Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf5a1dad-d8fa-3abc-92a9-130a0b061f05.roa
File:                     cf5a1dad-d8fa-3abc-92a9-130a0b061f05.roa (raw, json)
Hash identifier:          L7GltgZGRKeRGpzdkjHHwRpB0bw4SKGLkKlAUxYYQ18=
Subject key identifier:   EF:CE:75:75:B1:08:BC:E1:9A:3B:E6:8A:83:5B:AA:1B:67:BD:B5:26
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584515E58FDEFD503DEEFEC5DB80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf5a1dad-d8fa-3abc-92a9-130a0b061f05.roa
Signing time:             Sun 03 Mar 2024 14:00:31 +0000
ROA not before:           Sun 03 Mar 2024 14:00:31 +0000
ROA not after:            Sat 01 Jun 2024 13:00:31 +0000
asID:                     32787
IP address blocks:        2606:6c00:207::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:15:e5:8f:de:fd:50:3d:ee:fe:c5:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  3 14:00:31 2024 GMT
            Not After : Jun  1 13:00:31 2024 GMT
        Subject: CN=437ee02b-fb19-4b79-85a5-f8ad0d5f7ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:54:79:a7:62:ed:32:9e:b7:b6:92:80:c2:87:
                    ca:76:e4:f0:fb:1d:d0:b9:5c:cb:6a:d5:92:3d:00:
                    6d:b9:74:12:fd:bd:b8:69:89:5c:9e:c2:ee:83:c6:
                    5a:a8:c9:16:bf:16:89:99:94:d8:16:f2:08:28:ba:
                    0b:6f:ad:0d:d5:53:b5:b0:c9:8d:bf:3f:21:0d:95:
                    c8:af:4b:d9:87:06:56:2a:fc:97:08:cb:42:a2:68:
                    53:3a:10:07:4c:88:38:16:1a:1f:b8:96:31:28:2b:
                    fd:8b:d6:67:3b:53:f3:d8:af:0f:a5:b5:67:2e:21:
                    4b:2e:d8:91:6d:a5:27:02:2a:36:1c:c5:ed:23:d0:
                    b1:fe:b5:4a:70:e8:fb:75:be:35:02:8d:42:c9:5c:
                    d8:11:9c:0a:23:1f:d3:8a:ca:c1:26:cc:dd:9c:7c:
                    22:57:32:ac:62:b0:ff:12:9b:1c:61:5a:99:30:33:
                    bd:5f:8b:9d:42:4b:e0:ee:9e:21:93:16:a9:91:1a:
                    48:a9:a9:b7:41:b9:5b:b6:5b:35:e1:27:f3:8d:d7:
                    94:e5:fd:c6:52:f7:c1:8b:ed:d0:61:7c:07:dd:b1:
                    43:8e:16:1a:f3:cb:15:8b:20:e6:3b:2a:c3:05:e6:
                    23:b9:4e:74:6b:36:0c:a7:30:bb:67:9f:b7:cd:ce:
                    77:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CE:75:75:B1:08:BC:E1:9A:3B:E6:8A:83:5B:AA:1B:67:BD:B5:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf5a1dad-d8fa-3abc-92a9-130a0b061f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6c00:207::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:4b:ab:55:08:cb:ce:aa:2c:f5:b5:57:22:1b:5f:8c:0d:ac:
         df:44:71:68:18:a5:00:7c:c3:90:a9:0c:e1:5b:3f:5f:53:b7:
         49:35:df:8e:00:57:cb:84:58:63:cb:1b:37:fe:db:27:61:24:
         8c:ed:ed:9f:41:30:51:5a:b3:9b:26:9b:ef:ee:c2:3d:5a:42:
         37:84:ee:ca:38:99:a6:7b:01:09:45:d5:a0:fe:06:e0:55:ac:
         5f:04:b4:ef:23:40:79:87:1d:22:b0:fb:b7:f2:a4:38:87:f1:
         a1:62:fa:f2:9a:8a:76:e9:98:d9:7e:1c:66:cd:1b:f1:b1:06:
         8d:39:be:76:8d:48:20:f4:78:c1:7c:1c:66:4d:52:cb:15:d7:
         b8:2b:67:43:66:55:db:b4:6a:48:34:ba:0a:4b:f0:20:24:9a:
         b8:ac:c0:19:00:c3:c9:6e:64:28:30:bf:26:ce:17:6a:8b:87:
         a8:54:3d:7a:6c:64:3c:6b:6f:bc:9b:37:5f:de:a6:06:66:75:
         b6:52:a0:6d:82:2b:34:9f:3f:12:22:c3:7c:db:69:72:d6:50:
         85:6c:80:33:fe:18:23:d5:f9:01:67:9a:96:a2:f9:49:19:ba:
         2d:23:15:79:32:8b:b6:d3:82:28:bd:b4:29:f5:7a:16:9a:8b:
         db:ae:8c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:15:41 2024 by rpki-client on console-ams.rpki-client.org