Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb8b3774-fe5a-33d0-9fd5-09cfd47884c5.roa
File:                     fb8b3774-fe5a-33d0-9fd5-09cfd47884c5.roa (raw, json)
Hash identifier:          rhS/IjE+/Qzzy9xvqKbYekQQJj5PPmH8QHVsB6GwvWg=
Subject key identifier:   2B:8A:A2:CC:C4:03:08:5F:69:15:97:B8:D0:F4:40:1E:6E:7D:09:B4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847CD09F8655CC23F30D2A9FD80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb8b3774-fe5a-33d0-9fd5-09cfd47884c5.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     24319
IP address blocks:        2600:140b:6800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:f8:65:5c:c2:3f:30:d2:a9:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=0902b087-8fc0-40a0-8ee3-f58447e0a57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c1:5a:2f:e5:1f:1b:10:a2:96:ba:db:4d:11:
                    68:25:07:fe:e2:99:44:3c:0b:0a:67:38:eb:02:5c:
                    f0:57:ff:12:68:52:31:0a:24:6e:49:32:e1:6c:44:
                    ea:44:42:07:e8:03:94:28:dc:da:70:52:d8:4b:74:
                    32:82:1f:78:da:db:b1:5d:1a:0f:c6:71:94:e7:66:
                    da:88:2a:13:13:86:03:bc:00:7b:38:4e:25:22:2f:
                    a7:02:ae:94:8c:22:72:ac:fe:7a:33:57:91:fb:be:
                    7d:fd:e0:a7:d2:fb:52:2a:77:18:8e:bc:25:8e:10:
                    5b:ed:f0:64:73:e2:d7:6d:27:91:80:2d:4c:6f:bf:
                    f5:b9:00:4a:2d:10:4c:ae:78:83:f5:41:80:e7:a4:
                    38:bc:8c:92:aa:a0:85:8a:d8:5d:96:5e:a9:6c:1f:
                    67:ec:2a:7b:10:42:3d:82:72:ba:1b:57:4e:51:69:
                    61:cc:0f:6a:8e:2f:12:0c:77:fc:bf:48:e9:8f:ff:
                    12:09:38:a0:11:53:43:24:41:58:90:77:e5:26:19:
                    5f:5e:d4:0f:b3:ec:2f:8c:3e:2f:0a:4d:fd:02:ae:
                    5e:1e:83:86:c9:56:92:da:df:02:63:bc:19:9d:c5:
                    77:c5:2c:13:23:e3:f6:41:54:29:82:2f:c4:1f:7a:
                    5a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8A:A2:CC:C4:03:08:5F:69:15:97:B8:D0:F4:40:1E:6E:7D:09:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb8b3774-fe5a-33d0-9fd5-09cfd47884c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:6800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:78:dc:18:fa:03:75:63:9a:b9:ce:03:23:52:5c:6e:70:6c:
         ce:79:59:69:25:b4:cf:1a:85:f9:06:19:eb:67:9f:d0:f9:8b:
         60:de:cd:4e:47:91:1b:f8:7f:54:43:84:83:57:f3:23:a7:0c:
         a8:c2:9b:3d:32:79:9c:1f:93:35:c8:39:94:16:60:f9:fa:cb:
         55:f3:d7:ad:af:d4:92:a6:ce:52:f8:6a:d4:40:99:94:bc:84:
         cb:0d:e2:c7:68:54:82:dc:7b:be:0f:1e:d6:a5:d3:8f:d0:0b:
         99:4b:42:b9:1b:38:26:20:b1:a7:ed:99:68:7a:47:09:65:ca:
         20:e9:4d:82:d1:1b:4b:b2:3d:45:47:4a:37:e4:c5:31:01:6e:
         83:89:46:24:67:4f:b1:9d:2e:c0:7b:a2:40:24:f9:89:f6:8d:
         b0:bc:e4:13:09:88:04:fc:a1:7e:79:de:bb:a4:60:42:3e:be:
         9e:a6:8b:2f:65:62:4f:3c:7d:7b:ee:48:13:ae:d6:c7:1d:c0:
         d5:58:d0:0c:cf:7f:24:20:7b:a8:3f:7a:3c:0b:cf:47:02:18:
         c4:f4:c0:4c:96:14:f9:16:60:3f:6e:bd:46:16:0f:5e:1d:ca:
         51:ad:19:bf:38:d2:51:38:e9:cd:71:9b:af:45:4c:26:1e:03:
         82:db:74:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:13:42 2024 by rpki-client on console-fra.rpki-client.org