Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a745147b-2fce-3e31-bc5f-7984e9e99e6a.roa
File:                     a745147b-2fce-3e31-bc5f-7984e9e99e6a.roa (raw, json)
Hash identifier:          0tIuBtxmN4g7KFHf8N3od05bdhsyWvWqtB11NhKB08E=
Subject key identifier:   AF:B9:AF:9A:13:89:18:DF:A8:11:4F:91:9C:69:11:85:89:F8:0D:EC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858457FB8410219A94CE27FC51C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a745147b-2fce-3e31-bc5f-7984e9e99e6a.roa
Signing time:             Wed 10 Apr 2024 11:44:59 +0000
ROA not before:           Wed 10 Apr 2024 11:44:59 +0000
ROA not after:            Tue 09 Jul 2024 11:44:59 +0000
asID:                     20940
IP address blocks:        2600:1417:5c00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:b8:41:02:19:a9:4c:e2:7f:c5:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 10 11:44:59 2024 GMT
            Not After : Jul  9 11:44:59 2024 GMT
        Subject: CN=155a0fd3-7083-4f67-ad3f-85e71a916843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:19:a9:93:8a:9b:73:c5:2c:9a:8c:74:a5:34:
                    e1:fc:ca:ee:11:f2:01:6b:55:10:4a:5b:da:a4:a2:
                    04:4b:b3:3e:33:b2:ae:63:f1:d6:0e:19:54:2e:b7:
                    d8:e3:99:7e:e9:88:e3:91:3e:45:11:c7:75:21:2a:
                    f4:5d:c4:48:46:55:96:d4:b8:5f:d2:bc:d8:10:de:
                    db:bf:f2:52:ae:a6:7f:87:9d:05:12:e7:eb:60:95:
                    01:22:10:99:b0:a5:21:e9:cf:0c:1f:9c:ef:e4:14:
                    e4:52:bf:45:e4:46:db:1e:e5:6e:a4:52:1d:6a:e7:
                    6b:7d:d1:21:6b:09:ec:90:25:cc:88:49:1d:66:01:
                    11:e4:a3:7d:cc:ef:3f:1e:01:f0:55:be:87:40:64:
                    04:ff:c1:d2:c7:14:99:00:90:eb:71:1a:95:02:fc:
                    7c:5d:b6:97:71:5b:73:8a:48:44:bb:6d:16:93:f9:
                    d4:06:e3:f5:09:d6:e7:fe:22:16:7d:05:93:6b:30:
                    b7:35:49:37:b9:e2:99:db:0d:ef:9b:e5:38:b4:de:
                    76:cc:35:90:6d:f2:60:82:fb:b8:b0:ed:50:e6:ee:
                    1f:cf:28:c4:cc:0e:b0:d1:9f:40:0e:cb:d1:e7:3c:
                    41:78:6c:59:fc:c7:f7:5d:89:7e:d8:99:04:3a:ab:
                    3a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B9:AF:9A:13:89:18:DF:A8:11:4F:91:9C:69:11:85:89:F8:0D:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a745147b-2fce-3e31-bc5f-7984e9e99e6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:5c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:a7:ab:42:f7:98:f3:b8:14:7e:20:76:f0:b6:f8:4d:08:c4:
         65:d7:51:13:7e:68:07:89:c3:03:e2:82:ba:75:70:ab:fd:55:
         7b:d1:4f:b0:87:6b:a3:b8:da:c1:08:8b:95:a1:ed:68:5b:6b:
         fd:02:26:80:08:d8:96:5b:73:29:06:d6:51:0b:16:bc:07:e1:
         0f:56:bd:74:ac:50:f9:0c:44:6b:7e:57:c1:02:85:b9:65:2e:
         8e:05:9a:a9:3a:ed:c3:3a:a5:d9:91:e6:91:b3:b2:97:52:74:
         8a:87:73:8d:23:ae:50:53:92:79:09:2a:a6:ca:9c:e5:77:00:
         dd:38:b6:bf:39:39:47:a4:e8:9f:24:5f:61:90:ae:90:1b:cf:
         1c:98:11:9c:66:8e:05:99:3c:0c:2f:fe:1b:f4:70:a3:09:28:
         3b:ed:5a:b7:b6:6d:01:74:dd:c1:87:e9:63:82:56:f3:0f:11:
         48:a9:4d:ee:f1:51:da:08:97:79:09:ca:38:af:48:05:33:0d:
         ca:64:2b:a9:bf:67:da:7b:0f:4d:32:61:77:24:e1:75:e1:dd:
         2a:52:67:2b:4f:bb:c9:a7:69:76:92:a8:7b:a5:80:ee:c4:de:
         7d:36:50:d6:40:59:89:6e:60:2e:cf:5b:74:0c:d4:a7:dd:ea:
         0e:a4:22:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:59 2024 by rpki-client on console-fra.rpki-client.org