Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4086207-93e1-3f68-99a6-92c6aec4c1b5.roa
File:                     e4086207-93e1-3f68-99a6-92c6aec4c1b5.roa (raw, json)
Hash identifier:          usAwJCpJZybqq6JI79X0M7ucwQV98aoPaxtwE9jbiMY=
Subject key identifier:   EB:6F:0C:F9:A4:E5:5E:08:51:87:E3:93:7C:4B:C3:AA:B0:49:15:F4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C05C18B3AC99E645CEE54980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4086207-93e1-3f68-99a6-92c6aec4c1b5.roa
Signing time:             Sun 03 Nov 2024 01:00:36 +0000
ROA not before:           Sun 03 Nov 2024 01:00:36 +0000
ROA not after:            Sat 01 Feb 2025 02:00:36 +0000
asID:                     20940
IP address blocks:        2600:140f:5e00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c0:5c:18:b3:ac:99:e6:45:ce:e5:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  3 01:00:36 2024 GMT
            Not After : Feb  1 02:00:36 2025 GMT
        Subject: CN=7affd814-adf6-4b91-ba20-537ff8af504b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:33:5b:5e:dc:0f:7f:5e:8c:29:96:44:52:97:
                    3a:11:12:c4:bf:34:ab:b9:c3:ba:36:da:6b:d3:43:
                    20:8a:ab:09:82:2b:e1:67:9a:ed:a8:cc:9e:a3:c4:
                    01:9b:7e:67:21:5e:9f:af:6b:0f:ca:1f:6e:9d:c2:
                    00:ad:3e:d8:d9:22:46:6a:ce:40:04:a2:7b:0e:b9:
                    fc:0d:c6:6a:57:f8:4b:fb:51:17:e8:96:c3:c4:d2:
                    06:25:dc:58:cf:9d:9b:f8:b3:63:53:5a:88:dd:ca:
                    f0:65:3a:8e:59:29:60:5a:81:a0:d2:ec:d2:0c:1c:
                    d1:5e:61:72:c5:ca:e5:5d:68:12:f9:0b:2f:c7:65:
                    77:ff:62:5f:72:b4:91:bf:b8:7b:70:67:5f:ac:eb:
                    58:a7:3f:2f:26:a3:da:04:13:74:27:ff:ff:64:16:
                    38:db:52:1b:2c:d1:c8:37:a4:31:d0:29:d8:f6:ef:
                    03:4e:61:67:11:0b:c5:c1:db:71:bf:10:8b:dc:67:
                    23:11:a4:22:9f:ba:19:14:e5:a0:b1:7a:67:64:04:
                    81:4f:c5:fc:2b:d8:1a:a4:89:fe:a2:10:78:56:93:
                    23:78:50:c1:96:1f:53:77:7f:32:1a:64:3f:30:a5:
                    eb:dc:9f:07:d1:00:7c:ba:44:de:43:f3:9a:50:56:
                    a5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6F:0C:F9:A4:E5:5E:08:51:87:E3:93:7C:4B:C3:AA:B0:49:15:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4086207-93e1-3f68-99a6-92c6aec4c1b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:5e00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d7:6b:9d:37:34:a8:5b:a9:05:50:d5:3e:7d:9b:73:36:c1:
         26:96:51:4e:d1:ff:ae:2b:02:ab:2b:f2:86:dc:01:46:8b:2f:
         8d:43:87:79:d4:24:37:65:08:ae:d8:66:89:2d:f1:b9:67:81:
         92:4f:6e:94:1c:f3:06:1d:62:25:96:5c:e7:5a:53:81:8d:9c:
         af:b3:48:48:7c:65:4a:11:70:7d:17:b8:60:e9:53:ea:a4:df:
         8d:27:d4:57:d4:44:e4:fe:5b:86:64:4e:e1:4a:56:29:be:0a:
         14:f2:f4:b7:5e:f8:96:43:19:9a:b3:22:08:c8:13:9b:d5:22:
         01:96:d8:81:85:f4:0a:f6:eb:23:44:46:85:54:83:42:c4:c4:
         88:67:b6:ed:c1:5f:37:75:fb:c2:b6:ef:d9:7e:bb:df:4f:77:
         ad:0c:d6:2e:21:d1:ea:a5:a9:c1:89:19:d8:8d:9c:b8:92:05:
         18:f5:99:19:e6:94:bc:a1:e3:96:73:b9:31:18:48:36:e4:ed:
         9b:5c:43:37:37:c9:e5:8a:41:d6:cc:04:99:e8:bc:43:75:94:
         a5:bd:e0:c0:ac:68:00:64:aa:78:e5:f3:8c:e2:f3:ce:ae:4d:
         51:2a:c9:f2:02:f3:bd:7c:10:17:95:75:bb:d0:77:02:f5:25:
         7b:ed:21:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:48 2024 by rpki-client on console-fra.rpki-client.org