Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3910774-06d8-3cc4-b3c4-976fa93bf63f.roa
File:                     a3910774-06d8-3cc4-b3c4-976fa93bf63f.roa (raw, json)
Hash identifier:          lVgFePuLcxEcuffRAgdCSwr+wDSAUd8CecwlCnQUAoY=
Subject key identifier:   9D:2A:1D:58:5F:53:72:4D:C8:6B:E0:91:5D:14:C8:8E:DA:0A:72:A4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452393B057007893FC0F31A640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3910774-06d8-3cc4-b3c4-976fa93bf63f.roa
Signing time:             Fri 08 Mar 2024 11:36:56 +0000
ROA not before:           Fri 08 Mar 2024 11:36:56 +0000
ROA not after:            Thu 06 Jun 2024 10:36:56 +0000
asID:                     20940
IP address blocks:        2600:1402:1c00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:93:b0:57:00:78:93:fc:0f:31:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 11:36:56 2024 GMT
            Not After : Jun  6 10:36:56 2024 GMT
        Subject: CN=7c86ee18-d1dc-4eea-a4f3-85ef40b7116c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d4:25:1b:4e:fe:0c:b8:52:c9:a8:4c:51:4c:
                    0e:5a:d7:f4:a5:d8:d4:d1:09:cc:01:e4:9a:4a:0f:
                    7a:bd:d0:98:4a:bd:d3:09:9c:37:d4:a9:6f:36:a5:
                    56:45:23:2d:43:d9:47:e0:ad:33:06:19:fe:83:aa:
                    2e:3a:13:65:2a:29:f7:d2:57:27:4f:ff:21:cc:c5:
                    b4:28:55:a3:a9:4e:93:08:da:da:e5:9c:22:b3:fe:
                    01:cc:1a:36:c3:e4:07:88:dc:48:c0:e8:ff:be:dd:
                    33:af:94:9d:1a:44:0f:f4:6a:fd:52:ad:e1:35:ed:
                    6a:4c:f0:5b:d5:50:54:4e:32:68:9e:df:96:e0:d5:
                    e4:6d:58:de:81:68:24:22:d2:a5:e0:5f:81:30:cd:
                    ba:42:44:c5:21:b3:69:07:a3:49:f3:01:7e:8c:7b:
                    d8:22:56:35:04:ad:65:bd:4d:f4:8c:12:e4:3f:ee:
                    03:50:59:af:f1:bb:47:a3:af:80:3e:c4:cf:f2:9e:
                    f6:32:a8:5f:01:27:72:63:25:9f:e5:80:56:5d:28:
                    44:b0:53:f9:50:be:57:c3:c8:f2:eb:d5:03:d2:9f:
                    ac:92:c4:5e:57:43:a8:b9:bb:87:8b:ce:07:32:05:
                    9d:5e:ba:5b:06:64:3a:53:42:89:19:67:85:2e:ae:
                    a9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2A:1D:58:5F:53:72:4D:C8:6B:E0:91:5D:14:C8:8E:DA:0A:72:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3910774-06d8-3cc4-b3c4-976fa93bf63f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1402:1c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:31:09:69:5e:1d:06:dc:f6:df:fb:33:bf:5b:1a:af:8d:37:
         13:2c:34:c6:45:db:52:78:b2:39:f1:4a:3f:92:85:85:05:70:
         20:6e:5e:10:56:be:7d:a9:ed:54:de:2b:58:3e:dd:9d:4d:5e:
         0e:8d:d6:6b:9b:51:bf:39:34:da:e3:8b:30:d6:1c:63:c1:a1:
         48:89:f5:79:cf:82:71:7f:94:8d:cd:97:19:25:53:77:81:f6:
         94:76:9d:f9:3f:f5:99:2b:ec:e8:e1:0a:4c:2e:bd:5d:b8:b6:
         bc:7b:0c:2b:e9:23:2e:42:33:7a:e4:4d:79:7d:d3:49:6a:22:
         15:20:eb:2c:20:ee:24:77:79:85:8e:52:fa:0a:ff:5b:9f:8f:
         46:4c:19:44:8f:83:93:53:5f:c3:da:d9:9b:0c:dd:2f:59:86:
         e1:4c:7b:26:15:b8:66:c7:46:74:af:3c:08:27:e3:ae:c9:22:
         ff:0e:5a:36:b4:9c:07:45:ca:70:98:bc:8d:07:75:17:42:37:
         45:58:32:bd:43:bb:bf:8c:b7:5b:a8:dd:27:e5:73:55:68:a5:
         8f:82:db:da:a8:fd:ed:f5:94:a3:81:f0:ac:fa:4d:d6:ad:3e:
         00:3f:dc:8b:b1:31:fd:f6:13:7f:0e:95:c2:9e:c0:63:d8:d2:
         77:a2:3a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:36:34 2024 by rpki-client on console-ams.rpki-client.org