Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9bb74d76-4323-38ba-9349-d72b3f17dd65.roa
File:                     9bb74d76-4323-38ba-9349-d72b3f17dd65.roa (raw, json)
Hash identifier:          65DZGdQE2obmTQ/eeuJr4PnV0VwWbW+EThmEAETXkkg=
Subject key identifier:   CB:9D:D6:6B:4D:C7:4B:AB:A3:64:DF:B9:8B:E9:37:E5:74:65:D3:49
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473A5B8AC49417D019C1669100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9bb74d76-4323-38ba-9349-d72b3f17dd65.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     33905
IP address blocks:        2600:1480:1000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:8a:c4:94:17:d0:19:c1:66:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=c126e542-f310-4e60-ac74-ac6e6b0db989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ca:47:65:4e:c9:41:dc:0f:1d:cf:c9:75:ab:
                    d8:79:80:0a:67:69:49:6c:57:58:04:44:15:fc:61:
                    d2:f0:27:b0:b3:c1:23:ac:c9:38:11:24:df:5b:c2:
                    21:3e:5b:c9:b9:b3:b9:1b:46:4e:55:26:56:a8:61:
                    0a:f8:59:ae:08:6d:c1:21:42:39:2c:bf:5f:23:a9:
                    79:f2:5f:57:13:d0:59:e9:e5:65:6a:3d:b6:c5:e3:
                    7b:c0:77:ec:fb:00:40:b6:a2:15:d7:08:ad:fc:17:
                    ac:25:1a:89:cf:01:92:51:92:e5:a3:4c:8f:1c:3f:
                    82:c0:f7:b3:05:e0:1c:1a:f9:37:79:f4:4c:67:53:
                    d1:23:7c:61:aa:7f:cf:17:d5:76:a5:0d:88:65:54:
                    f7:f6:84:06:e7:06:4d:ad:1e:bc:fe:e3:7b:ea:43:
                    b4:24:91:2b:f0:3a:4c:31:e2:0e:77:6d:b6:5a:da:
                    0a:d1:c2:a3:ac:dd:e1:78:0a:58:05:86:83:bf:9e:
                    b9:2e:09:ed:56:b6:77:86:8b:49:de:a7:7d:87:7d:
                    a5:2e:66:d9:e7:c5:0a:c3:5c:02:4b:38:35:b7:47:
                    8b:39:6c:98:4c:ab:7f:15:14:95:88:f5:df:0e:b5:
                    57:57:3a:06:fa:44:c8:af:59:80:c8:1e:91:01:9b:
                    9b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9D:D6:6B:4D:C7:4B:AB:A3:64:DF:B9:8B:E9:37:E5:74:65:D3:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9bb74d76-4323-38ba-9349-d72b3f17dd65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1480:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:10:bf:d7:60:1b:5e:cc:1b:0d:2e:c6:77:2a:9c:bf:64:73:
         80:c2:e1:67:e1:16:1b:63:0d:e4:b6:66:4a:d7:ad:f3:73:b1:
         71:52:f2:ba:19:1f:5b:5c:d1:d5:b8:5a:5d:d5:ff:77:29:13:
         5b:53:3a:b3:e1:5b:8f:00:ec:5d:48:14:b8:96:8c:0d:04:d6:
         3a:c5:5e:c2:a9:5c:94:7e:74:94:e9:61:28:e4:b1:da:ee:8f:
         1e:22:1f:74:31:aa:2f:99:cb:97:5d:ac:4c:c5:bc:9d:57:f2:
         da:9e:9f:5f:9a:0d:12:cf:26:fb:ec:75:80:4f:16:59:15:b1:
         a1:47:b8:1c:5a:17:5d:cf:86:6d:e5:83:13:86:fd:06:f0:aa:
         ae:77:c3:64:e8:7e:df:4c:26:43:75:b3:36:06:44:e9:f2:21:
         e3:19:35:32:74:c5:bf:99:91:56:b5:8f:85:28:b9:91:bc:5e:
         14:50:61:a5:4d:e9:31:89:1b:86:42:b8:52:a2:6c:36:8b:cc:
         f8:a0:25:3c:ad:e7:a0:bf:ab:94:0f:8a:87:60:b3:e7:33:ec:
         b4:d2:7a:74:cc:77:32:b6:80:7b:d5:78:13:4a:20:96:73:ed:
         bd:e9:0e:82:1e:bc:ab:7b:f2:d2:76:0d:95:29:1d:9f:7a:fd:
         bc:1e:4e:ad
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEc6W4rElBfQGcFmkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
YzEyNmU1NDItZjMxMC00ZTYwLWFjNzQtYWM2ZTZiMGRiOTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8pHZU7JQdwPHc/JdavYeYAKZ2lJbFdYBEQV
/GHS8Cews8EjrMk4ESTfW8IhPlvJubO5G0ZOVSZWqGEK+FmuCG3BIUI5LL9fI6l5
8l9XE9BZ6eVlaj22xeN7wHfs+wBAtqIV1wit/BesJRqJzwGSUZLlo0yPHD+CwPez
BeAcGvk3efRMZ1PRI3xhqn/PF9V2pQ2IZVT39oQG5wZNrR68/uN76kO0JJEr8DpM
MeIOd222WtoK0cKjrN3heApYBYaDv565LgntVrZ3hotJ3qd9h32lLmbZ58UKw1wC
Szg1t0eLOWyYTKt/FRSViPXfDrVXVzoG+kTIr1mAyB6RAZubOQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMud1mtNx0uro2TfuYvpN+V0ZdNJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWJiNzRkNzYtNDMyMy0z
OGJhLTkzNDktZDcyYjNmMTdkZDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgAUgBAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAcBC/12AbXswbDS7Gdyqcv2RzgMLhZ+EWG2MN5LZmStet83OxcVLy
uhkfW1zR1bhaXdX/dykTW1M6s+FbjwDsXUgUuJaMDQTWOsVewqlclH50lOlhKOSx
2u6PHiIfdDGqL5nLl12sTMW8nVfy2p6fX5oNEs8m++x1gE8WWRWxoUe4HFoXXc+G
beWDE4b9BvCqrnfDZOh+30wmQ3WzNgZE6fIh4xk1MnTFv5mRVrWPhSi5kbxeFFBh
pU3pMYkbhkK4UqJsNovM+KAlPK3noL+rlA+Kh2Cz5zPstNJ6dMx3MraAe9V4E0og
lnPtvekOgh68q3vy0nYNlSkdn3r9vB5OrQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:17:18 2024 by rpki-client on console-fra.rpki-client.org