Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d110f90-28be-3457-8e60-9861123cb715.roa
File:                     9d110f90-28be-3457-8e60-9861123cb715.roa (raw, json)
Hash identifier:          OhRvtP3vuaOOI4V1Qs7qzVSJt4kVkJS+5jYw7c/aZ5k=
Subject key identifier:   2F:90:30:81:60:FB:FB:BC:1C:8E:87:27:73:7F:D6:B7:5D:B9:EC:B8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452C0AE81C44B93E9A8CC57100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d110f90-28be-3457-8e60-9861123cb715.roa
Signing time:             Mon 11 Mar 2024 12:23:37 +0000
ROA not before:           Mon 11 Mar 2024 12:23:37 +0000
ROA not after:            Sun 09 Jun 2024 12:23:37 +0000
asID:                     35994
IP address blocks:        2600:1406:f000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:0a:e8:1c:44:b9:3e:9a:8c:c5:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 11 12:23:37 2024 GMT
            Not After : Jun  9 12:23:37 2024 GMT
        Subject: CN=387ed84a-5a70-4cc3-9b0c-c1999a205a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e4:a7:78:2c:07:a2:f9:be:fe:4d:8c:4c:ca:
                    c7:01:b5:9b:9d:b4:aa:5a:41:90:a0:79:f2:42:4b:
                    4e:dc:6c:39:e8:91:a3:30:d3:0a:52:94:44:fb:fb:
                    62:8c:ac:2a:e1:86:a0:b1:b7:5e:36:52:c0:aa:ea:
                    e7:36:bc:64:05:13:fc:75:60:5e:79:4b:89:aa:b6:
                    99:1f:53:bf:e1:98:19:d1:43:a4:a1:0e:53:00:0f:
                    5a:a5:d7:09:fc:9f:36:bd:9a:b6:76:d5:7e:24:16:
                    fb:37:b0:5d:00:4e:28:7a:5e:f6:4e:f7:06:44:24:
                    6c:97:20:46:9c:1a:ed:83:96:b7:1d:e7:10:f7:8f:
                    4f:82:9b:e9:c8:4d:8c:f1:ad:fb:28:05:19:dc:bf:
                    09:4e:3e:28:8d:f3:85:9a:17:48:48:d6:03:e5:01:
                    5f:02:87:a9:a7:08:c8:fc:23:34:67:90:aa:6d:32:
                    eb:a4:08:70:c8:71:00:33:1d:36:1a:4e:9d:b2:33:
                    a5:77:25:5a:6e:c6:22:48:2f:f5:ce:62:9e:98:88:
                    68:bf:f3:d6:ab:e3:c8:fe:55:05:b1:f2:e4:ae:8b:
                    6b:4f:d0:b4:75:9a:35:cc:51:d7:88:c2:d6:e9:cc:
                    17:a7:4e:7b:63:0b:b4:ad:fc:b3:df:2b:18:9c:8a:
                    1e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:90:30:81:60:FB:FB:BC:1C:8E:87:27:73:7F:D6:B7:5D:B9:EC:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d110f90-28be-3457-8e60-9861123cb715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:fb:9a:dd:a6:94:a4:9c:99:34:00:6d:2f:d5:e6:63:4a:44:
         a3:73:73:88:34:98:fe:64:c0:07:2c:b7:56:26:80:1a:d4:e3:
         db:4a:bd:59:df:10:99:b4:da:c8:5f:e1:72:c8:32:5f:69:ff:
         df:d9:3f:5f:25:93:cd:66:e7:ea:ad:56:88:98:5d:70:c8:cd:
         b7:d0:f2:1a:2f:62:42:ff:67:5b:0d:cc:32:bf:10:98:aa:92:
         59:07:b5:f7:28:41:4b:b8:28:60:f2:79:24:96:68:11:eb:02:
         0d:9a:36:01:45:8d:b5:8b:8f:28:12:32:ab:b8:7e:86:70:80:
         e7:92:34:bc:7f:1f:7b:f3:cb:ec:b6:ce:fe:3e:3b:00:50:31:
         e0:91:85:ad:4d:0d:c8:1d:6d:7b:8d:d5:45:ac:bb:65:86:f5:
         12:99:a7:de:d3:14:a3:9d:c9:0c:3c:f2:79:f7:db:47:5f:0e:
         1f:1f:7f:05:51:75:c3:f5:d2:f6:fb:5e:ca:43:7e:ad:ac:42:
         a1:a8:25:68:27:2d:b4:f4:ad:9f:3f:43:03:10:24:19:ef:76:
         36:9d:ba:d5:00:49:82:06:f5:0f:d9:2e:d0:dc:cc:6f:55:a3:
         7e:96:8b:30:72:4e:56:9a:0d:24:00:f9:9d:20:a0:57:19:dc:
         cb:f6:33:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 16:41:13 2024 by rpki-client on console-ams.rpki-client.org