Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9e91f3d-c2eb-3458-a2ab-1bb0c440eae8.roa
File:                     b9e91f3d-c2eb-3458-a2ab-1bb0c440eae8.roa (raw, json)
Hash identifier:          UVaT5GS7kBf6gb40iyNTNyTMpo7OIjk60fcj+kVomG4=
Subject key identifier:   A0:64:73:96:FE:01:54:AF:F1:88:93:A9:06:21:15:BF:46:5A:DD:90
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452C2DB238229C07EF3C8CCAC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9e91f3d-c2eb-3458-a2ab-1bb0c440eae8.roa
Signing time:             Mon 11 Mar 2024 13:33:43 +0000
ROA not before:           Mon 11 Mar 2024 13:33:43 +0000
ROA not after:            Sun 09 Jun 2024 13:33:43 +0000
asID:                     35994
IP address blocks:        2600:141b:a000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:2d:b2:38:22:9c:07:ef:3c:8c:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 11 13:33:43 2024 GMT
            Not After : Jun  9 13:33:43 2024 GMT
        Subject: CN=96a573dc-fa4f-4de4-9171-2af8ff3dffe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:99:7d:f5:06:39:be:57:cc:4b:00:aa:2b:69:
                    15:ec:97:11:66:67:32:da:ac:d7:2f:33:98:0c:b0:
                    ea:07:58:14:57:c2:ef:75:aa:e0:54:7f:41:10:a7:
                    43:44:61:86:47:54:53:bc:9b:58:d0:f6:a5:2c:d8:
                    29:69:ae:82:ea:6c:b3:c7:6b:58:5f:f7:dc:e1:09:
                    3f:97:ef:76:38:e1:ed:66:21:f0:cd:50:3e:e7:18:
                    9a:0b:76:96:9c:0b:82:17:7e:76:fd:07:e3:8d:b2:
                    0f:74:47:20:ff:b1:1e:64:a0:96:98:2b:41:91:20:
                    42:28:25:7f:49:e5:66:fb:97:4a:96:52:fe:68:ee:
                    27:77:55:d6:03:66:6c:cb:8d:de:8a:e1:ab:3e:8e:
                    4e:63:3b:91:15:a3:56:ab:1b:da:db:1e:75:04:9b:
                    61:f1:3b:29:38:df:42:c1:0a:34:e6:a5:05:9b:57:
                    d1:17:5d:7d:fa:41:55:f6:27:f4:77:9f:71:2f:f3:
                    3e:a2:5f:66:7c:fc:54:1d:1a:57:67:2d:b7:6e:ab:
                    91:1a:c3:98:b1:e7:68:36:4e:48:39:d3:9d:19:0a:
                    9d:b6:5a:bd:78:1a:3f:68:a4:ea:4e:bb:b6:6f:80:
                    d9:4c:2f:da:c7:f7:02:e8:aa:f4:5b:51:54:e2:5b:
                    2a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:64:73:96:FE:01:54:AF:F1:88:93:A9:06:21:15:BF:46:5A:DD:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9e91f3d-c2eb-3458-a2ab-1bb0c440eae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141b:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:56:19:64:fd:6a:cf:67:68:f8:98:1c:ae:fa:79:56:5e:47:
         58:22:c5:21:a8:bb:69:97:9a:28:57:28:fa:60:56:cd:fa:5b:
         9e:1f:6a:92:eb:8c:c5:07:31:8a:29:c2:5c:07:10:5d:2c:24:
         1d:1e:e2:72:6f:e9:92:79:68:2b:31:a1:fb:b1:25:b4:f6:68:
         06:98:f9:b6:fa:78:01:4d:07:28:14:94:c6:4c:3d:b2:cb:70:
         2f:23:96:37:8f:96:64:8d:f7:04:04:5f:ec:c5:8f:87:5f:aa:
         35:40:88:53:e7:a4:c3:99:22:f9:4c:d1:eb:a3:90:4d:74:49:
         fc:76:b8:7e:c9:9c:a6:cb:33:db:3d:06:78:13:75:aa:dc:9f:
         6d:04:22:c6:e3:00:01:bc:15:e4:52:9e:96:77:20:64:d6:bd:
         d4:ac:c6:37:50:62:8e:4b:ee:c6:5f:7e:95:ea:9b:83:c1:95:
         56:fb:35:b7:62:d7:99:27:f3:ca:28:34:9d:4e:44:f6:42:09:
         6f:9e:35:a8:76:9e:a7:0f:4f:47:ad:0e:9f:75:45:7f:80:88:
         a4:2e:b7:30:4e:59:01:24:07:7a:42:a2:05:2a:f9:78:0c:67:
         fa:04:ac:3e:3a:81:bd:3f:30:4d:3f:b5:fa:4e:18:6a:e1:79:
         03:eb:52:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 23:13:10 2024 by rpki-client on console-ams.rpki-client.org