Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a868a44-be29-37e3-a095-93596375a3c6.roa
File:                     8a868a44-be29-37e3-a095-93596375a3c6.roa (raw, json)
Hash identifier:          7+n2kThpB8kPfB1xQal5EPh6yss3ZEljSTENOS25IIg=
Subject key identifier:   23:99:E7:05:79:83:0B:A7:9E:5F:86:D0:5C:DD:A1:29:1C:A3:45:1F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845883DE3C71F01425EB62BB300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a868a44-be29-37e3-a095-93596375a3c6.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     24319
IP address blocks:        2600:140b:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:e3:c7:1f:01:42:5e:b6:2b:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=eb46bdac-4e9e-497e-95f5-cb634e3cc8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d3:b5:8c:83:3c:5b:06:ad:2b:e1:b6:7e:31:
                    0d:05:f7:98:73:95:e8:81:5a:fd:b9:a8:4d:32:71:
                    12:93:7b:fd:ac:2a:d0:fa:80:78:8f:4c:0e:87:01:
                    88:64:96:91:4b:ac:bf:37:3d:0b:92:4c:e4:67:dc:
                    f8:2c:3e:28:46:84:e3:a7:f9:22:ec:c7:09:7a:a6:
                    78:19:53:0c:17:70:f9:a5:ef:a9:0f:db:c0:02:91:
                    90:a4:a2:81:6a:a3:8a:64:d4:d1:0f:c0:f5:cb:9c:
                    bc:44:f3:1d:f7:5f:fa:28:d3:5f:f4:3e:6c:86:0f:
                    19:9f:02:2b:af:42:cd:97:6e:fa:cb:9b:89:04:be:
                    e5:20:9e:cc:fc:6d:23:86:65:ec:dd:92:3d:3f:8d:
                    7f:e3:28:fd:14:9c:7d:2a:56:bb:e4:37:d4:cf:87:
                    72:04:7c:3f:d3:28:f1:c6:e4:51:10:8d:54:17:f1:
                    a0:d2:e1:96:e7:1a:75:3a:5c:68:0c:ee:03:25:21:
                    04:6b:a5:ef:e5:df:b5:68:e0:09:05:f6:a1:9b:84:
                    20:b5:ac:d9:65:d0:f6:47:a5:dc:31:0a:82:a1:e2:
                    02:28:12:05:55:5e:38:d3:27:3f:3f:16:4d:f5:6b:
                    2b:90:8e:ba:1b:c1:df:3b:1f:75:de:11:0c:a2:f5:
                    66:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:99:E7:05:79:83:0B:A7:9E:5F:86:D0:5C:DD:A1:29:1C:A3:45:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a868a44-be29-37e3-a095-93596375a3c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:50:7c:0d:51:b6:7c:10:4a:84:79:f6:8f:cf:9f:96:a1:ca:
         a5:b7:69:aa:6d:ca:61:ab:22:d9:3e:c9:9e:93:de:40:4f:af:
         9e:14:9b:81:32:2f:63:3a:11:57:f9:17:b3:31:71:78:ca:c5:
         56:08:c5:6e:63:7b:7e:27:81:64:b1:b1:97:94:b1:1a:21:6f:
         dd:c2:24:f6:6c:ef:76:c7:10:51:b4:fd:fe:5b:44:20:48:bc:
         27:78:cd:eb:c7:5c:46:a7:79:ea:6d:e7:8e:eb:73:9c:aa:7f:
         f9:eb:cd:51:f9:72:4d:66:18:43:2a:7c:3d:4e:3f:0e:5e:aa:
         07:20:e5:e8:92:7b:9c:36:0b:09:e2:e4:d7:a5:b9:a8:13:68:
         42:77:e9:ed:cd:2c:3a:b3:6d:49:74:7e:a4:90:10:0f:1c:cf:
         18:33:67:df:06:10:bd:2c:59:c2:6e:1c:19:16:49:1c:8a:37:
         82:9b:4b:79:c9:c1:f6:2a:a3:48:f2:8e:8b:54:4f:b8:5e:02:
         6d:ea:47:98:c5:88:d9:54:eb:6a:30:01:45:4d:3c:83:21:1b:
         ac:2c:f1:1a:72:60:61:f5:08:7d:95:cf:fc:5d:ea:a8:3a:af:
         d9:0f:42:ef:eb:43:9a:b9:18:ae:b5:dc:f1:17:bb:30:4c:4f:
         25:ce:6c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:15:33 2024 by rpki-client on console-ams.rpki-client.org