Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd8e476c-36bf-3de7-8cef-98a53d8ece9b.roa
File:                     bd8e476c-36bf-3de7-8cef-98a53d8ece9b.roa (raw, json)
Hash identifier:          kqIo5RzMUZ5BqMMWFNHyiBV8eH+jAdpkIBx354Df0dc=
Subject key identifier:   E9:94:15:8A:A6:F3:F2:A2:83:C1:2D:36:EE:CA:EA:92:2F:A3:8E:72
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C1DF68A2C903DD9CBDBDA240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd8e476c-36bf-3de7-8cef-98a53d8ece9b.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     20940
IP address blocks:        2600:1419:8200::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:68:a2:c9:03:dd:9c:bd:bd:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=f6a2f28b-bef7-4454-8e19-edde0aa48715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ad:79:85:bd:b3:4d:2f:ac:bd:a8:07:7f:65:
                    2e:55:b1:d5:01:f4:99:e3:4d:6c:2a:b8:15:8c:24:
                    ff:82:64:dd:c8:f2:ac:2f:0a:c2:32:88:c5:be:29:
                    81:d9:d7:07:7b:52:7f:85:cd:41:28:99:c4:5c:73:
                    65:63:5a:6b:d9:56:09:1a:dd:b9:20:67:29:17:c2:
                    07:85:d0:3c:1d:aa:fd:24:78:7a:1c:06:46:f8:68:
                    15:8a:6b:75:1c:7b:ba:29:7f:6e:5a:79:a3:24:47:
                    75:56:3d:25:b2:e9:6f:2f:9c:2c:01:79:46:9e:30:
                    43:a0:c5:a9:a8:b7:a7:b4:17:88:42:b0:4f:b9:70:
                    03:fb:06:ac:b9:ab:8b:55:83:f0:1a:77:d4:36:07:
                    68:e3:5d:b6:fb:ec:ec:7e:0c:dd:83:a7:25:1a:0e:
                    7c:31:8c:8f:d1:c1:ac:d2:cf:66:f8:e8:1e:38:54:
                    c5:d1:2a:b1:62:09:8f:07:d4:48:b5:8f:ed:40:47:
                    6e:64:90:6f:87:05:5d:4d:58:de:00:d5:89:cd:27:
                    24:b9:de:29:dc:4d:2d:7c:dd:07:16:90:f0:b8:95:
                    0a:85:21:25:52:b9:90:02:13:48:07:be:05:46:87:
                    d9:25:1c:e3:25:73:62:cb:78:c9:e5:59:02:99:23:
                    78:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:94:15:8A:A6:F3:F2:A2:83:C1:2D:36:EE:CA:EA:92:2F:A3:8E:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd8e476c-36bf-3de7-8cef-98a53d8ece9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1419:8200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c6:53:1b:62:f7:5d:84:ea:ef:20:d2:99:05:41:e8:c7:b5:
         14:85:7d:bb:1f:c1:ce:79:ef:40:0a:7e:c9:36:3b:b8:a8:8f:
         5c:24:3d:36:c4:60:15:62:bb:d2:e4:fc:3c:df:9b:f3:96:5e:
         8d:e3:b2:6a:e5:72:89:9d:86:7b:98:6b:4f:d2:3f:7f:a6:0c:
         37:42:5b:13:f3:3c:04:5b:43:12:3a:90:8c:61:38:66:49:cc:
         86:dd:b7:ea:25:8a:a2:9b:c5:d0:3a:c9:b3:08:d6:96:ad:71:
         22:f3:02:4b:b2:c5:da:86:d4:41:2b:08:81:0c:a7:60:f3:7f:
         27:62:47:f7:c2:53:10:12:d2:6c:ec:ab:ce:c5:52:19:4b:c1:
         28:6d:30:2f:ec:57:a7:0e:9c:56:71:10:7c:6b:cc:1b:18:e8:
         91:76:a3:d4:3c:86:2a:d5:4a:1b:b4:6d:e3:75:78:e7:f5:34:
         a2:9b:2d:7b:d0:4f:71:6a:a0:52:16:fd:b6:e0:cf:5a:4a:5d:
         66:43:17:2f:09:3e:75:7a:a3:e2:12:11:ad:65:89:61:89:99:
         f1:4a:d6:d3:a7:d6:84:a6:33:8b:12:81:6e:7d:bd:86:58:68:
         4e:72:d8:e9:67:7d:60:95:57:ab:69:21:45:8d:c7:ee:e0:fe:
         1f:2d:13:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:32 2024 by rpki-client on console-fra.rpki-client.org