Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae290034-ca5f-35e8-93ce-18407f143586.roa
File:                     ae290034-ca5f-35e8-93ce-18407f143586.roa (raw, json)
Hash identifier:          dE499P4C12ErXBnhm7ZcM03mccwwAN9lg4sKaaWO0RI=
Subject key identifier:   D8:2B:16:73:FA:05:BC:67:23:2D:07:94:33:66:34:AE:55:B3:9E:53
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858451844BC95D925233B40B9D740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae290034-ca5f-35e8-93ce-18407f143586.roa
Signing time:             Mon 04 Mar 2024 10:23:58 +0000
ROA not before:           Mon 04 Mar 2024 10:23:58 +0000
ROA not after:            Sun 02 Jun 2024 09:23:58 +0000
asID:                     20940
IP address blocks:        2600:140b:b000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:18:44:bc:95:d9:25:23:3b:40:b9:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  4 10:23:58 2024 GMT
            Not After : Jun  2 09:23:58 2024 GMT
        Subject: CN=c585c35d-069d-4ce0-b03f-a3fb9932b350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:82:cf:a0:99:25:39:5f:4a:1f:8a:e4:8a:3e:
                    f2:ae:02:db:a7:e3:89:62:72:2b:d0:4e:2c:a9:98:
                    0a:2b:32:b1:04:4e:81:2e:13:19:f3:2f:e3:87:39:
                    e7:2b:44:dc:1a:ea:71:a5:52:4a:8b:11:4e:9d:b5:
                    73:8a:fe:15:a4:ce:88:40:fe:a8:82:6c:2e:d5:55:
                    2b:29:2a:6c:96:8a:6d:01:7f:46:a8:39:e0:f6:e4:
                    08:5b:28:a7:03:a5:d1:b1:e8:f9:96:4a:a4:50:5f:
                    ba:bc:0c:f2:fb:32:f2:f2:89:ff:aa:d8:db:b9:0c:
                    36:98:db:c6:92:da:03:91:34:f3:88:9f:7a:08:1a:
                    2d:73:7a:43:db:5a:20:a2:1e:12:21:44:14:a9:48:
                    90:62:37:2c:1a:41:55:df:23:b4:fa:8c:07:5b:e9:
                    35:5a:76:36:c1:0c:7a:f4:be:49:67:9a:2e:7f:41:
                    58:a2:fd:4e:e1:1f:74:56:24:6a:ff:3d:70:55:64:
                    4f:fa:11:22:94:2a:ec:a3:0e:33:51:de:aa:91:41:
                    bc:b9:f2:7b:fc:05:42:f8:9f:38:e3:2a:91:b1:a9:
                    48:bc:69:20:32:96:ea:1b:3c:26:83:7d:33:04:fd:
                    4f:a4:0a:b2:f5:62:ca:32:1a:79:9e:60:72:fe:bf:
                    82:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2B:16:73:FA:05:BC:67:23:2D:07:94:33:66:34:AE:55:B3:9E:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae290034-ca5f-35e8-93ce-18407f143586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:b000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:49:f3:e5:6a:9b:5b:86:aa:af:88:35:61:af:78:03:46:c0:
         d3:75:ef:a5:ab:7d:55:c9:01:c0:1c:80:bb:fd:9a:f0:19:cb:
         a1:73:2d:d5:f1:a8:63:5a:f3:67:bf:3d:39:2a:b8:e4:3b:22:
         53:b4:6d:83:d1:df:b1:09:cd:de:6a:5c:fc:ca:34:60:a7:f1:
         be:8c:0e:33:2b:de:f1:53:88:f3:dd:00:ef:e3:3a:6c:47:f6:
         da:aa:f8:1f:91:01:6f:41:1f:05:b4:a5:61:ac:6a:41:69:89:
         ff:58:59:8d:e8:96:02:2e:e4:ea:82:f1:e4:e7:2f:a3:46:7e:
         41:b3:ed:14:51:46:61:e1:cf:e4:0e:42:2e:37:b7:9b:4b:31:
         ef:4a:3e:5c:7d:48:61:78:3a:2a:a8:9f:22:bf:69:6f:f1:47:
         5b:3d:04:cd:a4:77:86:a6:a6:c7:ea:62:28:db:5e:fb:48:d3:
         23:b8:64:99:c3:0c:d0:52:f4:f8:42:34:3a:51:b7:c2:e6:e5:
         5f:11:bb:74:29:14:e8:18:80:1e:c8:94:c2:12:7f:1a:f9:37:
         e5:9d:ba:38:8e:16:a0:a0:43:f2:b2:e8:e4:f6:c5:44:26:ec:
         40:44:95:ac:d3:be:fc:20:0c:80:24:c6:ca:7e:3f:60:f0:ed:
         ba:bb:9e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:16:52 2024 by rpki-client on console-fra.rpki-client.org