Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/864d88c8-54be-3ce6-999e-258ea0fe51e9.roa
File:                     864d88c8-54be-3ce6-999e-258ea0fe51e9.roa (raw, json)
Hash identifier:          VXTlKETfG4WLAAyyBsDyXz6uBfJXvcRT5bu5GVjeEVA=
Subject key identifier:   39:1F:2B:5E:BF:5C:BB:02:A8:55:A0:72:B0:0F:18:BF:DC:B4:BA:6F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452EA61F959DA6DC2E74944A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/864d88c8-54be-3ce6-999e-258ea0fe51e9.roa
Signing time:             Tue 12 Mar 2024 10:47:59 +0000
ROA not before:           Tue 12 Mar 2024 10:47:59 +0000
ROA not after:            Mon 10 Jun 2024 10:47:59 +0000
asID:                     9498
IP address blocks:        2600:140f:d000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:a6:1f:95:9d:a6:dc:2e:74:94:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 12 10:47:59 2024 GMT
            Not After : Jun 10 10:47:59 2024 GMT
        Subject: CN=1cf49ae3-d198-4f72-a7b3-a200c90048da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:a1:3f:01:23:74:7b:66:41:d9:ca:78:7f:
                    49:a7:d6:af:ed:4e:82:85:03:ab:bc:6d:93:46:60:
                    35:4b:59:b7:7d:0a:24:5c:da:68:f2:80:f6:59:92:
                    74:6a:c4:16:4a:5f:13:e4:3d:44:91:6f:e8:67:93:
                    40:d2:08:13:4e:32:ac:b1:2d:f9:df:f2:87:df:45:
                    e3:0f:f1:60:54:d7:b4:94:0b:02:a4:18:9c:af:dd:
                    eb:21:67:44:bb:db:54:f2:48:86:d3:6b:b8:3f:d1:
                    78:02:11:6a:8c:b9:a6:5b:bd:7d:93:aa:27:5b:ce:
                    c7:5b:8a:8d:a8:20:af:d2:fd:66:19:b0:b9:2f:05:
                    79:e0:d7:55:6f:dc:06:2d:1c:43:1c:c1:74:cc:bf:
                    58:c8:44:a8:e4:38:c4:86:0f:24:0c:82:33:18:2d:
                    57:e0:ed:82:fa:a2:33:3e:31:f9:00:03:1b:ce:ae:
                    f0:a9:94:d0:8d:8b:01:05:91:d8:e4:3e:bb:11:01:
                    ce:b8:75:85:69:33:93:1d:c2:34:ac:ff:45:03:f1:
                    be:1a:64:53:5b:23:00:64:3e:f2:a4:36:8d:70:21:
                    c0:af:d4:6f:b7:a2:c8:0e:37:41:0a:12:5d:e7:14:
                    5b:84:18:b0:d5:e2:38:90:6b:96:53:6b:29:7c:31:
                    02:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1F:2B:5E:BF:5C:BB:02:A8:55:A0:72:B0:0F:18:BF:DC:B4:BA:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/864d88c8-54be-3ce6-999e-258ea0fe51e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:d000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:27:56:02:ce:7e:6f:98:88:db:e6:05:e8:21:bd:3f:35:23:
         0a:b3:fe:6c:da:63:e7:1e:fe:0e:5c:9b:2d:38:b1:f5:a5:6a:
         65:2e:fc:a8:d2:e5:42:8b:6c:90:54:21:29:c4:6c:39:e5:e1:
         e4:d7:c9:38:c0:cd:f6:2b:33:76:6b:b4:30:36:57:e0:de:14:
         2d:22:17:b9:50:75:1c:83:1e:e0:ad:f8:86:30:ea:de:3e:af:
         75:c4:9a:61:36:bb:26:d5:56:e9:83:8e:9f:17:9f:bf:e1:d3:
         06:b3:14:a9:88:de:87:79:ff:9e:44:ce:ee:2a:b5:7b:b4:0c:
         57:68:0d:ae:4c:a5:f5:56:f8:df:80:9e:38:25:3a:e3:33:b7:
         ba:8b:66:a2:3f:3c:18:80:f3:32:0b:7f:f3:2e:29:fe:ca:41:
         78:64:ce:a9:5f:a9:21:b1:ed:0c:81:8b:39:39:10:2a:c0:4f:
         35:9e:e1:5a:66:7c:60:36:64:b8:9f:2f:96:80:3d:f1:28:bf:
         3f:4c:02:0c:ee:e2:73:94:03:c8:56:cc:f8:bf:48:0e:12:4e:
         77:6d:e2:49:34:f2:33:b3:90:a8:30:de:36:66:8f:61:5c:e8:
         66:2f:48:86:0b:16:39:ab:43:4d:4e:66:a1:da:0e:39:1c:b6:
         08:2a:19:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:07:51 2024 by rpki-client on console-ams.rpki-client.org