Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9cb6002-fc4c-33a8-82d4-0d3b8dfa340e.roa
File:                     f9cb6002-fc4c-33a8-82d4-0d3b8dfa340e.roa (raw, json)
Hash identifier:          jrAAKzNGFBuE46d414KHzGUdbNtoUEbsw8OBpqujzhM=
Subject key identifier:   FF:D9:0C:EA:29:5C:AE:6D:76:B3:24:E8:DF:10:20:51:83:CE:B1:E0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858451AFC247A316C918682267A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9cb6002-fc4c-33a8-82d4-0d3b8dfa340e.roa
Signing time:             Tue 05 Mar 2024 09:45:08 +0000
ROA not before:           Tue 05 Mar 2024 09:45:08 +0000
ROA not after:            Mon 03 Jun 2024 08:45:08 +0000
asID:                     20940
IP address blocks:        2600:1417:e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:fc:24:7a:31:6c:91:86:82:26:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  5 09:45:08 2024 GMT
            Not After : Jun  3 08:45:08 2024 GMT
        Subject: CN=fcf1d6da-a7f4-484c-ad38-64fb44bf2427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:2c:77:f5:04:db:98:8e:7f:a3:ce:2a:ef:
                    a9:6e:09:1c:fa:86:cd:a8:1d:6f:9a:cf:10:b3:89:
                    6a:cb:f8:d9:0f:4d:1f:37:db:ed:ec:31:42:33:65:
                    c4:f4:3f:75:4a:15:2f:96:cc:1c:c2:ee:73:23:bc:
                    1a:e7:57:0d:af:1e:01:02:4b:da:22:73:87:6c:ee:
                    d4:fd:82:e6:52:05:2d:98:4f:e0:45:05:c6:37:22:
                    2f:ea:8f:ff:63:e6:dd:55:47:79:8f:69:b2:4c:49:
                    84:1b:95:85:1b:97:85:c0:63:13:b7:de:c0:36:77:
                    92:f2:35:e8:6a:94:5b:71:d9:a7:a3:c1:58:0f:8b:
                    45:a9:d1:b0:54:58:17:6e:e4:51:d7:da:40:d1:6a:
                    db:e3:a7:7d:0d:74:e1:1f:d9:8f:24:74:07:2a:f1:
                    dc:f2:b6:f2:0b:17:91:90:96:3e:9b:b0:c5:68:bb:
                    66:dc:37:31:31:f1:40:b0:c0:bb:cb:ac:44:b8:ec:
                    f6:f8:3c:e3:a9:df:ec:1b:f3:69:c2:dd:8f:1d:3b:
                    c4:65:5d:dd:62:3a:6e:d7:a9:9e:95:b7:a2:d1:e5:
                    33:e7:9b:81:b6:c0:3f:b9:4f:cf:04:60:3d:93:1d:
                    ae:84:a5:e1:6a:0c:96:f0:4b:a4:89:88:0d:f9:e8:
                    65:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D9:0C:EA:29:5C:AE:6D:76:B3:24:E8:DF:10:20:51:83:CE:B1:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9cb6002-fc4c-33a8-82d4-0d3b8dfa340e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:30:d6:5f:04:e2:1b:df:da:b3:50:32:89:c2:a0:b8:2f:9d:
         a1:bd:37:0e:88:ab:0f:65:5b:76:02:5a:99:56:d0:91:43:61:
         4b:5a:b6:2e:a9:40:15:48:d8:5b:30:f5:c6:62:1f:0a:e5:65:
         7f:1c:b4:1e:33:96:82:b9:6d:11:f4:d0:9b:53:77:b4:66:46:
         d7:23:b0:ba:e6:90:f7:18:5d:01:a3:5e:99:55:6b:bb:19:a6:
         ea:e2:0f:52:b9:eb:f1:93:5f:9e:f0:aa:f5:9c:a3:98:52:30:
         a3:a1:c6:55:d0:b0:14:fd:aa:48:dc:a6:87:0b:f0:25:dd:ca:
         44:c6:25:c9:0f:b6:58:83:44:79:48:f6:65:17:8d:b6:fa:42:
         68:ab:d7:25:1b:43:e5:d4:8c:e2:28:3a:7c:28:f3:1d:ad:c2:
         2c:6d:11:4c:86:fd:d9:95:9d:8b:eb:f2:8a:96:96:3c:da:12:
         da:e1:53:21:d6:c8:27:7b:49:2e:d6:4b:2a:04:3a:ea:09:a6:
         aa:41:46:cf:df:5f:05:41:e0:97:16:59:eb:6c:d2:b2:bb:31:
         9c:f9:13:65:9a:0f:df:5f:7e:3c:8b:77:e7:83:39:80:4f:78:
         ea:b9:53:97:46:c0:6e:65:fe:70:4e:27:e0:fa:23:be:86:78:
         ca:0c:be:01
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUa/CR6MWyRhoImegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDMwNTA5NDUwOFoXDTI0MDYwMzA4NDUwOFowLzEtMCsGA1UEAxMk
ZmNmMWQ2ZGEtYTdmNC00ODRjLWFkMzgtNjRmYjQ0YmYyNDI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXksd/UE25iOf6POKu+pbgkc+obNqB1vms8Q
s4lqy/jZD00fN9vt7DFCM2XE9D91ShUvlswcwu5zI7wa51cNrx4BAkvaInOHbO7U
/YLmUgUtmE/gRQXGNyIv6o//Y+bdVUd5j2myTEmEG5WFG5eFwGMTt97ANneS8jXo
apRbcdmno8FYD4tFqdGwVFgXbuRR19pA0Wrb46d9DXThH9mPJHQHKvHc8rbyCxeR
kJY+m7DFaLtm3DcxMfFAsMC7y6xEuOz2+Dzjqd/sG/Npwt2PHTvEZV3dYjpu16me
lbei0eUz55uBtsA/uU/PBGA9kx2uhKXhagyW8EukiYgN+ehlnwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP/ZDOopXK5tdrMk6N8QIFGDzrHgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjljYjYwMDItZmM0Yy0z
M2E4LTgyZDQtMGQzYjhkZmEzNDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFwAO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG0w1l8E4hvf2rNQMonCoLgvnaG9Nw6Iqw9lW3YCWplW0JFDYUta
ti6pQBVI2Fsw9cZiHwrlZX8ctB4zloK5bRH00JtTd7RmRtcjsLrmkPcYXQGjXplV
a7sZpuriD1K56/GTX57wqvWco5hSMKOhxlXQsBT9qkjcpocL8CXdykTGJckPtliD
RHlI9mUXjbb6Qmir1yUbQ+XUjOIoOnwo8x2twixtEUyG/dmVnYvr8oqWljzaEtrh
UyHWyCd7SS7WSyoEOuoJpqpBRs/fXwVB4JcWWets0rK7MZz5E2WaD99ffjyLd+eD
OYBPeOq5U5dGwG5l/nBOJ+D6I76GeMoMvgE=
-----END CERTIFICATE-----
Generated at Sat May 18 01:58:27 2024 by rpki-client on console-ams.rpki-client.org