Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a54dad5d-42c0-379e-87a2-bf06f3eb7413.roa
File:                     a54dad5d-42c0-379e-87a2-bf06f3eb7413.roa (raw, json)
Hash identifier:          XGKjR2W8UitUYPhhv1hguC7LD5aytlQulvmY4HugB7Q=
Subject key identifier:   43:1F:78:EA:AB:72:83:D9:96:0F:1C:26:85:3B:17:F8:CF:87:41:88
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C1DF696B639FB7744CD0B900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a54dad5d-42c0-379e-87a2-bf06f3eb7413.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     20940
IP address blocks:        2600:141c:1800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:69:6b:63:9f:b7:74:4c:d0:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=978a3566-f9e4-4644-b9f2-7b60cc86fe9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:db:b4:b4:ad:12:1c:d0:48:58:ec:86:57:db:
                    0d:3f:c0:82:5a:2f:33:c8:67:8d:40:fa:0c:7c:93:
                    ac:5e:b3:d0:8f:65:ed:96:c7:f6:38:31:95:16:50:
                    77:c1:ba:63:77:6d:83:d3:db:6e:d5:ba:af:1e:a6:
                    02:5c:ab:19:1e:47:78:17:ed:53:dc:eb:69:15:d4:
                    f8:14:d1:ad:8a:fb:c8:1f:f7:c9:98:4b:cc:45:bc:
                    f0:13:08:3b:e9:3d:d0:9c:d8:a0:b8:26:d9:f6:1a:
                    f5:f8:07:99:26:1a:25:22:07:c2:d8:3a:5f:cc:34:
                    af:95:39:e8:68:17:f4:92:57:b6:39:e2:13:cd:55:
                    19:80:77:ae:eb:43:d8:2b:93:ce:7d:6b:f4:31:4e:
                    ae:7d:c2:bf:c6:38:c2:42:03:59:7f:13:a6:97:80:
                    df:9c:f6:9f:34:df:50:9f:2d:25:d3:0a:70:ad:62:
                    84:de:ab:83:45:fc:90:e5:3a:25:0a:05:f7:a3:b9:
                    12:8f:96:38:be:b5:38:61:56:2f:83:3e:8c:49:8e:
                    03:c2:61:78:fa:7c:18:55:28:54:15:7e:26:f7:d1:
                    da:88:fd:b9:5b:36:5f:5b:81:1c:87:ed:cd:fe:52:
                    86:a4:72:3e:21:d2:7e:1b:b1:25:a2:eb:d8:96:66:
                    b7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1F:78:EA:AB:72:83:D9:96:0F:1C:26:85:3B:17:F8:CF:87:41:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a54dad5d-42c0-379e-87a2-bf06f3eb7413.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141c:1800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:aa:1a:c4:b0:ae:53:28:37:11:c8:ca:38:c2:cd:81:95:36:
         09:5f:50:23:6d:d2:94:c5:f2:a2:4b:7b:e5:c9:ed:72:f2:f3:
         56:fb:0f:df:1b:16:6e:f7:42:fd:44:32:81:63:84:b6:32:cf:
         bb:5d:f8:2a:9f:04:e8:20:4e:c2:f6:ae:0a:17:98:52:16:9d:
         e0:d3:a2:8a:b8:b3:2c:7a:d1:6c:b4:be:bb:99:a3:81:0b:90:
         6a:e5:a1:cb:fe:45:30:c0:1b:67:8b:f0:e0:11:52:c5:11:7f:
         73:71:07:8b:f7:21:d0:ee:05:bc:c1:e3:21:3b:4c:5b:c5:25:
         5a:a6:25:47:50:2e:21:db:52:ea:67:c9:dc:e1:87:e8:3b:81:
         76:90:dd:10:3e:77:40:ec:66:b9:ae:92:ee:c7:25:ea:5c:51:
         fb:e7:b5:af:76:b3:d8:a4:99:16:9f:e1:b1:38:81:ed:5d:54:
         29:eb:14:6b:8e:dd:72:53:a0:f7:4b:07:94:f7:fe:52:ea:db:
         ac:48:2d:e6:3a:f2:62:5f:92:1c:d5:16:62:42:32:c5:a5:f9:
         5d:30:be:75:09:4a:c3:ee:a0:ba:44:0c:98:48:e9:3a:62:f8:
         54:b5:55:8d:86:e8:ab:72:cb:fa:72:8a:93:38:ed:f4:34:86:
         8c:47:9a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:11 2024 by rpki-client on console-ams.rpki-client.org