Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a76a7aa-93bd-3d9d-b89c-f560507b3c99.roa
File:                     9a76a7aa-93bd-3d9d-b89c-f560507b3c99.roa (raw, json)
Hash identifier:          WBMshSezao2NaZ1sNPNl2950XnBcL/GmQnb+r/1LdJs=
Subject key identifier:   21:6F:03:46:1C:ED:6E:DD:D9:5F:A1:F4:25:AA:51:4D:92:D5:03:8F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473D25E44D6C0DD875596E8AC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a76a7aa-93bd-3d9d-b89c-f560507b3c99.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     0
IP address blocks:        2606:6c00:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:e4:4d:6c:0d:d8:75:59:6e:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=559ecd53-dcd2-41f1-8265-9eff479b9bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:39:5b:58:a2:a7:13:b5:87:33:a3:48:cc:8f:
                    93:eb:af:b5:8b:eb:36:0b:57:c0:62:16:aa:37:d6:
                    6a:11:d5:5e:71:30:31:1a:a7:ec:f9:9e:af:4d:fe:
                    35:39:f8:c3:d4:fa:38:22:e4:59:c4:bf:22:5c:17:
                    3c:19:26:08:42:4a:40:21:27:87:ed:2a:28:39:ea:
                    75:05:45:b7:63:7c:fc:68:85:03:54:f9:58:3c:88:
                    c3:04:48:00:cb:3f:25:a4:82:5f:9b:d5:15:09:e4:
                    a4:f1:82:7d:b8:25:43:13:95:7f:6e:13:fb:9a:63:
                    af:62:4a:80:ec:0c:50:91:6f:4f:95:41:7e:70:e7:
                    27:49:8a:ad:07:f9:2f:3f:5b:2b:b0:40:af:06:8a:
                    7a:9b:ae:cf:a4:33:10:14:3a:bb:78:1a:0e:47:a4:
                    f5:84:3e:4e:a9:05:5e:a1:ee:ba:5a:82:6f:21:41:
                    43:bf:04:e3:8f:f7:fd:b4:d9:91:67:4c:9f:22:a2:
                    b3:e9:28:ed:fa:dc:e4:dc:19:f5:eb:97:b4:7b:59:
                    49:61:fa:a7:2a:a8:85:e6:d3:43:55:86:3a:83:3b:
                    95:ad:aa:d6:86:2e:68:0f:9b:df:f7:dc:4f:a5:c9:
                    12:49:8f:8e:e7:60:64:9e:fc:58:da:02:c3:36:a6:
                    24:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6F:03:46:1C:ED:6E:DD:D9:5F:A1:F4:25:AA:51:4D:92:D5:03:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a76a7aa-93bd-3d9d-b89c-f560507b3c99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6c00:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:1e:38:4b:89:da:b6:60:2d:97:cd:c7:4c:ee:3c:43:59:09:
         bb:8e:c7:62:f3:98:04:9c:d2:11:a0:1d:64:32:62:d7:69:e8:
         18:75:ca:41:95:fe:d7:4e:74:eb:2a:5e:43:3d:c8:24:c9:4d:
         e2:84:fd:4c:bf:98:79:2c:14:a2:c5:bf:08:e4:92:22:fb:96:
         6d:c1:21:00:08:9d:6c:a2:90:c3:af:f2:ad:ed:c4:6e:55:95:
         18:62:2f:9c:d9:73:e0:1b:c5:4b:a0:49:b4:b9:6d:f0:59:c8:
         1f:5e:66:42:d1:26:d8:7b:ca:e1:cc:da:55:c5:d5:c6:08:b7:
         72:ed:c0:0a:24:ec:bf:f7:85:fd:34:98:64:77:cf:c6:bd:a6:
         c4:3d:1d:aa:96:81:22:52:7b:de:dd:ad:46:81:51:7d:cd:c6:
         89:95:0e:ce:4b:fa:cd:33:a7:50:42:86:32:94:92:b2:b7:51:
         f8:2e:e2:a8:65:ac:f8:09:cd:2e:22:ff:82:0b:72:f9:8a:99:
         96:c1:6a:e7:ae:1e:5f:fe:a7:2a:bb:cc:ee:b5:a8:d4:90:0e:
         51:fb:6e:ac:bc:c0:9b:94:78:2a:ab:35:38:bd:41:9a:ed:67:
         10:bf:28:dd:d9:34:8f:a6:eb:c5:b0:61:57:2d:1d:b2:e7:5d:
         90:70:0d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:07 2024 by rpki-client on console-ams.rpki-client.org