Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da8c1574-6d78-3941-b340-85461f961213.roa
File:                     da8c1574-6d78-3941-b340-85461f961213.roa (raw, json)
Hash identifier:          Mp+N0ZqoitihY4+5eZsr1jFxOYHaFLuAJKOnCS6G4Pg=
Subject key identifier:   AE:D5:FC:88:B6:E5:76:AC:53:8B:25:56:56:D2:0B:AB:8F:CC:9E:88
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452353203850059DB50F316100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da8c1574-6d78-3941-b340-85461f961213.roa
Signing time:             Fri 08 Mar 2024 09:26:51 +0000
ROA not before:           Fri 08 Mar 2024 09:26:51 +0000
ROA not after:            Thu 06 Jun 2024 08:26:51 +0000
asID:                     20940
IP address blocks:        2600:1406:bc00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:53:20:38:50:05:9d:b5:0f:31:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 09:26:51 2024 GMT
            Not After : Jun  6 08:26:51 2024 GMT
        Subject: CN=2dab9e21-2329-46b8-bae7-868d8358fa11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f9:31:52:ab:7d:2e:52:e5:6f:48:91:d1:81:
                    d9:14:83:75:89:8e:52:e6:3e:0e:5f:4f:01:48:ef:
                    b3:dc:bf:7b:2a:f6:8b:20:4f:c8:5b:33:a2:33:d2:
                    d1:db:a2:12:16:1b:8e:fc:79:68:7b:cc:16:bc:9d:
                    02:27:87:a1:47:56:05:a4:24:1d:0b:1b:fa:4e:79:
                    a4:f3:5a:98:34:aa:4b:9a:74:82:47:42:c3:f5:df:
                    a3:ca:f2:b6:31:bb:6e:13:06:b7:e3:4e:1b:1f:66:
                    74:9e:33:e7:c1:15:51:34:6d:56:50:8d:87:e7:b1:
                    15:65:e3:c9:82:d1:d7:91:77:32:04:42:97:84:1f:
                    17:69:d9:6e:db:72:d0:2c:f1:63:4c:6c:12:24:9d:
                    ed:4f:2f:92:82:f5:de:e1:7f:ee:e4:ff:18:27:7c:
                    5e:bd:4a:e5:f0:f3:84:69:e7:b7:9a:21:2b:90:d3:
                    2b:ed:47:0c:35:e3:63:96:3c:48:8c:be:61:23:63:
                    95:9d:7d:22:b6:9d:47:da:9a:94:7a:00:27:28:de:
                    a0:95:e5:ca:e7:b1:2f:88:f8:dd:0b:c1:94:77:26:
                    f4:be:fe:0a:57:38:3d:c7:d2:e4:69:8c:69:5e:82:
                    d7:91:61:ae:23:4d:69:e7:aa:f2:9e:c9:b7:e9:48:
                    d8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D5:FC:88:B6:E5:76:AC:53:8B:25:56:56:D2:0B:AB:8F:CC:9E:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da8c1574-6d78-3941-b340-85461f961213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:bc00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:3d:70:5e:05:59:f5:2f:c3:0e:90:28:ea:e4:a1:2b:fc:59:
         9e:cb:49:93:0e:b7:4f:ad:1f:48:6a:a6:2b:e7:73:c9:4c:27:
         95:b6:6c:8a:50:66:c6:32:52:34:c7:29:bb:df:c4:1e:e8:7b:
         0c:da:27:1e:54:1d:45:60:5f:ef:f4:71:19:64:9c:41:77:2a:
         09:27:3f:6e:32:ad:bb:42:09:6d:d8:e6:3d:2b:e2:c6:e0:bf:
         52:e2:dc:93:47:e2:da:98:d1:eb:e8:9f:c6:05:cd:0f:4d:13:
         be:d8:a9:5b:e8:8a:04:a3:01:0f:7e:f3:af:26:43:5d:67:7c:
         ce:26:2d:d8:57:af:1a:cf:50:57:45:69:9b:e0:81:13:d5:53:
         ae:cd:4a:88:e1:95:86:35:e0:f3:56:ed:fa:08:e2:d0:94:33:
         b7:86:60:d9:cd:93:77:42:fe:52:50:f1:3a:25:7c:a5:e7:ba:
         17:83:ae:64:3d:c9:86:97:48:54:c9:fa:89:25:2a:22:a7:d4:
         9b:73:93:8c:cf:61:bc:c0:64:9c:c5:25:93:d1:f6:1b:0f:06:
         74:dc:c9:f4:76:a8:b7:53:4c:1b:34:b5:e4:e9:ca:11:11:d6:
         2d:0b:96:64:04:08:51:b3:21:d5:ca:37:b3:f1:a3:9e:56:7d:
         78:42:1f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:07:57 2024 by rpki-client on console-ams.rpki-client.org