Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3db1f69-13f3-3dd2-bceb-8dd018d7ee96.roa
File:                     b3db1f69-13f3-3dd2-bceb-8dd018d7ee96.roa (raw, json)
Hash identifier:          S79auLPwFSj2eagWaSvaH8E/+73WlxDUoPh+MG7PTM8=
Subject key identifier:   AF:95:B1:7B:62:32:D3:A8:B9:E5:5D:37:EE:23:18:92:5D:82:47:2E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858472C65CE53C369C542414FB400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3db1f69-13f3-3dd2-bceb-8dd018d7ee96.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     21342
IP address blocks:        2600:1480:e800::/48 maxlen: 48
                          2600:1480:f000::/48 maxlen: 48
                          2600:14c0::/48 maxlen: 48
                          2600:14c0:1::/48 maxlen: 48
                          2600:14c0:2::/48 maxlen: 48
                          2600:14c0:3::/48 maxlen: 48
                          2600:14c0:6::/48 maxlen: 48
                          2600:14c0:7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:ce:53:c3:69:c5:42:41:4f:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=b5c5476a-c52c-40a6-aee4-59d528e4961f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a5:1d:4d:c2:96:8e:d0:de:87:80:79:71:75:
                    19:82:fc:27:51:7b:6c:7b:35:0e:4a:51:67:40:a3:
                    f9:81:fc:f0:7f:3d:0b:a6:80:68:45:e1:56:5a:dc:
                    de:ad:d1:ef:dd:9a:19:0c:f8:a8:5a:97:59:45:bd:
                    61:d4:86:a9:38:65:ae:e7:14:04:44:ce:2a:98:65:
                    26:4b:72:cc:22:4b:d6:5b:26:77:77:5a:bd:83:71:
                    73:68:c8:e0:76:38:b9:dc:47:ef:15:3d:ec:f6:65:
                    a8:60:9a:53:b5:56:a1:ae:c7:a0:1e:96:82:d1:72:
                    a2:d4:86:54:67:5d:f6:ea:04:46:1f:c3:69:8e:39:
                    3f:c0:4f:6f:63:20:19:31:bf:fe:9f:0e:71:c2:36:
                    a2:b4:4b:88:54:7b:d5:00:67:a9:d6:e6:69:e0:cf:
                    da:b9:5d:df:aa:3b:71:d4:e3:f5:2f:91:41:ca:21:
                    ea:ae:91:68:4d:00:7c:4f:68:df:9a:3d:3b:5e:97:
                    99:b7:7b:2d:cc:b5:73:14:56:58:50:f4:80:8a:11:
                    75:01:a7:5e:53:e4:95:98:37:5f:26:fb:bb:2d:f0:
                    e2:75:5a:8f:9d:86:99:89:cb:61:6f:84:87:42:86:
                    ce:91:14:f2:0a:15:9b:0d:ae:f1:57:f3:ff:8b:44:
                    72:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:95:B1:7B:62:32:D3:A8:B9:E5:5D:37:EE:23:18:92:5D:82:47:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3db1f69-13f3-3dd2-bceb-8dd018d7ee96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1480:e800::/48
                  2600:1480:f000::/48
                  2600:14c0::/46
                  2600:14c0:6::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:71:97:82:9e:59:ca:5e:52:a9:8b:3e:16:26:b0:e8:00:d1:
         58:04:40:48:39:4c:9b:4f:80:7c:06:2f:66:0a:fe:33:f7:ce:
         a3:2f:33:39:15:d2:f2:7a:e2:c3:41:e0:f0:94:e3:25:2e:83:
         d3:34:84:c9:ed:4d:63:bc:cf:5b:c7:8d:63:6b:a8:0c:80:96:
         46:24:2b:b0:ed:3c:17:d8:6e:eb:74:5d:40:b0:1b:15:ee:7f:
         22:be:f7:41:a7:48:a2:ff:2a:88:c2:73:a3:4e:b2:26:96:cf:
         cc:ba:70:05:64:10:4f:20:11:de:72:fb:47:f7:8e:ae:d1:6e:
         e9:55:47:2c:46:c2:73:a9:df:4b:15:e9:c8:ce:f0:4f:c2:29:
         a1:4f:2f:f3:e9:8e:da:11:41:b9:7b:0e:82:26:6b:77:34:cb:
         d5:3f:ad:f0:de:3f:e0:62:d4:51:ab:bd:a9:99:6b:ad:b1:09:
         f1:b7:96:a8:94:70:fb:19:5d:5f:1b:d8:45:99:6b:8f:a9:48:
         18:99:2f:da:80:05:59:ff:98:73:3b:a4:05:cc:f2:da:ee:d2:
         14:dc:38:6b:53:7f:12:e5:07:e3:07:a1:76:42:c5:db:21:52:
         42:8d:15:b3:ba:f1:1d:a1:34:50:3a:52:c8:7f:73:84:d1:46:
         a1:4b:99:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:44:32 2024 by rpki-client on console-ams.rpki-client.org