Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef414330-5dc5-3905-8f06-47b953191411.roa
File:                     ef414330-5dc5-3905-8f06-47b953191411.roa (raw, json)
Hash identifier:          A2PIE/33mr1tFouV77YczZSfKFVcMfa3y+TI3naudXU=
Subject key identifier:   A8:B2:BC:3F:3D:45:74:7D:97:12:F4:E1:64:F0:76:9D:CB:76:88:EC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858457A488B602EC94D0A957139F8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef414330-5dc5-3905-8f06-47b953191411.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     33905
IP address blocks:        2600:1480:6000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:8b:60:2e:c9:4d:0a:95:71:39:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=3577b7de-2e8f-443f-aa5f-22996ac4d123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8f:fa:1a:8c:04:0c:79:92:45:a8:e2:3e:68:
                    31:73:37:64:e3:f5:1c:24:dd:8e:7c:37:72:8f:29:
                    83:8b:23:39:fc:9c:0c:69:ac:c2:c0:a2:06:43:16:
                    d1:ae:5b:0e:f4:c7:c7:61:1c:06:71:fc:0d:36:b6:
                    c1:e9:69:80:65:1a:de:ad:0b:f7:af:72:97:ee:1c:
                    b5:c8:aa:a0:72:8b:79:f4:f0:58:bb:71:a1:ff:2f:
                    92:14:21:5e:92:2b:12:f4:e4:a8:c1:b3:c6:0c:bf:
                    bb:a9:ca:61:b8:5f:96:cc:6b:cd:32:8f:49:1c:a8:
                    d2:d8:28:5a:e6:ff:13:db:63:61:fa:9a:fe:48:41:
                    8d:d1:be:e1:f8:57:7f:51:8a:22:34:27:61:ed:c8:
                    0f:71:07:2e:01:82:19:eb:f4:00:26:0c:5f:e5:9b:
                    b3:bc:3c:29:52:9d:80:aa:b5:2a:01:bf:e9:ab:24:
                    6f:32:e6:0c:80:a9:0a:ce:99:1c:1a:0f:da:a7:c9:
                    3b:6e:5b:a4:86:46:68:f1:67:68:25:02:03:05:ee:
                    a0:a4:8c:0e:47:21:47:96:0c:67:a2:b2:bb:c7:3a:
                    98:18:9d:9c:fb:a6:d5:e6:b4:59:9d:df:38:56:59:
                    8d:f5:e2:f9:fc:7f:74:6b:f5:53:21:7a:22:23:0c:
                    c8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B2:BC:3F:3D:45:74:7D:97:12:F4:E1:64:F0:76:9D:CB:76:88:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef414330-5dc5-3905-8f06-47b953191411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1480:6000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:42:ac:08:05:2d:88:be:cb:2d:b0:b2:b3:da:e4:c0:c0:71:
         42:a5:5b:e6:c5:4d:54:10:06:53:fa:8e:42:b4:92:65:c1:99:
         0f:64:44:1a:39:06:55:35:01:e8:18:66:8b:e9:97:68:3f:3a:
         57:0b:e0:16:df:30:0d:f0:2a:3a:1e:f3:88:fd:4f:e2:7b:67:
         0f:f3:fd:36:58:b1:3d:4b:71:01:e5:d1:88:51:e4:bc:f4:bf:
         90:09:66:a2:f6:b6:87:42:0d:45:da:fe:06:4e:4e:25:69:f6:
         a3:6e:44:5a:0b:97:4f:4b:4d:3f:d4:02:3d:af:a6:15:67:06:
         15:e6:68:56:dd:81:56:ad:37:d6:84:8b:a2:ae:1a:eb:a5:ac:
         e4:42:ae:94:88:91:61:f9:c9:90:77:4e:29:b8:48:3e:5b:4b:
         60:02:e1:e7:fa:bd:f1:51:dc:09:af:05:92:6d:09:5f:f0:2b:
         37:f3:8d:a8:18:44:85:0d:a9:f4:80:c4:0a:17:6a:a3:1b:4f:
         ed:7c:19:a8:42:55:d6:d7:e7:52:b7:24:be:75:08:42:88:23:
         0c:c6:51:a1:4b:bc:a6:a7:43:d4:a5:a0:7e:28:ae:bb:4f:21:
         73:a4:ff:f9:9c:c1:e3:58:46:63:81:e8:96:9a:89:13:12:b5:
         a8:de:49:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:36:43 2024 by rpki-client on console-ams.rpki-client.org