:db:64:f8:
                    be:a8:f6:e4:09:59:54:14:93:50:e2:c6:7f:e5:66:
                    c3:b2:d1:33:97:c0:89:23:1a:6f:5f:07:c9:37:6a:
                    cf:5c:e3:6e:24:31:b6:08:9d:17:2b:55:b3:fe:18:
                    58:5b:2c:e3:3b:0f:99:a0:6b:bc:34:f3:d4:ea:05:
                    af:76:a1:36:e1:11:1a:bb:b2:c9:ab:fa:42:b2:e2:
                    5e:6c:09:ad:15:ec:44:ac:fe:c1:c9:0f:74:c0:a2:
                    1d:98:7e:f9:e4:39:e5:4f:65:07:ef:82:5c:ad:20:
                    55:f5:55:f9:64:27:39:7a:35:7f:a4:21:0e:03:6c:
                    94:7f:0b:23:32:1d:78:1d:9c:f3:2a:8b:bf:86:ca:
                    0d:b7:fc:fe:e5:40:3e:c4:01:5f:e4:ba:c6:7d:40:
                    4c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:09:47:89:13:E5:89:6E:81:27:6A:A8:74:36:5E:42:DF:16:6A:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8377c20d-5aa3-333b-b58e-c5b5d69ffbbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140a:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:40:03:dc:b1:c4:f6:8e:d5:b2:6a:39:95:cc:8f:c9:96:ac:
         cc:e1:2a:57:f4:c3:06:58:88:0b:35:2f:0e:12:52:ee:cc:93:
         63:86:80:ab:e9:7c:28:47:f6:35:4a:fc:40:4f:6e:73:28:90:
         cd:f0:20:32:05:fc:9d:ad:75:87:ab:0f:f3:67:6c:3f:e1:a2:
         17:4a:49:d4:ff:a6:ad:43:0b:21:ce:29:8f:98:4d:b0:ae:aa:
         6f:b5:22:5b:7c:cd:ec:c2:df:d6:6f:ef:e2:2a:d0:a6:a6:c7:
         c1:6b:d4:ec:a1:df:44:74:d4:9f:b0:6d:4f:be:00:4b:5d:c3:
         85:45:f6:7f:8c:e2:e1:da:5e:a4:ca:2b:98:e5:d5:a4:61:1e:
         71:d3:8a:87:52:25:ec:eb:2b:1f:b3:09:d5:f3:90:08:ee:8c:
         7d:2e:5c:05:47:c4:2d:14:4c:13:9b:12:28:60:46:3b:41:30:
         af:1f:5a:0e:24:6a:40:c5:18:c7:bc:dc:7d:97:df:09:88:d9:
         85:4b:20:ac:7e:ed:44:5d:35:77:ab:ad:c3:07:ca:75:6f:fa:
         71:39:ae:82:0f:bf:78:d9:8a:a4:34:c3:ee:59:98:40:23:78:
         96:38:ce:5a:70:53:19:9b:2d:9f:d5:42:03:d4:64:1d:88:4b:
         7a:25:e6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 14:51:02 2024 by rpki-client on console-fra.rpki-client.org