Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e1400e4-3a76-3332-9d5a-b3bdc7571e62.roa
File:                     8e1400e4-3a76-3332-9d5a-b3bdc7571e62.roa (raw, json)
Hash identifier:          95jGewg1iwHO8mBG3PHNOtz9DWmvZKurp9t1jCV/eQU=
Subject key identifier:   36:B9:45:F2:69:73:41:5A:AB:02:C2:E2:55:14:D9:40:55:0C:5A:EF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452398EA221002A7B14EB3B7D0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e1400e4-3a76-3332-9d5a-b3bdc7571e62.roa
Signing time:             Fri 08 Mar 2024 11:47:28 +0000
ROA not before:           Fri 08 Mar 2024 11:47:28 +0000
ROA not after:            Thu 06 Jun 2024 10:47:28 +0000
asID:                     20940
IP address blocks:        2600:1404:1600::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:98:ea:22:10:02:a7:b1:4e:b3:b7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 11:47:28 2024 GMT
            Not After : Jun  6 10:47:28 2024 GMT
        Subject: CN=2cc38909-3748-49b7-85db-37506e908964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:28:9f:a3:08:7d:75:4d:37:b2:18:1e:04:68:
                    7e:be:0a:56:63:4c:50:dc:f6:3c:1b:6d:4a:0e:29:
                    1f:45:9d:4a:ef:4c:82:3e:d1:66:4d:9c:20:dd:bf:
                    78:f6:e9:bc:d4:26:4d:98:48:b0:dd:ae:5d:3e:d9:
                    93:d9:14:45:de:d9:08:26:f3:75:58:b0:16:03:ae:
                    13:66:5c:61:e1:64:a0:15:94:0f:64:9c:e4:5b:0c:
                    06:16:55:9f:6c:ad:04:54:a8:46:af:0f:2e:bc:30:
                    6a:ce:eb:ef:8a:06:da:92:c7:6e:84:96:fc:4c:a4:
                    01:77:71:f3:ab:e2:38:a1:c7:d3:e7:6f:3f:7a:7d:
                    f4:ae:22:40:c0:90:3d:13:a5:6d:88:29:82:ca:44:
                    1b:7c:27:e4:32:9c:20:d8:fd:1c:24:05:76:14:3b:
                    9e:75:bc:ed:34:49:c4:33:d2:fb:8f:8d:6e:d5:50:
                    8c:b0:67:48:27:99:7a:88:fb:b5:c1:09:16:94:1a:
                    48:cb:82:f2:9f:cc:45:5e:55:fd:8b:49:01:5d:db:
                    db:7b:a0:49:90:71:d4:16:ee:c8:fb:e2:2a:92:96:
                    19:f6:3f:92:51:c4:29:43:46:de:58:76:43:5e:92:
                    25:6b:04:03:b0:02:2f:65:58:5b:70:5e:5e:59:55:
                    62:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B9:45:F2:69:73:41:5A:AB:02:C2:E2:55:14:D9:40:55:0C:5A:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e1400e4-3a76-3332-9d5a-b3bdc7571e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1404:1600::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:48:e0:a7:de:a5:59:f3:5b:20:d2:3b:f2:4e:39:4a:a3:3b:
         d0:1d:a0:53:de:fa:4b:0e:c9:68:73:25:65:29:5c:d0:d5:50:
         f5:13:09:1f:5a:b6:39:45:31:26:4d:30:96:c0:0a:07:52:e2:
         b5:7a:a9:b7:60:16:cf:d4:e8:50:5f:a0:96:5e:66:a0:d9:52:
         37:48:ec:30:fd:04:3b:45:fd:10:87:3b:8f:e4:23:40:f2:ca:
         2f:0e:dc:ea:15:87:ff:58:81:9b:67:ea:09:6e:0b:d2:04:43:
         18:3a:6f:57:83:3a:be:09:99:47:82:e1:83:b9:cc:3a:46:76:
         14:55:a7:b9:84:1f:03:14:82:1d:a4:25:3e:6e:94:2a:ae:70:
         e1:0c:98:bd:40:0e:ad:c5:31:91:44:46:a5:4a:91:ba:31:19:
         74:43:7a:99:b3:e4:76:cb:45:d2:41:a8:d9:de:cf:3f:c2:9c:
         c1:31:ef:55:53:b6:96:38:38:71:f3:8f:e2:6d:d2:ee:cd:19:
         cc:35:ed:40:ce:f2:89:d4:9d:2b:f5:ce:27:c7:19:62:62:a0:
         84:d7:a1:fa:20:3e:e5:4f:43:32:8b:85:e4:72:e0:da:29:82:
         d3:88:b5:8e:eb:12:af:78:4a:64:4f:46:2f:08:99:0f:01:88:
         be:18:ea:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:56 2024 by rpki-client on console-fra.rpki-client.org