Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd57a67e-4c3b-36cf-9c0e-a0e02f630b2d.roa
File:                     fd57a67e-4c3b-36cf-9c0e-a0e02f630b2d.roa (raw, json)
Hash identifier:          YhNhjaoBWsX/0Z97PN0up8A30mhJsiA0geqft80bdtQ=
Subject key identifier:   99:5E:B0:07:4A:79:96:64:95:CF:D0:EC:F5:8E:71:99:1C:57:81:15
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B696C435089EADCE1DF96C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd57a67e-4c3b-36cf-9c0e-a0e02f630b2d.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        2600:1410:b000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:c4:35:08:9e:ad:ce:1d:f9:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=a4f33b96-b512-4041-a63b-6b1435811f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2a:70:c2:83:50:c8:80:82:68:0f:ff:d3:99:
                    b3:a6:42:32:a8:f8:8b:b1:3d:74:fa:4c:9f:0a:9d:
                    7f:b7:2a:4a:e9:3e:ef:34:02:88:12:58:e9:98:dd:
                    09:8f:75:66:aa:7a:ca:d4:fc:27:28:bb:4a:58:68:
                    40:3e:94:f2:45:b4:4e:15:9a:e5:8b:44:41:83:b8:
                    1c:db:73:37:c3:f6:55:8f:9a:d4:8c:60:a1:e8:9d:
                    b4:8a:8e:84:2b:5c:b8:f7:22:a3:44:c7:b7:17:b9:
                    25:3a:1f:79:4e:d8:4f:ab:46:a0:13:ba:fb:1e:15:
                    5e:84:35:e2:25:73:3e:e7:f7:2b:d8:ae:c6:8b:c6:
                    14:b0:e8:a6:8e:f5:95:02:f7:86:42:d9:0e:03:d2:
                    2a:3b:85:56:bd:37:6a:ea:67:fd:80:73:06:27:2a:
                    6c:76:7a:96:39:f2:d8:90:08:bd:22:eb:f1:8d:b2:
                    67:e1:36:23:6a:da:37:7a:1e:9a:45:1a:db:37:fe:
                    ac:59:19:b3:7e:f1:52:e0:bb:9c:21:4e:6e:de:c5:
                    2a:1b:98:cb:b4:4f:df:4b:96:c4:d1:7b:ff:f3:05:
                    2b:0e:aa:22:a0:20:64:bf:70:fa:f6:74:62:f4:4a:
                    3b:4a:d4:42:7a:bf:b6:a9:d9:75:58:77:ff:1d:3d:
                    01:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5E:B0:07:4A:79:96:64:95:CF:D0:EC:F5:8E:71:99:1C:57:81:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd57a67e-4c3b-36cf-9c0e-a0e02f630b2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1410:b000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:6d:0e:66:9f:b1:a7:d0:e8:42:f3:0a:57:ce:ad:6d:71:de:
         7e:8b:a3:ec:c3:4b:ea:95:2a:cd:2e:ed:d5:48:b6:02:66:39:
         b4:6a:14:59:0a:5c:49:ef:54:fd:b1:02:84:48:a6:f8:80:1a:
         1c:75:b9:c6:db:a6:b6:b5:f0:64:a7:82:9b:81:64:e6:46:22:
         e9:b3:28:1c:57:13:50:43:4d:ce:3c:bf:7d:5d:f8:aa:42:58:
         94:3c:2b:6a:76:52:bd:b3:db:cc:e0:1f:89:93:e3:a6:c0:37:
         da:95:70:66:0b:3e:af:8c:56:18:97:35:50:4f:76:c7:0e:58:
         21:d9:da:7d:6a:aa:10:8a:df:35:13:ec:4f:20:eb:95:96:d9:
         b5:6e:b5:17:01:3e:15:a6:f7:55:03:76:e3:02:b7:f6:f7:28:
         df:ff:50:b0:69:13:bc:1f:80:2b:d2:d8:51:a3:6c:fe:3d:89:
         6f:97:5e:e5:1b:a5:58:68:0c:50:19:68:d2:f6:d8:cb:87:d4:
         97:3c:00:38:db:56:46:f7:80:82:23:78:3a:51:1b:ee:d4:2d:
         d8:92:aa:f3:1d:8e:88:a3:bb:a5:4d:80:ba:3c:9b:4b:60:b8:
         b9:ff:ce:2f:c3:a0:08:42:39:1c:f0:d9:43:9c:60:74:9d:4b:
         87:46:18:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:59 2024 by rpki-client on console-fra.rpki-client.org