Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52a5e7f-7195-3e16-b653-de67e61f631a.roa
File:                     e52a5e7f-7195-3e16-b653-de67e61f631a.roa (raw, json)
Hash identifier:          LyK04jgYTVjDyWH4OwQzbJPq2UJHEfsz/PQSt3ZNiOM=
Subject key identifier:   A0:FE:05:D8:48:4F:D0:2F:72:42:97:78:A5:2D:9C:FE:8D:83:5A:4A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473A5B88AEA04A4544BEBB7940
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52a5e7f-7195-3e16-b653-de67e61f631a.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     33905
IP address blocks:        2600:1480:8000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:88:ae:a0:4a:45:44:be:bb:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=ed93c71d-c92c-4a04-bd8d-71a1f76bec1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6a:64:34:3d:de:9d:7e:0e:17:36:8d:1b:3d:
                    e4:37:09:26:bc:d4:f5:0f:40:ea:f9:d2:ee:b9:4d:
                    bd:1b:42:26:d6:1e:21:37:a1:09:98:2e:ff:71:c4:
                    d8:e9:91:23:3c:80:d6:cd:61:ff:8e:33:6a:78:3c:
                    15:f3:6c:b7:5b:86:38:98:7b:00:42:30:47:fb:3b:
                    2a:b8:7d:bf:3e:2a:f2:a2:16:93:3f:24:60:63:45:
                    23:11:ab:56:d8:12:92:4d:02:77:a3:b3:98:a6:cd:
                    33:1a:9d:94:e3:9a:28:2a:36:5b:9a:52:7f:c2:28:
                    43:b2:8d:1f:57:77:7e:ee:8d:a1:92:98:37:82:d3:
                    ec:95:4f:95:69:10:52:f7:50:f5:21:07:cf:12:2f:
                    f9:61:43:68:c3:13:d1:1a:98:63:4f:38:a8:80:0d:
                    f1:a2:69:29:be:4c:37:63:ca:31:ce:75:71:69:2d:
                    15:b7:7d:ce:5f:9a:36:82:00:89:7e:ad:46:5f:55:
                    fe:42:5e:a1:9f:b2:33:58:c7:a4:16:01:9f:e7:c1:
                    5d:0c:44:c1:09:04:05:c4:3a:95:03:7d:91:3e:46:
                    16:00:a2:5e:44:9f:4e:8b:94:8d:89:bb:f7:b5:a4:
                    3d:69:34:9a:9a:e6:12:ec:10:b1:8b:3d:18:65:ec:
                    4f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FE:05:D8:48:4F:D0:2F:72:42:97:78:A5:2D:9C:FE:8D:83:5A:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52a5e7f-7195-3e16-b653-de67e61f631a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1480:8000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:d5:2f:7e:3c:a5:d7:58:8b:ca:1d:4a:4f:3a:7f:0a:97:e1:
         7f:dd:e5:86:4b:d8:91:9d:c6:bb:c5:04:fc:05:2f:c0:fb:f2:
         96:75:19:ec:27:a2:9c:4e:fe:37:12:9d:81:3c:88:85:98:cc:
         8f:88:fb:84:8c:86:9d:e1:1b:e4:bb:34:38:ea:5a:37:4c:8f:
         18:cf:ea:52:72:b1:83:9f:ec:2c:26:86:b9:11:dc:29:50:f9:
         7d:ae:5e:2e:f0:55:57:82:18:d9:0b:2c:87:2a:ac:83:6e:2c:
         b6:10:a9:15:bc:19:ce:36:c4:71:1c:3c:05:53:d1:b9:31:37:
         52:9c:b8:97:90:65:27:c0:d2:ff:ce:0d:49:9d:46:af:e0:36:
         4e:22:29:4b:9b:49:e2:1c:d9:2e:41:e0:c0:a9:e8:4d:70:51:
         72:a6:3c:60:3f:1c:59:07:75:cd:e4:40:e3:5f:50:ae:51:22:
         d1:34:88:6e:ef:c6:49:8e:f4:7a:c8:a2:41:68:df:b5:ff:84:
         00:8d:51:25:4b:67:2b:32:14:71:24:8c:3f:59:3b:92:8f:64:
         14:be:93:4e:ea:29:02:39:b0:21:8e:2a:0b:6a:e1:80:0c:cd:
         e9:3a:b5:28:ee:e9:b7:eb:62:7e:bd:35:23:56:8d:e5:3b:b3:
         be:a3:45:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:26:35 2024 by rpki-client on console-ams.rpki-client.org