Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3208943-400d-36ba-b3e1-c64e32ba8e2e.roa
File:                     f3208943-400d-36ba-b3e1-c64e32ba8e2e.roa (raw, json)
Hash identifier:          z55H07QaGKan4JnQXVPzPkXQ06ErBCFrlAoozrTgDjY=
Subject key identifier:   C5:CF:11:FE:A8:15:22:15:21:9C:07:2D:50:5F:F9:43:7D:E6:93:2F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B696C37C2A5C245536125B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3208943-400d-36ba-b3e1-c64e32ba8e2e.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        2600:140b:d400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:c3:7c:2a:5c:24:55:36:12:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=698a41c4-a269-4478-8b0a-8535d585f9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:07:0c:c6:54:18:f6:51:2c:4a:2e:7e:39:93:
                    b3:9c:02:f9:80:59:eb:00:21:f1:ef:ab:14:7a:b1:
                    1b:05:02:df:38:5d:fe:d5:86:fc:12:df:c3:65:2a:
                    95:04:1b:15:0a:9b:a3:c0:cf:6b:e7:8a:83:9d:7c:
                    9b:65:8c:85:2a:97:07:63:06:72:3d:92:f5:72:38:
                    80:13:d3:08:85:2a:59:8b:17:12:89:aa:5a:2d:83:
                    f1:51:cb:2a:04:d7:c9:99:40:d0:d1:7c:b9:9c:aa:
                    64:da:f7:0d:d9:9d:af:09:11:3f:06:e5:f2:2f:6e:
                    3f:cc:a8:98:39:01:56:92:2c:4f:36:55:5c:f0:3b:
                    93:51:28:39:f4:86:98:fc:5c:4b:f1:6c:06:cd:d3:
                    b0:51:80:a9:89:e5:b5:ce:6a:19:b0:2f:c0:05:26:
                    54:19:be:16:26:b9:65:6b:c1:12:8d:cb:62:24:00:
                    64:da:12:c0:a0:ff:fd:af:9c:bd:de:6e:1d:29:e4:
                    c8:df:4c:36:1d:11:fa:fa:01:d8:1c:4f:14:2c:bf:
                    f8:ac:08:64:da:4c:7a:e3:8e:50:dc:f8:82:90:10:
                    67:5a:16:f3:d3:cf:25:c4:b8:48:bc:8b:61:81:f3:
                    b1:9e:2d:c1:8f:78:4e:2a:b5:33:9f:20:97:db:2b:
                    ea:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CF:11:FE:A8:15:22:15:21:9C:07:2D:50:5F:F9:43:7D:E6:93:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3208943-400d-36ba-b3e1-c64e32ba8e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:d400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ac:a2:00:2c:c9:77:34:5a:c4:5a:5e:4b:c0:38:05:01:b7:
         20:e7:e0:cf:f7:cf:4b:f4:12:92:94:97:17:b9:9a:32:42:03:
         0f:27:80:ba:0a:74:8c:a5:50:82:86:b2:c1:3d:c0:85:90:11:
         27:69:55:31:a8:a8:50:f9:ef:d7:d7:05:ef:74:09:83:73:f8:
         e3:d0:d7:1a:fa:0e:b2:7e:1c:8a:65:0a:eb:25:8f:41:ba:b7:
         90:f7:ff:fb:4f:15:29:6f:d7:ab:b4:66:7a:8d:ad:69:e3:65:
         10:54:ea:bd:9e:eb:20:84:2e:be:98:f8:46:e1:1a:59:80:59:
         a3:de:eb:5b:52:46:34:13:9c:c0:df:40:33:d7:18:3b:85:ee:
         a0:88:e3:8a:3c:dc:31:47:b7:1e:be:c8:19:55:c4:b5:d3:4a:
         6a:cd:a5:5b:bd:b4:d8:25:f8:4c:0e:6e:13:5c:00:4a:1a:a6:
         5f:d1:19:77:45:1c:4e:5a:92:44:29:af:9a:37:6d:7f:90:2c:
         a3:0b:52:bb:ba:5e:b9:11:d3:14:60:d1:72:31:1f:a4:44:be:
         1d:f9:cf:9f:94:ed:a9:e9:33:c8:09:97:fb:1f:79:bf:fa:bb:
         c4:e8:e3:e2:82:c0:38:da:77:73:10:48:ea:db:e6:9d:31:be:
         c3:cd:aa:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:43 2024 by rpki-client on console-ams.rpki-client.org