Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee9717dc-d6b3-3346-aab9-1309c65eecee.roa
File:                     ee9717dc-d6b3-3346-aab9-1309c65eecee.roa (raw, json)
Hash identifier:          RGYGq/oQok1wYBv5cVd/h573D4JL28HUEOSs7FzSmOo=
Subject key identifier:   9B:2A:C9:D4:3B:44:B7:08:F0:EF:DD:70:EB:83:F7:9D:87:E7:6A:8F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C1DF64ED07CD790E92810F40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee9717dc-d6b3-3346-aab9-1309c65eecee.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     20940
IP address blocks:        2600:1406:6400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:64:ed:07:cd:79:0e:92:81:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=10e5cf26-231f-47f0-b425-4d1575f2748c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bd:10:0b:ca:5b:5f:6f:17:c1:41:d5:bd:5c:
                    51:8a:7e:79:ae:8b:78:a2:74:a2:5b:98:ec:ac:cb:
                    ab:29:fb:3c:ed:4a:0a:c0:ee:6b:1b:94:fe:1c:39:
                    35:e2:21:fc:04:d6:04:66:52:76:fd:66:e7:ce:03:
                    70:d7:1b:f0:5a:29:03:d4:8a:97:04:61:dd:dc:90:
                    63:10:9c:71:bd:f9:dd:c5:e2:08:ea:e7:65:06:93:
                    8e:37:5c:fb:94:cb:f1:42:9a:ce:fc:70:65:68:2d:
                    13:7f:41:8f:c4:d6:57:9a:ec:e1:13:29:f4:65:44:
                    a6:e2:e6:f8:f8:2c:60:0f:fb:95:4d:f8:83:1f:75:
                    7c:cd:b0:93:61:54:23:25:53:b3:3d:1c:fe:f9:17:
                    ef:b3:98:65:a8:c4:0e:d7:19:53:e4:b1:9e:ad:7d:
                    34:50:5b:f6:54:d6:99:a3:48:ac:a7:df:a0:71:07:
                    64:0a:1b:2a:74:c2:e7:8c:a6:07:81:58:30:91:9d:
                    6a:d7:51:22:fa:0d:99:c4:c0:78:0e:c8:f4:cf:00:
                    b1:4a:7e:19:5a:00:07:d7:19:d2:0a:3a:03:38:ed:
                    a0:50:31:9b:72:77:0a:8a:b0:f4:15:82:04:90:73:
                    15:2f:90:f1:fa:de:95:37:1d:5f:b8:72:93:9d:52:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2A:C9:D4:3B:44:B7:08:F0:EF:DD:70:EB:83:F7:9D:87:E7:6A:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee9717dc-d6b3-3346-aab9-1309c65eecee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:6400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:15:b1:df:40:d8:fa:45:a1:d0:ca:06:58:23:bb:89:c8:84:
         9d:30:44:38:9f:38:94:dd:cf:e4:fe:12:ca:b5:f7:f4:b7:66:
         7b:3c:4a:a5:7a:b3:d9:9b:28:ef:b9:a1:bf:0a:4f:33:d3:c5:
         21:b1:0a:7f:33:d4:28:8e:6e:b2:c5:30:8c:09:e4:ab:69:0d:
         68:bf:5b:bb:1e:ac:4e:f7:be:17:57:2e:c0:0e:80:cb:3e:27:
         5a:b5:cc:89:b3:2b:f5:c4:2b:2a:c7:f5:c3:a7:f0:2b:71:b7:
         58:1a:c4:02:1a:ba:b7:0a:ea:f6:75:fd:1e:68:56:b1:4d:f6:
         79:fe:13:0a:1d:3a:fd:71:4f:ac:30:37:ad:45:42:4f:a2:b3:
         25:23:f6:0b:cd:ef:40:44:a1:d9:83:2c:29:d2:ec:09:c7:ab:
         a1:55:90:b7:e3:c6:7a:b0:32:e4:b0:5b:06:9e:4f:25:18:86:
         38:59:a1:30:e7:ef:7c:19:42:29:ad:92:9c:28:33:9f:bf:70:
         37:3d:8f:fa:73:37:e5:bd:05:20:32:c6:8b:c7:60:bd:c5:aa:
         b2:df:5a:23:ad:b3:08:b7:67:f0:ce:48:53:a4:05:e3:46:d5:
         19:28:6e:45:2d:45:9c:d5:00:ea:d5:05:17:5e:5d:8d:27:88:
         4d:57:2d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:41 2024 by rpki-client on console-ams.rpki-client.org