Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9f969a5-426f-3cf4-aac0-8ee04e8dfd64.roa
File:                     d9f969a5-426f-3cf4-aac0-8ee04e8dfd64.roa (raw, json)
Hash identifier:          TpGqeOz5FK1McCaiyBaaJBT2nWxBjIUXegYXec2k4Bk=
Subject key identifier:   DC:04:19:D5:71:E7:3F:C4:1B:A5:52:10:E0:09:CF:8E:A0:E2:F7:F5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847D40498D1A4D32BDC9F8A7B40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9f969a5-426f-3cf4-aac0-8ee04e8dfd64.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     21342
IP address blocks:        2600:1480:f801::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:98:d1:a4:d3:2b:dc:9f:8a:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=05044af0-7010-4bd5-b91a-9f9a13f4e765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e4:1e:b9:ec:49:32:d6:db:59:c9:0b:06:da:
                    62:73:4c:4e:41:60:24:85:d4:2a:49:08:7c:40:30:
                    18:97:20:54:eb:49:68:33:d8:f8:23:97:a2:ab:30:
                    c8:de:2b:b6:42:bc:1b:3f:4b:1c:2e:f9:2c:07:40:
                    01:7f:f8:fa:5c:0a:0c:80:09:98:56:03:ef:80:94:
                    61:40:30:64:a3:76:e6:33:ee:a7:e2:64:b2:95:ab:
                    57:49:24:1d:01:5d:a8:2f:11:36:db:c4:0f:fd:2e:
                    2b:95:79:10:06:ee:68:69:fb:38:18:a0:4d:e6:6a:
                    23:73:47:56:48:26:bb:7f:2a:d8:52:a6:a4:5b:77:
                    61:8a:8d:3f:dc:9a:d0:18:17:50:22:6b:2e:fe:6f:
                    7a:51:f7:7b:7d:b7:37:9f:9b:f7:02:b9:5f:cf:bb:
                    57:0b:b7:38:98:a1:55:8e:49:60:82:6f:ee:ce:3e:
                    27:6a:c6:39:e1:74:dd:1a:de:01:69:b5:37:c3:bc:
                    0b:3e:39:7d:f0:97:1a:9e:e4:7f:04:29:c5:bb:94:
                    1d:73:57:ba:59:d3:18:06:69:b5:4d:59:b1:ea:68:
                    12:37:a7:8b:ff:e3:6b:47:90:4e:b4:7d:a3:ae:4a:
                    95:54:a4:87:d1:fe:22:34:3b:91:b9:91:e2:ae:5b:
                    d0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:04:19:D5:71:E7:3F:C4:1B:A5:52:10:E0:09:CF:8E:A0:E2:F7:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9f969a5-426f-3cf4-aac0-8ee04e8dfd64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1480:f801::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:42:b6:ab:34:c3:e1:43:50:d5:8b:75:96:fb:bf:f1:b3:e0:
         cd:73:ab:44:d2:1b:89:a4:5a:b2:24:43:b7:b2:aa:ad:09:76:
         99:7e:f5:a1:15:79:85:4f:02:76:bb:75:1e:f2:40:55:c0:43:
         6b:38:40:9c:75:17:fc:68:96:62:ee:36:4a:f7:24:02:b0:9e:
         3e:87:03:11:86:d4:9c:1a:8a:1e:0a:86:4d:23:4c:58:31:f3:
         fe:cd:40:ff:15:1e:49:78:05:5f:5b:d6:79:ba:3a:ad:15:a4:
         d7:eb:2a:fb:a1:e6:fa:ff:eb:32:92:48:4b:0b:cc:cf:91:57:
         03:a1:5a:81:32:84:d9:83:6e:73:66:78:2b:50:76:89:57:60:
         70:04:a9:8f:8b:f2:36:09:39:09:7e:1c:3f:dc:5e:78:85:23:
         fa:33:78:ce:27:8e:62:f9:af:ee:52:58:3c:e4:2d:97:28:e4:
         8c:bc:78:ed:61:c9:ad:b2:21:e1:79:a2:78:51:9b:45:fe:c9:
         3c:82:e2:31:39:db:b1:0f:6f:11:c5:1e:1b:95:8f:97:c3:52:
         37:1c:72:b1:42:1a:ab:03:0b:88:03:c1:01:cb:fd:14:3d:61:
         d1:3c:7d:61:86:e2:b8:3b:ca:b4:6a:bd:7c:b0:48:e0:7d:2a:
         6c:34:d0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:17:40 2024 by rpki-client on console-fra.rpki-client.org