Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d56edd97-918c-3c66-8bb6-fc857906fec8.roa
File:                     d56edd97-918c-3c66-8bb6-fc857906fec8.roa (raw, json)
Hash identifier:          v/hKxylr32o/K3j1fSLE6N5CEfYZPJ5PmhYw2RvgFDw=
Subject key identifier:   91:AA:89:FD:CD:B7:5B:E9:38:0F:52:9F:6D:0A:40:A8:2F:5C:CB:A3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AE36C852B1890D311CF01E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d56edd97-918c-3c66-8bb6-fc857906fec8.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        2600:1407:1d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:c8:52:b1:89:0d:31:1c:f0:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=3a419c1b-ed54-4abb-9040-f8d06e3977c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f6:be:56:d5:4c:79:e2:1b:51:1e:9a:ee:02:
                    51:0e:4c:2d:26:e5:45:2a:3a:b3:08:2b:c0:de:09:
                    cc:f5:44:49:ea:d8:e9:fe:f7:03:63:01:66:3b:35:
                    58:d4:96:44:08:a5:8f:94:ad:1b:07:02:f6:a5:bd:
                    29:13:3f:0c:0c:ec:97:2c:2f:9d:52:dc:1e:88:bb:
                    64:7b:12:5d:38:90:f5:62:db:23:d4:a9:f1:4e:d7:
                    d1:1f:a2:08:68:d1:88:53:8b:79:1b:27:f8:50:b1:
                    ae:98:6d:e8:2f:f2:dc:6f:d3:4b:2b:e3:cd:fb:42:
                    d5:e7:6b:e3:43:4c:9a:e5:a9:0e:77:db:73:3e:13:
                    0a:ca:ef:b8:65:64:8f:27:1c:cf:6e:60:ba:70:85:
                    53:69:7a:d4:df:7f:79:eb:a6:fe:21:19:06:c5:99:
                    dd:2b:90:98:03:20:66:b1:31:94:f3:94:cc:2b:9b:
                    3d:b8:aa:43:22:b2:8c:77:72:a8:ce:c7:85:02:77:
                    af:69:9e:5e:20:cc:0c:eb:4c:a5:17:cc:68:e4:97:
                    73:cb:e5:ba:07:ec:44:55:86:e1:67:76:85:43:e6:
                    09:09:ad:5c:78:63:26:22:a9:fe:8f:2b:43:71:9e:
                    05:e3:a0:f0:c5:1f:bc:77:75:d7:a0:a0:e2:c9:87:
                    79:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AA:89:FD:CD:B7:5B:E9:38:0F:52:9F:6D:0A:40:A8:2F:5C:CB:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d56edd97-918c-3c66-8bb6-fc857906fec8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1407:1d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:4d:03:e4:52:25:fc:f7:79:5d:a0:08:f4:1a:fd:b6:53:82:
         f1:b9:39:68:13:ff:0c:4c:d1:11:b0:4a:68:f7:03:c8:dc:bd:
         e9:cc:50:df:98:ad:58:24:96:d4:1a:6f:33:4d:19:88:a9:bb:
         04:c0:a6:fe:cf:05:98:b2:a2:ed:4e:05:9f:eb:57:10:b2:96:
         f9:4b:7a:f2:e1:35:1a:97:52:6e:7e:da:6e:8f:ef:7d:c3:ca:
         03:b3:5a:76:69:57:30:3b:10:ff:1e:98:b5:9c:2d:f8:7e:09:
         11:32:a4:db:77:d6:e4:d6:74:0d:5b:dd:1b:88:93:88:34:f3:
         01:bd:9a:a5:57:fa:73:22:d4:2f:df:70:70:c2:08:0b:44:15:
         15:a4:14:2a:5c:85:9a:5b:b7:8f:62:47:84:a7:82:52:fe:e1:
         e7:9b:42:20:ae:2e:18:3b:27:d1:52:2f:1c:63:ec:3c:dd:59:
         32:69:b5:d5:18:d6:25:74:9d:76:39:5a:f4:89:41:2b:f6:54:
         33:e1:7e:26:48:8e:68:21:02:8b:ed:8d:2e:70:5f:1b:30:c2:
         c7:9f:24:51:77:79:00:d1:98:b0:d0:41:d8:10:a5:a2:90:da:
         e9:60:e9:2a:ca:7a:7f:52:1d:c2:e0:f4:3e:ce:07:68:11:dc:
         28:84:4e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:43 2024 by rpki-client on console-fra.rpki-client.org