Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a6b9bd2-f6b6-3519-aa90-16816b9c7028.roa
File:                     8a6b9bd2-f6b6-3519-aa90-16816b9c7028.roa (raw, json)
Hash identifier:          w9pvuzi2Z3kPH0av74CsCs6RUTf/4BGIfaosZGqcq3A=
Subject key identifier:   FF:AE:60:F9:8C:86:CB:CA:7C:C3:DA:98:67:24:E4:98:D6:D4:42:47
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847CA3F8BC093FD7ABBC92CE290
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a6b9bd2-f6b6-3519-aa90-16816b9c7028.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        2600:1488:6140::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:8b:c0:93:fd:7a:bb:c9:2c:e2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=004d130b-b86e-4005-a714-0eea4c6ab168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f4:12:14:c0:75:b5:ef:6b:c3:02:29:25:31:
                    e6:4d:f4:34:c9:22:8c:ab:99:13:8e:f8:f3:eb:cf:
                    3b:29:e8:91:cc:2a:de:17:ae:39:56:d5:ed:24:89:
                    d4:43:74:a8:06:4a:19:74:69:fc:ae:64:9f:96:c9:
                    9c:0b:09:5d:6f:f0:6b:a3:9d:21:55:01:b5:a0:4c:
                    a1:81:15:85:4c:6a:37:ea:5f:b6:7f:0f:1b:bc:89:
                    d2:ca:86:d9:5a:75:0e:78:6e:26:d0:d2:d5:c8:9c:
                    78:a5:72:17:47:09:d1:56:38:48:4d:7e:15:74:15:
                    b9:64:99:c7:f6:c0:a1:44:ba:78:59:fa:bd:8f:dd:
                    af:7b:71:e2:ed:be:eb:bb:7a:62:ea:d9:d4:3e:81:
                    03:34:8e:6f:c8:8f:8c:ce:7a:bc:85:75:05:5e:99:
                    16:f5:86:b8:4a:43:33:9c:d6:8b:d4:89:db:cc:3c:
                    e8:7e:6c:8b:bd:c5:4f:bd:34:02:c7:40:d1:da:c3:
                    bf:ec:6b:87:93:5e:01:34:d3:78:f6:99:25:36:c5:
                    ce:5d:1d:96:07:c8:9a:c0:6c:22:11:b2:29:ec:25:
                    b6:a1:5e:6f:08:c4:1f:40:e4:05:8f:40:41:c9:5e:
                    39:f6:49:d3:32:8d:96:b5:eb:0f:98:30:d2:7f:29:
                    aa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AE:60:F9:8C:86:CB:CA:7C:C3:DA:98:67:24:E4:98:D6:D4:42:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a6b9bd2-f6b6-3519-aa90-16816b9c7028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:6140::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:0f:9e:35:8b:7d:5c:a3:a8:4e:d6:2d:b1:26:2a:da:f1:ef:
         07:ca:be:92:02:fb:e2:44:6d:9e:8e:b9:f0:7f:02:eb:8e:a9:
         52:ec:d1:64:a3:6d:bc:63:82:bd:f9:32:bd:2f:e4:23:1a:99:
         54:f1:21:4f:7d:2a:61:e0:75:1d:54:e5:69:a0:12:25:20:2d:
         1d:1b:21:98:f5:e9:ab:b5:9f:e5:4e:f1:df:fb:a8:da:63:af:
         32:89:cc:ed:e9:5a:dc:bc:f3:4a:02:52:8a:f2:36:60:9e:34:
         f5:0a:d1:d2:e6:d5:6d:46:ac:1b:80:a1:dc:c6:36:60:b4:8c:
         82:28:ff:19:e9:21:da:60:40:f5:2d:52:85:7e:26:ad:e1:bb:
         11:1e:e9:c2:4b:89:07:df:c4:e0:47:ad:c5:28:04:15:97:35:
         0c:05:89:03:5e:43:1d:44:13:21:f2:88:bf:28:8a:24:76:dd:
         8f:7b:11:ec:f0:7e:f8:7b:9e:46:86:05:2b:4d:0a:c1:1d:bd:
         fc:c8:05:3f:59:79:51:02:3e:e5:6c:78:ab:e3:0a:5a:21:51:
         44:19:df:4b:58:04:31:40:93:c5:6f:00:11:96:23:d4:7e:2a:
         20:26:07:d0:eb:98:2d:29:b9:ca:63:35:7a:eb:02:dd:44:d9:
         71:bf:d1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:11 2024 by rpki-client on console-fra.rpki-client.org