Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb72494f-a58d-3e9c-a525-9b713e0fd9ed.roa
File:                     fb72494f-a58d-3e9c-a525-9b713e0fd9ed.roa (raw, json)
Hash identifier:          VZDqAusO1ehnDmHoKwLgeMvnh3u7UCU0eiJfjBYHrUU=
Subject key identifier:   83:1A:DB:05:81:9B:52:36:9C:0F:5D:F2:36:E4:61:CA:0D:1D:3B:BA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AE36D73158E3F2846C279300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb72494f-a58d-3e9c-a525-9b713e0fd9ed.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        2600:1409:7800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:d7:31:58:e3:f2:84:6c:27:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=4ca28c2b-36e9-4b3e-bad6-3cc48c70f9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:14:7e:db:cd:2a:0a:b2:ab:50:64:36:7a:
                    96:ac:fb:4a:d2:8b:f2:67:bc:fd:d6:46:83:43:05:
                    40:73:29:21:93:f5:0b:dd:0f:9e:96:56:0c:ad:13:
                    2e:34:5d:c1:aa:00:79:c3:02:9b:fc:64:bd:1e:1c:
                    81:84:b2:1d:48:a3:b1:17:b9:43:5d:a8:40:5c:8b:
                    fd:56:15:ca:cc:f7:58:55:a5:be:86:73:5b:2f:3a:
                    26:df:2c:6f:cb:e5:be:1c:4d:d7:6d:91:0b:d2:de:
                    01:fb:87:bc:49:6a:17:60:24:06:0b:1b:86:25:de:
                    fd:f5:41:fb:4f:43:fe:cb:d8:26:83:3a:44:c0:c3:
                    d0:f7:15:3e:41:d8:01:ab:5d:ed:a4:ab:d3:ad:18:
                    7a:cc:2b:df:10:1c:34:0d:aa:6b:9a:63:69:9e:08:
                    b2:a0:b6:f6:ed:4e:98:b6:e0:78:fb:b9:70:89:d7:
                    4b:12:65:7e:c7:0d:6f:80:34:a5:75:4c:20:9c:6f:
                    c2:5f:05:e1:56:c8:78:1a:21:18:ea:7f:58:94:69:
                    6d:8c:bd:e6:36:0d:71:60:68:13:b4:bb:24:e6:4a:
                    06:f6:fb:ae:53:15:41:79:9a:fc:23:4b:86:ca:71:
                    7f:3a:cb:c2:07:fb:f0:99:d1:2f:4d:b3:8f:6b:65:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1A:DB:05:81:9B:52:36:9C:0F:5D:F2:36:E4:61:CA:0D:1D:3B:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb72494f-a58d-3e9c-a525-9b713e0fd9ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1409:7800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:f6:bf:58:d9:42:7b:62:56:b8:ba:07:ee:c2:a6:0a:25:47:
         f5:87:3c:d7:cb:ae:cb:19:bd:f1:55:14:e2:ff:55:12:f3:3c:
         bd:e6:ca:be:41:9b:79:2f:3a:ea:44:78:23:20:3f:22:1e:45:
         de:4e:85:b9:30:be:8c:83:f2:9e:75:ce:7d:f5:3b:d5:41:44:
         03:89:58:12:f1:98:33:97:2e:db:ef:7f:16:2d:dc:8f:c6:19:
         97:bf:3d:e2:ac:72:db:1e:23:6b:4c:bb:0b:a4:98:a2:da:e2:
         1a:70:4e:cc:26:e3:12:29:07:c0:25:40:3c:4d:a5:3b:19:17:
         23:24:74:16:89:34:c8:00:bb:f0:40:29:62:ca:93:32:c0:ee:
         6f:d4:ac:0d:f4:10:4c:a6:0a:bf:0f:ff:6b:3d:af:64:f6:4c:
         7f:1a:ab:12:a1:ed:12:18:6e:8c:59:0c:3f:c2:a2:a1:a6:86:
         b8:5f:52:e9:15:ad:c1:19:65:f0:6a:9f:69:58:32:00:7c:14:
         75:8c:be:0b:bc:f0:6c:fd:c8:12:e6:7b:3d:03:37:39:7d:94:
         4d:fa:95:ff:5c:f8:16:8e:68:0c:a4:d7:53:e3:8e:62:0e:5b:
         4c:72:81:20:cc:d0:26:29:1c:c9:30:fa:0e:9a:ee:7b:25:4b:
         0c:3f:30:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:47 2024 by rpki-client on console-ams.rpki-client.org