Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9230dbb8-cd59-383d-87ae-21fa10ccf21e.roa
File:                     9230dbb8-cd59-383d-87ae-21fa10ccf21e.roa (raw, json)
Hash identifier:          yjST5+eMQilavlkJzgUv++bIE/u76Hl5Jzc1vEiR4y0=
Subject key identifier:   FD:B4:72:32:62:CF:85:B8:E8:97:3C:BC:18:2D:CB:02:FF:C7:61:AE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B961807D1CBCEC12F16E3640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9230dbb8-cd59-383d-87ae-21fa10ccf21e.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        2600:141b:9000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:80:7d:1c:bc:ec:12:f1:6e:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=b47fe9fe-80fa-4cc0-9cb8-52b8d306346e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:78:31:4a:4b:db:97:88:ef:ca:3c:39:1d:01:
                    88:f2:ac:22:91:91:b1:a1:13:88:14:c4:6f:70:00:
                    d7:25:b6:b9:52:86:82:b7:6d:3c:86:97:f6:5c:d9:
                    0c:14:e6:7f:cc:45:b7:45:d0:0b:29:25:a6:97:b4:
                    1c:7f:57:23:c7:27:d4:17:8a:3b:b7:99:e4:67:78:
                    98:17:2c:c2:4e:34:03:0c:7f:d9:3d:e4:eb:d1:4e:
                    0b:80:a8:fd:c4:5a:d0:48:c5:fb:79:98:7e:8f:c8:
                    63:87:27:4b:2e:63:7f:c2:e2:b9:48:3c:40:15:c9:
                    f2:29:dd:c5:8c:ba:44:0e:72:ad:05:c5:29:31:e5:
                    8a:ba:52:5f:6f:cb:02:7a:d8:43:2e:88:ed:aa:83:
                    a6:76:16:cb:98:b2:de:45:b9:a2:7e:ec:d1:86:30:
                    e8:32:37:0c:18:5c:69:80:5d:7b:83:e6:01:d8:aa:
                    01:dc:69:10:f3:79:1c:fb:32:00:2e:53:15:9d:0f:
                    58:ce:8e:be:b8:c8:9e:c5:a1:63:ad:bb:55:1e:47:
                    7b:a6:6e:71:22:75:0e:7b:58:47:dc:58:17:58:56:
                    01:38:16:fc:cd:c5:ab:ca:bd:17:63:53:25:44:fe:
                    dc:d0:0a:ca:30:c2:3d:82:21:79:8e:3d:93:f1:1a:
                    d1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B4:72:32:62:CF:85:B8:E8:97:3C:BC:18:2D:CB:02:FF:C7:61:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9230dbb8-cd59-383d-87ae-21fa10ccf21e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141b:9000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:71:39:6a:22:85:cf:f0:be:5e:6a:39:87:36:d9:42:73:c2:
         5e:be:4f:72:9b:e6:4e:39:92:fa:21:39:e1:0d:0c:89:35:8b:
         8a:16:94:f1:75:22:46:07:3e:dd:d2:c7:27:33:40:e4:1a:32:
         92:cb:d2:5d:ee:25:4c:65:60:22:ad:36:12:0a:15:0e:d0:53:
         db:20:62:79:21:1d:85:0a:36:78:ad:b7:57:24:59:f0:91:6b:
         c6:6f:18:5f:c9:9c:b1:db:d2:de:dc:81:d2:54:ce:9e:10:b9:
         8b:c4:5e:b4:73:46:8a:51:33:37:cf:1e:13:e9:1a:3e:4d:25:
         b0:23:87:f9:17:1c:88:35:70:3a:e1:5c:03:db:5e:51:13:61:
         51:d0:90:f7:9e:bb:4c:34:5c:27:c9:cf:63:a0:7a:22:e5:c0:
         fd:21:84:2e:8f:33:57:b7:01:db:6a:fa:11:0e:ac:56:29:f1:
         b3:35:c3:58:1c:fe:c0:03:6c:cc:95:1f:4e:ba:dc:06:04:41:
         95:a3:ea:18:cf:bd:a6:3b:32:af:0c:fa:b4:46:da:a3:c7:47:
         4a:ca:ac:92:25:2e:65:20:26:5e:30:27:ce:9a:3f:51:43:9b:
         2f:e2:f3:4f:6f:4b:8e:bb:9c:2e:d6:c9:e8:a1:6a:85:29:82:
         1f:12:ea:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:16 2024 by rpki-client on console-fra.rpki-client.org