Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5ecdf00-75ad-3ac7-8fe0-1f988083b3b7.roa
File:                     b5ecdf00-75ad-3ac7-8fe0-1f988083b3b7.roa (raw, json)
Hash identifier:          AyjBZMWt1Ha7uRgSuwjWVw8k4gf4D9lZbjUzQ93ShMQ=
Subject key identifier:   33:89:B0:9B:27:BF:F2:93:1B:C9:B3:D8:1C:2E:D8:93:7B:55:53:1C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B696C08875D9E59ED37EDBA0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5ecdf00-75ad-3ac7-8fe0-1f988083b3b7.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        2600:140f:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:c0:88:75:d9:e5:9e:d3:7e:db:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=1d994b86-2093-4881-bf27-57465c5d4659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5a:37:f1:73:49:a6:78:78:c0:0d:7a:38:f1:
                    27:e0:62:aa:37:c9:02:80:41:f7:bd:0c:2b:cd:78:
                    89:f8:eb:a1:21:2b:74:40:6c:19:49:c7:9f:88:22:
                    6b:da:5d:54:83:b9:46:b0:a9:b3:09:92:32:8e:c3:
                    29:6a:0a:37:08:78:34:dc:af:d6:a4:d5:90:fb:ec:
                    ee:4e:7c:54:40:04:51:8b:57:32:c5:82:cb:8a:2d:
                    de:a6:e7:bf:3a:70:3c:76:20:e3:2d:07:68:e5:85:
                    15:ac:93:8b:11:fb:fa:4f:00:89:4a:60:6e:2e:5e:
                    49:c8:a2:a2:68:ce:7d:0d:51:c0:ed:1f:79:b3:8b:
                    63:4b:1f:07:6b:3d:6b:36:a4:83:c1:d0:f7:7d:a7:
                    d5:4e:1a:9c:db:2f:cd:e1:02:64:ec:e3:cd:9f:27:
                    6b:1e:05:9a:a0:8f:1e:7a:9b:0b:65:a5:f6:1a:1b:
                    05:4a:27:6c:33:58:e1:2c:ab:33:a2:c1:26:be:53:
                    cd:3b:ec:f7:f8:52:9c:3e:cd:f8:bb:42:d5:7d:47:
                    8f:4d:11:0a:31:d6:d7:24:39:eb:d6:93:09:30:60:
                    a2:0d:46:56:f4:40:24:75:fe:be:70:be:0f:78:d8:
                    b6:ef:72:90:f4:d8:a4:be:c7:40:35:28:1f:18:f4:
                    1e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:89:B0:9B:27:BF:F2:93:1B:C9:B3:D8:1C:2E:D8:93:7B:55:53:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5ecdf00-75ad-3ac7-8fe0-1f988083b3b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:12:40:b0:d1:27:91:9a:a2:9a:59:c0:a0:7d:22:cf:7e:90:
         1d:a4:d0:cb:52:44:cf:5d:f6:0a:14:f5:a9:ae:22:a1:74:f2:
         90:8f:7b:22:ef:8a:50:8d:ab:0f:0b:74:d1:6c:9e:ef:ff:14:
         91:cd:04:31:25:9e:db:35:7e:d6:a6:0f:d3:01:ed:8c:a8:ef:
         87:10:b4:1b:46:49:95:1e:14:f4:41:98:60:9a:ec:34:29:ee:
         35:f1:d9:c8:fc:84:ee:86:65:c8:87:44:14:ff:5e:ce:e2:ec:
         17:0a:5a:46:b5:cc:02:cf:a3:ba:51:f8:8b:c1:79:80:dc:16:
         f5:18:53:a8:7e:21:59:72:83:86:6e:35:a3:d5:1f:58:84:3c:
         98:ec:46:20:9d:25:2b:d1:62:06:14:38:f0:f9:21:0d:2a:6b:
         be:c7:80:62:4f:c6:00:6e:96:6c:17:38:3d:bd:1d:a3:28:bb:
         0f:28:1c:87:23:98:6e:48:8b:f5:1e:6a:92:66:8b:56:f3:b8:
         1f:50:c4:3b:3a:e9:8e:c4:54:73:51:a2:e3:5f:b1:99:a2:fc:
         3d:1f:41:a1:c4:4f:02:28:cb:06:30:70:33:ed:72:9b:ef:17:
         7f:58:5b:1b:76:55:14:84:bb:61:03:58:9a:52:1b:92:ca:f1:
         c5:73:99:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:29 2024 by rpki-client on console-fra.rpki-client.org