Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af9cdc19-56ae-3864-b75c-16f6fc87d937.roa
File:                     af9cdc19-56ae-3864-b75c-16f6fc87d937.roa (raw, json)
Hash identifier:          P9/cvsjgxDpxSgcn80gm0/r18iQsB4pmvzFQF+jTOG4=
Subject key identifier:   D5:C7:E7:8F:47:FD:45:E6:E5:A6:C0:77:78:FC:29:61:C2:3C:90:C4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847CE6F45A5DB8AB6265936BA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af9cdc19-56ae-3864-b75c-16f6fc87d937.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     24319
IP address blocks:        2600:1417:33::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:45:a5:db:8a:b6:26:59:36:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=47c60945-9b3d-4716-aa64-d82c7482735f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ff:b0:0d:d7:51:61:01:70:9d:4d:06:d2:a2:
                    de:2b:37:98:ab:94:1b:e6:10:65:b5:fd:e6:e9:d6:
                    8b:d0:25:b1:1a:42:8c:f1:d0:8f:ac:04:2a:db:de:
                    34:3b:96:65:d4:f8:3e:d7:b3:24:e4:00:3c:7a:b9:
                    72:a9:e4:02:74:ab:9c:f9:32:d3:84:15:bd:c1:c2:
                    62:ad:7f:a1:71:c9:38:17:be:06:95:ae:e2:65:0e:
                    22:48:9c:37:5a:6e:97:a8:4a:46:2a:cb:32:1d:c0:
                    3e:57:fb:aa:0c:96:b0:a4:1e:80:96:c0:a5:76:78:
                    93:95:e1:60:be:48:79:13:6e:8c:c6:a6:10:7e:90:
                    9a:88:93:9f:db:8f:fa:19:b0:b4:30:1c:3b:9c:e7:
                    ca:f0:d9:3a:36:6d:59:f8:4b:05:83:ba:57:7a:30:
                    95:e8:68:b1:91:0f:ba:7c:36:7d:30:ce:9c:80:44:
                    fc:5d:41:78:91:10:32:6d:b6:b5:8d:54:5c:4f:06:
                    29:5f:33:33:97:c0:ee:07:e2:c8:c8:57:b1:92:37:
                    b6:a8:87:5d:7b:04:f8:29:7d:57:89:bc:1b:71:4e:
                    8d:cd:bd:f6:7c:dd:72:99:1c:a7:0c:cc:9a:a8:80:
                    93:04:7a:bc:a7:78:1c:67:91:ac:47:a2:e9:c6:81:
                    f6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C7:E7:8F:47:FD:45:E6:E5:A6:C0:77:78:FC:29:61:C2:3C:90:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af9cdc19-56ae-3864-b75c-16f6fc87d937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:33::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:86:2e:74:21:ee:6c:0d:87:6d:ad:b2:7b:5b:a8:23:1b:44:
         a1:ab:f0:ff:56:36:f9:b3:b7:e9:b4:c2:1e:51:51:cd:ce:1a:
         66:78:58:59:5d:43:e2:75:28:03:d0:1c:e9:76:61:56:6f:e4:
         55:83:5a:99:78:6d:0a:e4:2d:08:1c:cd:40:42:86:95:b6:3d:
         49:7a:4f:c3:61:a9:49:d8:82:b3:8b:d9:d1:61:a6:f1:ba:e9:
         f5:2a:e0:3e:a5:58:9e:e1:11:56:a2:a7:71:f2:4c:1e:09:ce:
         7c:42:d9:9a:6b:41:d7:54:e2:9f:c1:8b:f7:22:66:73:f2:0f:
         27:21:bf:9f:87:4e:7e:ce:5a:38:c6:bd:f3:e9:ea:26:29:f6:
         64:41:5c:6c:84:dd:49:a5:35:b4:70:51:ef:21:c0:4b:a8:b5:
         48:d8:40:7b:c4:e7:3a:03:2a:4a:89:8f:a4:66:6f:8d:f8:b3:
         1e:da:04:5e:04:38:a5:3d:1d:56:3a:72:f8:5b:0b:dd:a6:b0:
         e9:b9:56:53:3c:81:95:72:00:75:c1:5d:af:9f:b2:9f:16:ad:
         16:18:68:61:fa:15:db:76:79:f5:62:aa:75:af:69:b4:66:8b:
         08:f5:07:88:0a:8b:aa:96:85:6e:8c:47:fe:21:e3:06:e1:58:
         3f:1f:9e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:25:02 2024 by rpki-client on console-ams.rpki-client.org