Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb7b7695-5bfd-30af-a610-aa289f820c1a.roa
File:                     cb7b7695-5bfd-30af-a610-aa289f820c1a.roa (raw, json)
Hash identifier:          oBE6gMHSfDAmBewuCH9EDzhjdBMnw8EQ0A+2wC/pgDg=
Subject key identifier:   CA:19:1A:FA:A8:AF:F3:C1:03:6E:01:85:14:66:8F:E9:16:4F:1B:B1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847CD09FC4BE2346D1FA6A8FF60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb7b7695-5bfd-30af-a610-aa289f820c1a.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     24319
IP address blocks:        2600:140b:9800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:fc:4b:e2:34:6d:1f:a6:a8:ff:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=fdbaeb95-a5c2-4d1a-819a-1561cba2dcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:9d:82:01:d2:7e:54:d7:20:9c:a5:bd:2c:
                    51:98:89:f0:3f:28:14:fd:03:f0:78:58:fc:f0:ce:
                    fa:4e:18:e1:4f:32:11:ec:36:04:e1:98:a4:5d:96:
                    2e:69:d5:84:c8:69:37:1d:0e:93:a3:24:7b:23:db:
                    b4:d6:84:12:e2:16:41:f7:d2:9d:c6:65:29:8a:c2:
                    66:80:48:03:3d:35:be:c3:f3:89:de:c4:8c:62:71:
                    63:73:38:56:a4:4f:dd:3c:50:c5:ee:db:38:7b:e1:
                    01:5b:ca:d9:cf:89:27:26:1a:6b:9f:bf:ac:70:cf:
                    4b:9b:f2:11:b3:6d:96:cb:f9:41:b4:9c:8f:bb:18:
                    66:72:f4:e2:63:8f:36:95:97:10:aa:f6:65:d5:74:
                    74:ff:5f:8c:98:02:39:2a:dd:6e:ee:04:77:c7:a8:
                    b7:94:6d:81:a2:22:f7:22:18:8d:1f:9e:3f:15:ea:
                    4d:17:55:70:41:a1:0e:e8:74:cf:98:d7:47:5f:4a:
                    db:99:f9:18:ba:3a:40:b4:5a:9f:05:7f:e5:07:2f:
                    2a:67:86:17:49:5f:7c:52:3e:fb:00:f0:58:1e:44:
                    88:e6:2e:77:55:14:a7:53:ca:5a:70:5a:66:0a:01:
                    a6:35:ef:10:ea:68:07:7b:b0:11:88:56:9a:e0:66:
                    41:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:19:1A:FA:A8:AF:F3:C1:03:6E:01:85:14:66:8F:E9:16:4F:1B:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb7b7695-5bfd-30af-a610-aa289f820c1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:9800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e4:79:12:26:fb:a0:25:43:ef:45:47:a6:df:04:09:7c:a8:
         52:a4:c8:21:3c:05:fd:aa:08:57:ca:40:7e:11:fa:c4:9d:c3:
         4e:c6:7c:a5:3b:a4:04:53:11:1c:eb:79:3f:01:1b:b9:8a:55:
         2a:78:ff:02:7f:c1:ee:88:8e:c6:c7:a7:9c:ef:19:d1:d2:56:
         45:76:0b:f7:b2:a0:62:79:58:0f:7d:dd:17:91:a0:62:b0:6b:
         3a:3b:cb:8d:09:ef:71:5f:aa:0e:f3:54:1b:fc:0f:8d:f0:e5:
         fb:80:1b:03:20:e0:53:7d:d6:cf:8a:94:ab:79:43:95:a5:96:
         37:5c:ec:0c:b6:d8:f9:4d:4d:0e:02:e4:c5:49:43:e2:da:09:
         d3:5b:4f:3b:fc:34:ea:a8:77:e4:41:ba:13:e1:fe:2c:1e:8b:
         dc:57:f5:4f:91:b5:78:18:01:93:63:de:02:4e:4e:83:4c:63:
         d6:7c:e6:50:5b:93:16:f0:03:07:72:e1:80:c4:b6:24:56:72:
         47:6d:dc:24:8c:23:50:35:18:d1:31:6f:db:db:18:8b:91:99:
         39:5b:1c:b9:ef:0f:3e:05:ca:84:01:f2:4c:76:28:ff:23:08:
         e4:4e:0f:1c:c7:c3:af:47:fc:d6:75:33:c6:7d:00:eb:35:e5:
         9f:d6:8d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:27:44 2024 by rpki-client on console-fra.rpki-client.org