Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fa62a59-3c7f-3d07-8925-efd6882ce09e.roa
File:                     9fa62a59-3c7f-3d07-8925-efd6882ce09e.roa (raw, json)
Hash identifier:          NdtfbAG0b5tQXbQ024cS5AfLok1Ghn7Ie2nRwnQRzac=
Subject key identifier:   6E:81:1B:59:4A:9E:8D:F7:FD:F1:F7:8B:6E:98:5D:D7:EE:21:65:8C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C1DF6473135F78BF99AEF800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fa62a59-3c7f-3d07-8925-efd6882ce09e.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     20940
IP address blocks:        2600:1406:3600::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:64:73:13:5f:78:bf:99:ae:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=9fae1985-3ac2-43cc-8ae5-4c5ee3e369f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:86:4a:18:fc:62:fd:6b:69:0c:c5:0d:1f:35:
                    09:86:dd:ba:77:fe:d1:e0:eb:a6:ed:d6:d6:7f:cf:
                    e7:ea:33:46:ee:5a:62:e5:99:dc:c2:39:85:6d:ed:
                    7c:64:9b:7c:9e:eb:4c:5f:2c:7c:fa:b1:36:a7:19:
                    d6:4d:f8:89:88:3c:e3:bb:95:92:30:7a:09:cf:c8:
                    ba:02:9c:81:52:3b:15:07:dc:3b:a9:8a:55:aa:57:
                    27:c5:19:9f:cf:40:e1:b0:ca:a4:f7:52:eb:ab:ab:
                    42:ad:dd:92:c5:d7:29:7a:42:3f:06:b3:d3:d9:59:
                    3a:90:74:2e:7d:84:b4:9d:a6:58:7f:ba:f5:4a:bc:
                    a2:0c:09:f3:ac:7b:df:83:d9:c8:eb:5e:d7:51:7a:
                    3a:47:5d:6d:8d:dc:9c:73:fc:b2:f7:59:f8:29:5f:
                    6e:0f:ba:50:83:cf:e1:e1:5a:55:43:bb:fc:12:55:
                    ed:f5:25:55:3c:56:98:a3:f2:6b:a9:ba:81:ff:09:
                    3f:d4:48:07:c7:7d:4b:55:7b:c1:9c:5d:36:89:7a:
                    2e:4e:dd:6b:f4:71:4d:d7:14:5f:3a:2a:98:a4:43:
                    03:80:23:8e:bf:a6:a7:9a:53:cd:1b:1f:d9:2a:ef:
                    bc:ed:24:5c:c6:9c:23:d8:3f:69:cc:5c:27:3b:0c:
                    a6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:81:1B:59:4A:9E:8D:F7:FD:F1:F7:8B:6E:98:5D:D7:EE:21:65:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fa62a59-3c7f-3d07-8925-efd6882ce09e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:3600::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:80:fd:72:fa:a9:f5:8f:a0:c4:bb:7f:db:d5:b9:4a:92:39:
         be:94:b6:31:fd:12:5e:ae:43:8b:bc:f1:93:7d:32:8e:29:25:
         fd:60:87:e9:47:14:00:24:6a:12:68:1b:23:07:be:75:5e:a2:
         e4:a1:2f:d3:22:5e:46:c6:d6:ba:15:47:2d:82:83:c3:cc:42:
         0f:7e:eb:01:d2:63:aa:90:de:f0:72:18:f4:b7:40:9b:3f:5c:
         31:70:eb:ec:2a:18:9c:75:cb:3f:1e:45:f6:4a:c2:3b:57:6b:
         8e:97:19:fb:b1:e0:2a:32:50:6e:6b:dd:6b:73:6b:0f:c4:1a:
         4b:83:e9:22:50:d0:91:98:2a:d0:10:1e:57:d2:0c:86:9a:70:
         a8:dd:32:87:6e:6b:f3:b5:c1:4b:cf:c7:6b:6e:46:3a:42:91:
         c8:93:07:42:03:71:3b:a5:62:1e:53:37:75:71:d9:cf:93:9f:
         a3:59:7b:fd:99:7d:36:e6:b2:3e:c3:0e:f8:b2:36:45:cf:38:
         95:30:ae:aa:f9:7f:5e:29:87:41:2f:c2:dd:3b:49:79:8b:c7:
         d8:e8:66:38:cb:5f:dc:06:e4:84:e5:b6:27:53:dc:7f:48:f8:
         a6:e4:13:f5:9e:ef:a9:6e:14:37:b3:d8:35:af:3a:38:6e:18:
         11:13:1c:71
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfB32RzE194v5mu+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk
OWZhZTE5ODUtM2FjMi00M2NjLThhZTUtNGM1ZWUzZTM2OWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4ZKGPxi/WtpDMUNHzUJht26d/7R4Oum7dbW
f8/n6jNG7lpi5ZncwjmFbe18ZJt8nutMXyx8+rE2pxnWTfiJiDzju5WSMHoJz8i6
ApyBUjsVB9w7qYpVqlcnxRmfz0DhsMqk91Lrq6tCrd2SxdcpekI/BrPT2Vk6kHQu
fYS0naZYf7r1SryiDAnzrHvfg9nI617XUXo6R11tjdycc/yy91n4KV9uD7pQg8/h
4VpVQ7v8ElXt9SVVPFaYo/JrqbqB/wk/1EgHx31LVXvBnF02iXouTt1r9HFN1xRf
OiqYpEMDgCOOv6anmlPNGx/ZKu+87SRcxpwj2D9pzFwnOwym9QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG6BG1lKno33/fH3i26YXdfuIWWMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWZhNjJhNTktM2M3Zi0z
ZDA3LTg5MjUtZWZkNjg4MmNlMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBjYA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI2A/XL6qfWPoMS7f9vVuUqSOb6UtjH9El6uQ4u88ZN9Mo4pJf1g
h+lHFAAkahJoGyMHvnVeouShL9MiXkbG1roVRy2Cg8PMQg9+6wHSY6qQ3vByGPS3
QJs/XDFw6+wqGJx1yz8eRfZKwjtXa46XGfux4CoyUG5r3Wtzaw/EGkuD6SJQ0JGY
KtAQHlfSDIaacKjdModua/O1wUvPx2tuRjpCkciTB0IDcTulYh5TN3Vx2c+Tn6NZ
e/2ZfTbmsj7DDviyNkXPOJUwrqr5f14ph0Evwt07SXmLx9joZjjLX9wG5ITltidT
3H9I+KbkE/We76luFDez2DWvOjhuGBETHHE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:09 2024 by rpki-client on console-ams.rpki-client.org