Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e405cdf-e81e-3b91-9cae-7f7b2d82b3b3.roa
File:                     8e405cdf-e81e-3b91-9cae-7f7b2d82b3b3.roa (raw, json)
Hash identifier:          MpjjlnvSw4wBs1XV5u2YV6f9rsenfHC3ITYomqSs2tM=
Subject key identifier:   C9:29:6F:49:9D:4E:90:68:3E:95:8B:66:2B:BF:5D:8B:F3:18:46:DB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452BF572A12E78551DD5BF6880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e405cdf-e81e-3b91-9cae-7f7b2d82b3b3.roa
Signing time:             Mon 11 Mar 2024 11:40:23 +0000
ROA not before:           Mon 11 Mar 2024 11:40:23 +0000
ROA not after:            Sun 09 Jun 2024 11:40:23 +0000
asID:                     35994
IP address blocks:        2600:1404:a800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2b:f5:72:a1:2e:78:55:1d:d5:bf:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 11 11:40:23 2024 GMT
            Not After : Jun  9 11:40:23 2024 GMT
        Subject: CN=ce9eea5d-2892-48f3-96c0-d9b3ba643025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8e:04:e4:f7:de:a6:7c:ce:c5:6b:9e:97:6e:
                    a2:a9:7c:46:dc:8b:73:8a:5d:6e:56:26:e1:84:98:
                    7c:4b:aa:94:99:3f:b2:2b:a0:57:b6:1a:22:fd:4f:
                    5e:e9:eb:02:b6:34:76:d9:dc:ee:eb:b0:29:a3:b3:
                    0c:4e:ab:92:f5:9b:71:ae:cf:4f:c0:ff:2a:bb:b6:
                    0e:ea:53:db:32:a6:80:a8:89:1b:14:d5:60:a3:c2:
                    e9:4d:ce:83:e8:f9:0a:ec:e5:f0:dd:a9:5f:16:95:
                    ba:74:ff:58:49:fd:10:51:c3:0b:24:a8:dc:44:69:
                    13:57:2a:ea:d6:8f:e3:de:0a:75:77:ab:f3:d0:c7:
                    42:4c:29:a5:33:74:50:ad:40:ea:64:33:ac:e0:46:
                    c6:56:82:19:c7:4f:79:2c:64:dd:1d:c5:4c:9f:7a:
                    b7:47:68:ef:8e:1f:5d:7d:0f:16:92:0e:88:d3:de:
                    bc:12:8e:d9:f4:5a:96:48:6c:ce:71:e6:26:34:92:
                    fd:71:a5:26:e6:4f:82:88:49:27:9b:48:09:a2:18:
                    ec:64:e3:3a:c8:9a:3b:c0:6d:4f:76:5d:69:19:75:
                    d4:af:04:f3:e5:2b:91:ee:08:ad:4b:50:19:94:b0:
                    5c:33:e3:95:84:cc:e7:ca:a2:2f:75:b7:2a:b2:2f:
                    15:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:29:6F:49:9D:4E:90:68:3E:95:8B:66:2B:BF:5D:8B:F3:18:46:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e405cdf-e81e-3b91-9cae-7f7b2d82b3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1404:a800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:3e:e5:31:6d:e4:35:e0:a4:87:16:65:9f:9e:93:33:9b:09:
         58:1a:9d:29:b7:a1:fe:a9:7f:5c:f3:d1:1a:e2:11:6b:39:3d:
         b9:fa:94:ad:47:95:e2:5c:19:98:50:e6:3f:f6:3b:e9:6f:22:
         67:9e:96:3e:39:5c:99:e2:e0:56:db:9b:12:80:37:d5:5d:89:
         23:56:2f:94:4f:cf:39:03:db:a5:80:ed:74:be:ae:a3:77:c8:
         e7:56:19:11:7b:56:19:ad:00:09:ca:57:3f:76:14:c2:e6:da:
         a6:e0:40:e8:a5:eb:bd:6b:c6:d7:f4:72:47:70:00:91:24:8b:
         61:a3:94:d4:0f:56:d2:50:bb:8f:48:67:2b:11:12:b6:e2:62:
         4c:1e:8d:19:d0:7b:40:5b:ea:09:3c:e9:a3:94:62:3e:e0:59:
         03:ce:a3:5b:42:8b:e1:0d:e0:79:e8:38:46:19:d2:80:fa:f3:
         a7:a2:e0:6d:f2:80:bb:55:63:7d:28:07:1e:ff:b3:5a:36:11:
         74:45:61:63:2d:22:49:17:e3:2a:b1:50:0c:cd:c1:21:88:72:
         c8:80:de:be:57:1d:39:26:6e:d0:8f:6d:b4:3d:60:8a:49:f1:
         4d:e1:31:d1:38:ac:b0:ce:60:2c:de:88:73:e8:d1:01:a4:3c:
         91:fb:5f:45
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUr9XKhLnhVHdW/aIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDMxMTExNDAyM1oXDTI0MDYwOTExNDAyM1owLzEtMCsGA1UEAxMk
Y2U5ZWVhNWQtMjg5Mi00OGYzLTk2YzAtZDliM2JhNjQzMDI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI4E5PfepnzOxWuel26iqXxG3Itzil1uVibh
hJh8S6qUmT+yK6BXthoi/U9e6esCtjR22dzu67Apo7MMTquS9Ztxrs9PwP8qu7YO
6lPbMqaAqIkbFNVgo8LpTc6D6PkK7OXw3alfFpW6dP9YSf0QUcMLJKjcRGkTVyrq
1o/j3gp1d6vz0MdCTCmlM3RQrUDqZDOs4EbGVoIZx095LGTdHcVMn3q3R2jvjh9d
fQ8Wkg6I0968Eo7Z9FqWSGzOceYmNJL9caUm5k+CiEknm0gJohjsZOM6yJo7wG1P
dl1pGXXUrwTz5SuR7gitS1AZlLBcM+OVhMznyqIvdbcqsi8VPwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMkpb0mdTpBoPpWLZiu/XYvzGEbbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU0MDVjZGYtZTgxZS0z
YjkxLTljYWUtN2Y3YjJkODJiM2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBKgA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH4+5TFt5DXgpIcWZZ+ekzObCVganSm3of6pf1zz0RriEWs5Pbn6
lK1HleJcGZhQ5j/2O+lvImeelj45XJni4FbbmxKAN9VdiSNWL5RPzzkD26WA7XS+
rqN3yOdWGRF7VhmtAAnKVz92FMLm2qbgQOil671rxtf0ckdwAJEki2GjlNQPVtJQ
u49IZysRErbiYkwejRnQe0Bb6gk86aOUYj7gWQPOo1tCi+EN4HnoOEYZ0oD686ei
4G3ygLtVY30oBx7/s1o2EXRFYWMtIkkX4yqxUAzNwSGIcsiA3r5XHTkmbtCPbbQ9
YIpJ8U3hMdE4rLDOYCzeiHPo0QGkPJH7X0U=
-----END CERTIFICATE-----
Generated at Tue May 21 01:57:51 2024 by rpki-client on console-fra.rpki-client.org