Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9230dbb8-cd59-383d-87ae-21fa10ccf21e.roa
File:                     9230dbb8-cd59-383d-87ae-21fa10ccf21e.roa (raw, json)
Hash identifier:          oUEIzLSO1ePwkTc0GFwGdRmCjnmToYbBoBeNJgdHrPE=
Subject key identifier:   07:49:DA:A8:AB:AF:03:37:E5:5A:CD:FE:23:8E:F8:B5:12:A2:F8:AB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858451AFC4ADB341533DB820748E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9230dbb8-cd59-383d-87ae-21fa10ccf21e.roa
Signing time:             Tue 05 Mar 2024 09:45:26 +0000
ROA not before:           Tue 05 Mar 2024 09:45:26 +0000
ROA not after:            Mon 03 Jun 2024 08:45:26 +0000
asID:                     20940
IP address blocks:        2600:141b:9000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:fc:4a:db:34:15:33:db:82:07:48:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  5 09:45:26 2024 GMT
            Not After : Jun  3 08:45:26 2024 GMT
        Subject: CN=c4822e8f-058a-4d9e-9600-3595d5873676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3b:b0:a0:00:5f:1d:61:68:6a:c5:38:29:18:
                    fc:06:db:c3:fe:0c:64:b7:d0:8f:3d:50:a1:22:3f:
                    47:fd:3d:a2:77:25:16:06:e2:80:c9:fe:73:6e:4f:
                    87:00:27:b3:92:b9:8a:50:1c:3e:d0:ef:2f:cc:41:
                    dc:01:89:08:29:9d:8a:cb:f2:99:44:a8:c1:49:5f:
                    ad:9b:e5:04:a2:4c:50:e9:84:bc:fb:54:e2:1b:8a:
                    d8:ce:65:0c:e9:cc:17:a6:c1:5a:65:6f:a6:ff:38:
                    43:50:89:73:34:8f:a7:05:2a:66:d8:c3:8f:03:9a:
                    f5:72:5b:9a:f0:69:b6:98:8d:a0:62:ab:52:fa:02:
                    95:a3:17:a2:29:cb:db:35:f3:92:41:e9:ae:57:82:
                    40:c2:eb:52:f2:e4:bb:5d:25:bc:34:98:ac:f9:94:
                    f2:00:78:2c:7e:8b:b1:9f:96:44:85:f0:c5:78:fc:
                    b6:71:b1:35:90:75:8e:25:56:02:b2:04:e8:b4:c5:
                    4f:7e:61:0e:7a:84:9f:e7:a7:34:d0:04:56:b3:0f:
                    a6:2e:a6:b7:29:86:48:42:61:9d:3f:28:41:33:71:
                    18:38:bf:ab:0b:f7:55:c8:b3:52:9a:f5:f0:46:d7:
                    8d:71:e2:df:4d:d2:b0:a8:3d:df:b0:b9:71:6d:fd:
                    ae:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:49:DA:A8:AB:AF:03:37:E5:5A:CD:FE:23:8E:F8:B5:12:A2:F8:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9230dbb8-cd59-383d-87ae-21fa10ccf21e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141b:9000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:75:1c:b2:89:3f:4b:9d:80:de:f1:b0:b6:19:7a:1e:ee:82:
         76:05:ee:08:de:03:52:2c:37:2b:b8:46:de:25:0e:b9:21:94:
         0b:00:00:28:aa:24:9b:ec:11:da:6a:a0:1d:b7:b9:7a:a4:45:
         5f:21:4d:94:0a:ef:d1:5c:05:ed:dc:d1:37:32:55:1a:ee:17:
         05:cd:95:20:bb:33:68:02:d3:0e:72:e9:0d:6a:a5:f2:9a:0c:
         2e:c8:38:b0:58:2b:62:60:be:e4:f6:94:21:d1:74:1b:20:05:
         42:ca:eb:ec:79:9e:b4:6f:d9:82:aa:8b:9d:5a:98:b5:f5:e2:
         72:f2:a9:7f:0e:54:06:28:25:f3:ec:b6:b4:f7:3b:ce:e8:fa:
         7e:84:08:0c:8f:f3:13:89:4b:29:20:0a:37:47:a3:ae:e3:fd:
         72:dd:1e:30:06:a8:97:f4:27:90:c6:8c:61:fa:2d:b8:c4:46:
         5b:a0:e8:68:8b:19:93:1f:ed:e2:0e:55:1d:3b:17:a2:7b:c4:
         86:5f:95:01:29:46:c9:b9:46:42:af:f3:d5:1d:bf:6e:f2:b2:
         5a:be:d2:e6:73:9d:8d:72:5a:a6:0c:0a:c5:12:58:7a:80:03:
         3d:42:62:84:ab:36:68:24:f2:f1:fa:60:e4:7a:a2:79:ca:70:
         c4:57:f4:01
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUa/ErbNBUz24IHSOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDMwNTA5NDUyNloXDTI0MDYwMzA4NDUyNlowLzEtMCsGA1UEAxMk
YzQ4MjJlOGYtMDU4YS00ZDllLTk2MDAtMzU5NWQ1ODczNjc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjuwoABfHWFoasU4KRj8BtvD/gxkt9CPPVCh
Ij9H/T2idyUWBuKAyf5zbk+HACezkrmKUBw+0O8vzEHcAYkIKZ2Ky/KZRKjBSV+t
m+UEokxQ6YS8+1TiG4rYzmUM6cwXpsFaZW+m/zhDUIlzNI+nBSpm2MOPA5r1clua
8Gm2mI2gYqtS+gKVoxeiKcvbNfOSQemuV4JAwutS8uS7XSW8NJis+ZTyAHgsfoux
n5ZEhfDFePy2cbE1kHWOJVYCsgTotMVPfmEOeoSf56c00ARWsw+mLqa3KYZIQmGd
PyhBM3EYOL+rC/dVyLNSmvXwRteNceLfTdKwqD3fsLlxbf2uKwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAdJ2qirrwM35VrN/iOO+LUSovirMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTIzMGRiYjgtY2Q1OS0z
ODNkLTg3YWUtMjFmYTEwY2NmMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUG5AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABl1HLKJP0udgN7xsLYZeh7ugnYF7gjeA1IsNyu4Rt4lDrkhlAsA
ACiqJJvsEdpqoB23uXqkRV8hTZQK79FcBe3c0TcyVRruFwXNlSC7M2gC0w5y6Q1q
pfKaDC7IOLBYK2JgvuT2lCHRdBsgBULK6+x5nrRv2YKqi51amLX14nLyqX8OVAYo
JfPstrT3O87o+n6ECAyP8xOJSykgCjdHo67j/XLdHjAGqJf0J5DGjGH6LbjERlug
6GiLGZMf7eIOVR07F6J7xIZflQEpRsm5RkKv89Udv27yslq+0uZznY1yWqYMCsUS
WHqAAz1CYoSrNmgk8vH6YOR6onnKcMRX9AE=
-----END CERTIFICATE-----
Generated at Fri May 17 01:57:57 2024 by rpki-client on console-fra.rpki-client.org