Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0a92faa-4c74-37fe-b70d-0b3ec5ac3650.roa
File:                     e0a92faa-4c74-37fe-b70d-0b3ec5ac3650.roa (raw, json)
Hash identifier:          cbaYJUpo2m91FQ8UIUfSFSkhm7TcPjcQC1IQEBOuRhc=
Subject key identifier:   AB:72:65:23:9A:70:F9:63:28:BA:47:77:3D:EA:CB:AE:41:41:10:60
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847CA3F8C0EAA419CBA5E524300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0a92faa-4c74-37fe-b70d-0b3ec5ac3650.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        2600:1488:6280::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:8c:0e:aa:41:9c:ba:5e:52:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=d6606028-ae24-494c-a912-d3cb1d55456e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:41:f9:a8:1e:c8:7c:8f:5d:3e:e4:d4:dc:26:
                    dc:91:ad:a2:89:51:c3:eb:55:45:09:85:a6:d6:21:
                    3e:9f:c9:f6:4f:cd:55:41:c3:65:f1:8d:06:07:79:
                    8c:3f:69:66:8b:6b:05:6c:14:fb:33:87:59:80:02:
                    b1:f9:51:f3:e8:82:df:61:09:c5:59:d9:ef:4b:f2:
                    bd:60:39:db:48:7c:24:df:2c:42:7d:20:c6:d1:bf:
                    b3:07:66:c1:cb:5a:a6:4b:01:4a:bc:51:5e:e5:a5:
                    60:c7:bc:64:e7:e6:e6:38:d2:80:1f:2d:45:08:36:
                    30:93:32:95:8c:9d:10:69:f9:91:20:df:e0:bb:c3:
                    dc:2f:c1:a0:2b:74:cc:2f:a8:0f:bb:3e:58:0b:ce:
                    c4:3c:90:f6:e4:33:89:bb:c0:00:0f:23:23:67:7b:
                    5f:c0:59:65:7e:44:e7:6d:b8:2a:1e:c3:9d:34:5a:
                    ba:16:cf:9f:1f:ce:d7:ee:1f:8a:37:a1:2a:28:69:
                    a5:c6:b4:4e:35:a2:e1:b0:4d:f9:85:1a:ea:94:66:
                    4a:27:77:5d:66:80:29:bb:b7:68:27:ce:ee:72:f8:
                    1c:14:e1:b8:dd:48:a5:7d:d0:79:ae:a7:66:2a:29:
                    df:62:27:d9:6b:3a:fa:1b:5e:ca:ea:5e:b7:fc:91:
                    6a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:72:65:23:9A:70:F9:63:28:BA:47:77:3D:EA:CB:AE:41:41:10:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0a92faa-4c74-37fe-b70d-0b3ec5ac3650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:6280::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:33:32:ea:81:1b:03:51:68:0c:ab:cf:f9:40:71:32:f6:5e:
         2d:6c:0b:d7:bf:a1:8f:12:a2:6e:c5:46:b2:2d:d2:b7:bd:b2:
         d8:03:95:eb:ae:73:e8:2a:a4:07:32:bb:1d:aa:09:3e:3f:7d:
         6d:04:91:09:11:e1:2d:70:3c:b4:7d:f7:2d:90:d3:3d:ca:5a:
         83:6a:f4:5d:cf:63:24:3a:72:8f:50:25:35:d2:bc:40:09:c1:
         1a:3d:05:4f:2c:bb:f7:1c:d8:2b:f3:1e:a5:fc:89:ac:57:5c:
         ed:b1:89:35:5d:97:51:6e:f8:ce:27:0a:18:3d:7d:f4:b3:c6:
         29:91:85:f7:36:27:39:7e:b1:73:10:fb:ad:4e:f1:29:d0:62:
         b6:22:00:5c:27:8f:d0:df:30:0f:59:96:6e:54:98:25:6d:10:
         75:c5:0f:8c:81:28:c8:3b:97:75:9c:29:24:fa:43:55:92:d4:
         ea:e5:a2:9e:8a:1f:44:c7:3c:63:0d:98:8f:ec:c9:6d:a7:8a:
         44:c6:59:92:6a:72:c2:d6:a0:b2:10:aa:31:28:36:7e:26:3d:
         c5:a3:a7:77:e6:c6:cd:8d:2f:fa:93:ad:fd:bd:4d:80:88:d8:
         47:38:cc:fa:21:ab:7c:64:43:c3:cc:16:e2:1d:70:ea:fa:a7:
         1c:65:02:55
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfKP4wOqkGcul5SQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZDY2MDYwMjgtYWUyNC00OTRjLWE5MTItZDNjYjFkNTU0NTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0H5qB7IfI9dPuTU3Cbcka2iiVHD61VFCYWm
1iE+n8n2T81VQcNl8Y0GB3mMP2lmi2sFbBT7M4dZgAKx+VHz6ILfYQnFWdnvS/K9
YDnbSHwk3yxCfSDG0b+zB2bBy1qmSwFKvFFe5aVgx7xk5+bmONKAHy1FCDYwkzKV
jJ0QafmRIN/gu8PcL8GgK3TML6gPuz5YC87EPJD25DOJu8AADyMjZ3tfwFllfkTn
bbgqHsOdNFq6Fs+fH87X7h+KN6EqKGmlxrRONaLhsE35hRrqlGZKJ3ddZoApu7do
J87ucvgcFOG43UilfdB5rqdmKinfYifZazr6G17K6l63/JFqMQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKtyZSOacPljKLpHdz3qy65BQRBgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTBhOTJmYWEtNGM3NC0z
N2ZlLWI3MGQtMGIzZWM1YWMzNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiGKA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD0zMuqBGwNRaAyrz/lAcTL2Xi1sC9e/oY8Som7FRrIt0re9stgD
leuuc+gqpAcyux2qCT4/fW0EkQkR4S1wPLR99y2Q0z3KWoNq9F3PYyQ6co9QJTXS
vEAJwRo9BU8su/cc2CvzHqX8iaxXXO2xiTVdl1Fu+M4nChg9ffSzximRhfc2Jzl+
sXMQ+61O8SnQYrYiAFwnj9DfMA9Zlm5UmCVtEHXFD4yBKMg7l3WcKST6Q1WS1Orl
op6KH0THPGMNmI/syW2nikTGWZJqcsLWoLIQqjEoNn4mPcWjp3fmxs2NL/qTrf29
TYCI2Ec4zPohq3xkQ8PMFuIdcOr6pxxlAlU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:34 2024 by rpki-client on console-ams.rpki-client.org