Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7e585e0-7f8e-3303-bd06-d9c41c61c420.roa
File:                     c7e585e0-7f8e-3303-bd06-d9c41c61c420.roa (raw, json)
Hash identifier:          HdqexgMxLBsdJrKiETG68Xwq92kSeV1hT55c6QFcl38=
Subject key identifier:   3E:DE:90:23:3F:33:9E:80:8B:C2:BC:21:82:B4:E5:EE:E7:73:7D:9E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473D260732271FF6B32F83CCD0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7e585e0-7f8e-3303-bd06-d9c41c61c420.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     35994
IP address blocks:        2600:141b:9800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:26:07:32:27:1f:f6:b3:2f:83:cc:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=6613e8e3-1ae6-487e-b557-48eece0c3ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:dd:c1:7c:44:eb:3a:5a:9d:67:41:26:56:26:
                    91:bc:6c:40:ee:9b:dd:be:a2:24:fe:0a:b4:d1:69:
                    ef:b2:bc:11:c6:71:1b:0f:7e:65:1c:01:92:18:85:
                    9a:25:1f:0f:82:b8:e6:3e:dd:39:b1:e7:44:11:c1:
                    e8:fb:49:d7:22:dc:d6:b7:79:e9:16:18:15:cb:13:
                    96:dd:ce:0d:e7:71:bb:b4:84:73:77:53:42:5b:82:
                    96:22:6f:9e:4e:91:06:f2:33:03:de:44:b3:c1:bc:
                    66:02:98:fd:c2:df:8d:61:eb:24:69:89:3c:26:0b:
                    d0:80:5e:20:98:cf:a8:5a:20:2c:6a:66:6b:71:6b:
                    0a:fc:48:69:51:e5:f0:f8:d8:76:0b:61:aa:cd:cd:
                    11:52:df:64:ce:2e:bc:65:8f:77:4d:df:be:a7:9c:
                    5b:d6:7c:55:0d:34:51:90:f0:a0:f1:29:14:73:2a:
                    7e:a1:a3:19:7f:c2:b1:24:f6:5a:ff:f9:9b:87:94:
                    42:4b:1d:ec:84:8f:8c:7a:8e:a5:8c:53:d1:4b:39:
                    1b:00:41:02:3e:7f:a7:fc:ac:15:85:23:44:1b:f6:
                    dd:c8:48:f1:df:fd:2e:0b:8b:65:d7:73:aa:27:f1:
                    58:8b:e5:94:c7:2a:b3:4c:6e:dc:34:2c:48:c7:a9:
                    3c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DE:90:23:3F:33:9E:80:8B:C2:BC:21:82:B4:E5:EE:E7:73:7D:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7e585e0-7f8e-3303-bd06-d9c41c61c420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141b:9800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:1f:3c:4a:de:7b:58:d0:6b:93:cd:0e:91:ff:18:27:ae:fd:
         8a:13:f4:22:e0:a6:31:e5:a4:d0:e0:8b:43:96:45:cb:ab:75:
         21:27:47:2c:96:02:db:26:36:c3:8a:93:1f:3b:0f:0e:87:01:
         12:7e:46:ed:c1:a7:c9:86:47:54:ab:28:fb:31:d9:8f:3e:48:
         5f:7e:74:88:41:9b:fd:b3:08:b7:e8:34:48:6d:35:39:4c:9a:
         d0:c0:db:70:35:f2:00:8e:f1:f6:23:76:e5:6f:18:01:c5:f5:
         f7:7b:f6:17:9d:99:ef:ff:f9:bd:dd:64:34:81:b1:17:e2:a9:
         49:87:2e:41:ce:9a:f2:3d:ba:bb:28:87:c1:f2:e5:7f:d7:4a:
         4a:21:08:4d:c4:39:29:08:47:b0:c5:f9:04:78:86:b4:66:5e:
         f2:66:06:26:7a:de:b7:10:ad:3a:d2:2c:55:ed:8b:0e:51:ae:
         5c:4d:df:4a:b8:e5:9b:b5:e5:e0:98:d6:52:b4:83:40:3e:f7:
         6b:5b:28:c4:58:63:36:5c:26:d6:19:eb:a8:33:9e:df:92:9b:
         06:a2:92:32:00:cc:c2:4f:0d:3f:47:13:88:57:d3:f4:86:eb:
         12:5f:ee:46:26:9e:de:3f:60:85:20:7b:6f:ac:aa:86:f3:ac:
         76:eb:b5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:30:32 2024 by rpki-client on console-fra.rpki-client.org