Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b22684bd-dab2-39b9-8504-2bda510d2430.roa
File:                     b22684bd-dab2-39b9-8504-2bda510d2430.roa (raw, json)
Hash identifier:          otqbMMPlvj+JDhAyFmAlZEXxhoK6BOAB6Z0c40wFxu0=
Subject key identifier:   71:E1:9D:44:D2:15:37:86:57:94:60:B1:0D:47:AF:DE:74:C4:03:4F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858450FF673D9EE5D106D56707F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b22684bd-dab2-39b9-8504-2bda510d2430.roa
Signing time:             Fri 01 Mar 2024 10:59:46 +0000
ROA not before:           Fri 01 Mar 2024 10:59:46 +0000
ROA not after:            Thu 30 May 2024 09:59:46 +0000
asID:                     20940
IP address blocks:        2600:140a:a000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0f:f6:73:d9:ee:5d:10:6d:56:70:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  1 10:59:46 2024 GMT
            Not After : May 30 09:59:46 2024 GMT
        Subject: CN=8bb5ae56-98eb-4744-b75f-e2e2f0698194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9a:9b:1f:a4:e3:93:11:28:8b:18:9d:1b:d2:
                    42:53:60:9c:34:e7:16:1d:6c:98:3d:6c:36:5a:3f:
                    c6:43:95:3e:c6:a5:9f:6c:1b:eb:cb:b4:86:d2:52:
                    63:cf:43:2f:eb:b9:cf:a7:bf:d9:92:b8:0d:15:cd:
                    96:6f:8c:4a:8d:45:21:79:10:39:8c:2b:bc:b3:ed:
                    bd:ca:70:96:b0:13:78:16:ba:a8:fa:36:62:ef:7d:
                    07:b6:b0:e1:a5:cc:ef:30:bb:d3:d0:48:d6:0e:ce:
                    46:23:49:7c:0a:08:9f:6a:33:34:c6:53:a8:b6:e9:
                    0f:1c:63:94:50:27:bd:6d:5f:e3:b2:11:a4:c4:59:
                    e8:0f:08:09:8a:90:87:28:65:0d:ba:fb:5e:c1:52:
                    c8:6a:a4:d3:b1:35:2b:94:93:85:5c:c4:0c:7c:aa:
                    0f:13:84:c4:ea:19:15:c7:8c:02:2d:c8:fc:e0:9e:
                    2c:94:25:a6:52:35:21:dc:d9:ce:e2:92:6f:8f:a7:
                    ce:77:97:ea:29:6f:09:31:55:de:1b:bf:84:a9:a2:
                    37:43:87:f4:f5:86:21:33:1f:70:72:44:bd:e4:a3:
                    e0:94:d2:a2:6d:2e:07:3b:bc:a2:87:94:bb:0b:e0:
                    76:92:86:8b:f7:b1:1c:6e:a1:1a:8c:08:87:f5:f9:
                    88:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E1:9D:44:D2:15:37:86:57:94:60:B1:0D:47:AF:DE:74:C4:03:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b22684bd-dab2-39b9-8504-2bda510d2430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140a:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:f6:55:50:8c:2c:bd:eb:e9:56:e2:dd:1e:4e:e4:89:5c:80:
         be:8d:bf:aa:21:d5:da:4b:fc:1c:c5:4f:67:a6:f8:68:99:45:
         9d:ae:50:b1:bd:f2:8d:9f:89:1e:77:c2:73:0d:54:18:d2:cb:
         8f:85:76:da:09:92:c3:56:f2:ef:73:25:25:b8:4e:97:74:7c:
         56:6e:e9:17:d4:31:33:7e:d0:75:17:31:59:64:cd:c6:39:48:
         88:b7:a5:67:ea:cb:3f:75:f1:dd:61:ba:79:63:9d:69:97:c8:
         ba:cb:4d:e1:db:e7:6f:d1:8d:99:e4:e6:7d:d4:10:b3:c7:d8:
         9c:7a:7b:3a:76:8d:9c:ba:4a:27:4c:29:57:ed:45:4e:88:1a:
         f8:7b:e2:f9:93:72:e7:29:87:d5:96:41:eb:09:a2:df:4a:2e:
         55:7a:02:2e:8c:ea:89:a1:bf:35:86:9e:de:fb:ed:b2:a4:df:
         2e:e0:e9:9f:b2:06:f1:3e:f1:49:14:3c:5a:bd:5f:0c:f8:41:
         3d:16:ea:ff:81:a9:a4:b3:69:95:1e:f1:5d:bf:df:69:8e:7e:
         72:8a:06:e7:10:ef:78:14:35:9b:47:69:a2:10:fc:8a:ea:74:
         dd:9d:28:ec:61:b6:25:ec:e4:ba:44:06:02:b1:2c:b7:0a:4f:
         71:c0:5e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:36:35 2024 by rpki-client on console-ams.rpki-client.org