Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b6c86116-ab8c-3a8f-88d4-d061f726cf8e.roa
File:                     b6c86116-ab8c-3a8f-88d4-d061f726cf8e.roa (raw, json)
Hash identifier:          NgQOZ1YWPckEg31IU197/mGgirs4/jK/uE4K/6ejKkQ=
Subject key identifier:   88:71:5A:12:0D:D7:7E:37:93:52:B6:B3:4A:9F:A4:64:07:34:58:BB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473A5B2F07247E3FE3965D0540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b6c86116-ab8c-3a8f-88d4-d061f726cf8e.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     63949
IP address blocks:        2600:3c12:500::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:2f:07:24:7e:3f:e3:96:5d:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=4fb58ae9-86cd-4d8e-b0a2-38326c5f74a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:52:75:57:9b:38:b4:e1:c9:72:47:be:ac:34:
                    6d:bc:6c:3b:ac:24:d0:d1:a0:4a:1b:e4:db:15:f1:
                    f4:e0:39:7c:03:8c:a0:4e:1e:e2:02:a3:89:e1:67:
                    30:0b:6a:49:a3:d2:02:32:d2:de:1e:35:10:f6:f7:
                    19:a1:3b:7f:bb:16:23:0e:30:63:27:20:97:58:93:
                    c3:73:78:5b:d9:ab:a8:d9:1c:4d:2b:90:61:7c:d6:
                    80:a0:17:d6:68:95:5f:0c:4f:2a:f3:14:38:e6:0a:
                    61:d6:36:d0:30:e3:74:02:8d:40:63:16:df:4d:dc:
                    ca:fc:70:41:da:9c:9f:43:c5:6c:fe:ea:34:b6:3f:
                    d7:6e:67:e4:62:01:f7:a3:64:58:86:11:00:53:05:
                    96:b5:93:68:34:fc:b6:8b:a4:86:4b:32:ff:cd:16:
                    48:28:94:11:90:77:36:d0:5a:2e:69:f1:98:c7:83:
                    c2:5b:cc:97:f3:e7:4e:04:dd:a9:ca:cd:70:b0:f0:
                    78:ff:65:1b:d1:69:c0:58:62:1b:d0:cb:2a:b6:38:
                    f7:92:13:24:33:cf:21:6a:e4:07:4f:4b:8d:3f:db:
                    26:c5:6a:a0:ff:10:19:f1:59:fb:a9:0b:dd:22:ad:
                    31:a9:32:df:07:60:81:92:1d:5b:0e:56:58:6d:de:
                    30:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:71:5A:12:0D:D7:7E:37:93:52:B6:B3:4A:9F:A4:64:07:34:58:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b6c86116-ab8c-3a8f-88d4-d061f726cf8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3c12:500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:8e:4d:65:f9:da:5b:a2:07:f5:09:ac:c9:7f:61:47:0d:04:
         3c:56:dd:ed:ba:a5:a7:1b:58:c7:27:39:b8:6c:87:08:1c:88:
         d4:57:3c:0f:26:96:65:0e:68:a9:1d:b2:c1:51:f1:0c:05:a2:
         a6:ae:0b:b1:5b:0c:fe:f2:34:e0:ce:2e:e2:70:78:24:4f:32:
         22:4e:2c:29:9a:36:63:ff:6c:ca:22:0d:58:9c:0b:f6:cc:11:
         98:2a:cc:14:07:ff:cb:10:f6:1f:87:f5:2c:30:cd:99:d1:a0:
         18:e8:d3:53:6c:4a:ee:b4:44:a4:9c:f0:38:62:02:31:5e:bb:
         97:c1:54:3c:42:3a:ec:b4:f8:d2:33:b9:a7:40:00:b8:12:90:
         47:3f:49:79:bc:be:80:17:bf:e6:10:54:da:a5:5f:46:97:72:
         f1:8f:ca:0a:01:2a:71:e9:c1:31:ae:97:fd:7b:f8:9f:ae:08:
         6f:24:0c:3b:7c:b1:05:98:73:01:70:1c:fc:ef:5a:68:85:79:
         0b:97:1a:61:91:f9:fc:c8:cf:42:cd:b5:e1:21:62:41:d7:38:
         18:70:0b:e7:c4:26:f4:7e:4b:f0:5e:7a:61:c0:c0:bf:41:9a:
         2b:0d:76:b5:a4:6f:9e:16:8f:b5:34:2c:2a:31:52:19:e2:bc:
         27:64:0c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:30:24 2024 by rpki-client on console-fra.rpki-client.org