Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b99b4fa-7f5b-366e-af76-38b97ff2bf62.roa
File:                     9b99b4fa-7f5b-366e-af76-38b97ff2bf62.roa (raw, json)
Hash identifier:          J0P+bQsG5VJOHmNm56/InqBPCqcS9sBnyQEE7H+FA2A=
Subject key identifier:   28:04:91:A1:B1:6E:54:AA:BF:CC:4A:AC:1A:82:31:8D:67:7F:3B:70
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847CE6F4A00F81692BE28039E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b99b4fa-7f5b-366e-af76-38b97ff2bf62.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     8966
IP address blocks:        2600:1417:6400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:4a:00:f8:16:92:be:28:03:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=84bcddb5-116a-4c55-b04c-b630bbbb2fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ec:09:74:cc:ef:94:74:8d:26:37:99:6d:3d:
                    c8:7e:3d:d4:a5:29:c7:e0:d6:33:ff:2f:ec:46:36:
                    19:25:1e:98:e3:df:56:4c:f1:82:d2:d9:50:13:91:
                    c3:03:7a:88:97:62:3e:fe:1c:23:23:70:87:d2:1a:
                    01:a8:18:d2:94:02:f7:04:aa:94:47:f9:b0:3a:37:
                    c1:64:10:26:f0:3e:15:d7:c5:65:84:3f:97:03:c8:
                    11:c5:55:6e:3b:95:c4:bd:b1:5b:b2:2b:80:76:cc:
                    08:13:d3:22:82:09:61:cc:83:b9:d9:1c:f1:48:da:
                    5c:c9:3f:73:05:e5:2c:2f:d3:f8:27:9f:ac:72:13:
                    b2:c5:f0:16:2c:ed:46:0f:5c:13:0b:11:27:36:a6:
                    be:ee:fe:50:f6:b4:d9:4e:d6:86:9f:2e:8b:0a:14:
                    76:ac:3f:ab:79:00:e9:29:a3:ec:43:48:5c:51:0e:
                    20:7d:20:16:6f:21:48:70:50:4d:bd:12:87:09:49:
                    92:e0:bb:60:57:44:e6:fa:ea:85:8d:d7:18:8f:b0:
                    1a:a3:8c:00:e9:bf:d7:59:e5:72:9d:c0:4c:44:fc:
                    c8:4c:85:2f:2e:69:d1:5c:43:0c:23:49:77:7b:bf:
                    b8:41:41:35:aa:a8:2a:15:5f:40:3b:3e:43:a9:29:
                    b3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:04:91:A1:B1:6E:54:AA:BF:CC:4A:AC:1A:82:31:8D:67:7F:3B:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b99b4fa-7f5b-366e-af76-38b97ff2bf62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:6400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:d1:d3:c1:73:3a:5a:90:a3:b4:dc:44:c9:b3:b6:6a:4b:46:
         fc:ec:1e:9b:fc:3c:37:cf:c2:42:38:bf:a6:18:21:dc:46:43:
         1f:e3:e7:57:ba:60:85:61:2e:6b:92:8c:07:56:ac:6c:a4:ad:
         7c:b8:b0:a1:56:26:5a:ce:6f:b4:24:b2:8a:83:ac:59:c6:2d:
         3e:99:b2:d1:44:5f:81:c2:81:91:3d:70:ae:98:5d:23:c3:8b:
         37:17:f1:b9:07:22:a2:ba:83:ef:ca:3e:3f:ff:1b:1a:4b:e6:
         04:f3:ac:71:99:cd:9e:4a:fc:37:32:76:af:f7:fd:cb:1f:06:
         14:fa:67:97:e8:3e:c5:ad:dd:e8:fe:cc:76:d7:65:86:ca:45:
         ea:e0:d2:ba:65:a4:90:e8:86:32:6e:50:9d:5a:e1:87:e5:1c:
         f0:97:28:99:7f:57:f7:b3:d0:ed:c1:05:40:ed:c1:4d:65:e3:
         41:8c:3e:33:25:ca:c5:a5:84:c5:c3:18:50:f3:7d:5a:5b:97:
         f5:d5:24:d7:8d:35:41:6a:8a:af:f3:8c:59:37:5a:25:da:cb:
         41:9a:07:19:02:8f:08:5d:57:2c:66:c8:fc:9d:45:1c:df:e2:
         07:3d:9c:6d:20:e6:78:46:ba:6e:40:34:87:7b:a4:ba:16:a3:
         9c:bf:d1:39
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfOb0oA+BaSvigDngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk
ODRiY2RkYjUtMTE2YS00YzU1LWIwNGMtYjYzMGJiYmIyZmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+wJdMzvlHSNJjeZbT3Ifj3UpSnH4NYz/y/s
RjYZJR6Y499WTPGC0tlQE5HDA3qIl2I+/hwjI3CH0hoBqBjSlAL3BKqUR/mwOjfB
ZBAm8D4V18VlhD+XA8gRxVVuO5XEvbFbsiuAdswIE9MigglhzIO52RzxSNpcyT9z
BeUsL9P4J5+schOyxfAWLO1GD1wTCxEnNqa+7v5Q9rTZTtaGny6LChR2rD+reQDp
KaPsQ0hcUQ4gfSAWbyFIcFBNvRKHCUmS4LtgV0Tm+uqFjdcYj7Aao4wA6b/XWeVy
ncBMRPzITIUvLmnRXEMMI0l3e7+4QUE1qqgqFV9AOz5DqSmz0QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCgEkaGxblSqv8xKrBqCMY1nfztwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWI5OWI0ZmEtN2Y1Yi0z
NjZlLWFmNzYtMzhiOTdmZjJiZjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUF2QA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG/R08FzOlqQo7TcRMmztmpLRvzsHpv8PDfPwkI4v6YYIdxGQx/j
51e6YIVhLmuSjAdWrGykrXy4sKFWJlrOb7QksoqDrFnGLT6ZstFEX4HCgZE9cK6Y
XSPDizcX8bkHIqK6g+/KPj//GxpL5gTzrHGZzZ5K/Dcydq/3/csfBhT6Z5foPsWt
3ej+zHbXZYbKRerg0rplpJDohjJuUJ1a4YflHPCXKJl/V/ez0O3BBUDtwU1l40GM
PjMlysWlhMXDGFDzfVpbl/XVJNeNNUFqiq/zjFk3WiXay0GaBxkCjwhdVyxmyPyd
RRzf4gc9nG0g5nhGum5ANId7pLoWo5y/0Tk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:56 2024 by rpki-client on console-ams.rpki-client.org