Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4622068-5993-31d9-98f0-90eae23993bc.roa
File:                     e4622068-5993-31d9-98f0-90eae23993bc.roa (raw, json)
Hash identifier:          qiNcd8+Mw0Y8MgZvZSl2d7eZ8vIgca3/Kfd6yU0Shsw=
Subject key identifier:   AD:15:F8:54:C7:A2:D5:99:C5:2B:40:05:8A:C6:5A:93:73:39:C1:CD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858457D132DD5F181D7237CFEC100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4622068-5993-31d9-98f0-90eae23993bc.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     35994
IP address blocks:        2001:4878:4001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:2d:d5:f1:81:d7:23:7c:fe:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=aed3debe-79e3-4855-9ad2-84c224016909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5d:11:9f:20:a2:84:76:f3:e9:3a:d9:06:f0:
                    c5:20:69:d3:ff:45:f2:7a:f2:5f:05:0c:75:ec:f8:
                    7c:75:ef:cc:c9:3c:37:79:1a:68:c7:83:83:97:1b:
                    60:b5:b2:be:d2:27:09:b3:bf:56:25:f9:69:cf:e1:
                    6a:2f:d3:54:c0:7d:67:34:db:0b:0e:0f:56:fc:66:
                    06:05:40:b2:35:35:db:40:57:28:79:ea:ba:e2:62:
                    5e:17:68:0c:b9:fe:0b:a8:a5:57:a6:f8:8b:71:d2:
                    b5:ef:b1:5c:06:d3:5b:3c:51:3f:8f:a2:4f:00:6b:
                    86:5f:1f:ed:36:43:d6:5f:d4:77:46:3f:e3:19:05:
                    9e:84:b6:96:ba:dc:c6:50:7e:ac:07:86:a7:a2:a8:
                    1d:18:a5:68:f9:76:9c:fb:57:cf:c2:3b:5d:c8:30:
                    8f:83:c7:a8:71:aa:b1:72:ac:87:5a:ca:1c:44:ae:
                    19:1e:dd:44:7d:6a:68:25:60:2e:32:c6:24:a2:20:
                    ee:1b:55:23:ae:d4:5c:18:b0:04:01:50:91:75:12:
                    b5:d9:6c:de:b1:eb:5f:be:33:b4:0b:d8:4d:1d:d2:
                    b6:df:cc:0a:af:20:6b:d4:26:7a:bb:17:06:62:36:
                    fb:88:73:a7:c0:20:ed:c7:2f:ee:3e:72:c9:34:38:
                    16:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:15:F8:54:C7:A2:D5:99:C5:2B:40:05:8A:C6:5A:93:73:39:C1:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4622068-5993-31d9-98f0-90eae23993bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:4001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:a7:22:b6:c8:92:98:d5:81:c0:36:d4:a6:1b:9b:9f:7c:b4:
         ba:5f:3b:da:a9:3a:0d:74:95:fd:e2:a7:4c:1f:69:6b:06:aa:
         d7:e4:a2:60:62:78:5a:e6:02:cc:8d:16:fa:65:2e:39:04:54:
         9e:69:30:62:35:ab:58:81:f5:b6:ea:da:f1:ad:f7:9a:72:ad:
         c3:11:4d:a1:8b:e3:7b:4a:5d:ac:25:31:e1:5b:0e:14:c1:d3:
         02:ba:89:8a:1d:e9:50:a6:65:29:6e:25:3f:f2:2a:d2:fb:30:
         5b:61:f5:98:fc:05:f8:da:eb:d6:ca:83:6a:40:e8:7c:85:bd:
         cd:fe:95:22:30:aa:5a:d2:97:67:ba:8d:3d:f3:7e:87:c2:c0:
         99:d6:a7:58:23:ff:ef:51:28:a0:80:9b:56:97:d5:40:6e:d1:
         48:dc:42:6f:6a:02:40:72:76:4f:39:3c:80:7a:36:5f:57:d7:
         1a:ed:9a:f4:71:d4:d2:75:dd:d4:1f:59:da:0c:53:7f:9c:c6:
         c4:22:ff:e2:3a:27:25:a2:dc:c4:4c:6d:77:53:da:2f:5a:b5:
         58:84:6a:76:f6:18:65:1b:da:b8:b5:6d:14:bd:d0:3e:b2:ad:
         a7:5c:3b:92:5e:36:55:45:c0:be:66:03:cd:6a:98:0f:00:60:
         c2:a8:39:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 13:18:59 2024 by rpki-client on console-ams.rpki-client.org