Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/e239f5a3-1376-3dea-9101-a7a67a437145.roa
File:                     e239f5a3-1376-3dea-9101-a7a67a437145.roa (raw, json)
Hash identifier:          z/q42LFF4xIEFF+RRwzgR0nZdA5VGgnQT0iUUmfQ+wg=
Subject key identifier:   B2:E3:76:99:DC:40:9B:85:4A:F0:F3:F7:F5:83:ED:63:EA:CD:A3:2F
Certificate issuer:       /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b
Certificate serial:       010D0C9F432858473095E5B5B1FB251618AEE380
Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/e239f5a3-1376-3dea-9101-a7a67a437145.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     46408
IP address blocks:        2600:1e00::/28 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:e5:b5:b1:fb:25:16:18:ae:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=b9fbc7f7-093b-4f98-bc9e-196b586b1e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:5b:3f:53:07:ac:8c:1c:15:7b:80:60:4e:
                    4b:b0:6d:08:b6:ea:f4:0a:0e:76:5a:b9:ea:b0:3d:
                    16:03:4e:ca:85:40:26:b5:9c:38:b6:42:fc:72:f5:
                    64:85:1b:f6:de:6a:86:92:e8:20:68:c9:0f:ab:d4:
                    a6:d7:da:46:db:17:28:20:f7:ae:d6:c8:11:26:89:
                    48:db:a8:dc:b8:b0:53:27:b3:08:00:21:b3:26:1d:
                    85:26:2b:64:40:82:57:1d:a4:b0:85:83:ec:f6:8e:
                    6f:50:3f:da:b7:71:0e:a6:07:af:48:f9:ef:45:46:
                    d8:e4:b5:21:01:53:ce:72:06:31:c4:12:80:31:ef:
                    04:c0:ca:b0:ff:91:df:19:63:6a:86:c7:9c:0b:bc:
                    04:5a:f8:4e:d7:b1:0f:0b:e9:f2:f4:d1:e2:52:d4:
                    a0:23:ed:47:22:1b:ae:7d:5d:2a:fa:c5:22:48:59:
                    e4:aa:d9:49:fc:01:a8:0d:b0:4c:ef:09:53:aa:5a:
                    fe:25:8d:e1:34:ce:e6:72:ca:c9:5b:90:e3:6c:03:
                    50:d8:49:4a:c7:dd:e7:cf:9a:14:c4:5a:8d:c2:fa:
                    d1:2b:74:89:38:e4:d3:a3:36:49:89:7c:ae:a1:0a:
                    62:26:50:14:e2:5e:5d:9c:6d:48:9f:13:5b:2c:fa:
                    2b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E3:76:99:DC:40:9B:85:4A:F0:F3:F7:F5:83:ED:63:EA:CD:A3:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/e239f5a3-1376-3dea-9101-a7a67a437145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl

            X509v3 Authority Key Identifier:
                keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1e00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e3:a0:a3:2d:64:29:b9:b5:64:af:a0:11:88:26:64:3f:3b:
         77:08:83:e9:4c:ae:e9:7c:4f:7d:8c:b2:83:ff:f6:db:ec:1e:
         dc:f3:51:67:6b:9f:5f:d8:ae:36:20:d9:29:46:e2:73:80:40:
         53:fd:02:13:e6:5e:89:0b:73:d9:52:04:44:b5:1d:d2:e1:13:
         8e:de:1d:6f:54:db:4c:a4:95:06:46:e7:f9:5d:13:48:3e:50:
         ce:6b:c1:34:2a:02:c3:ca:b4:eb:d5:4e:71:58:a0:ce:85:62:
         7b:02:c7:3d:99:2d:48:a6:41:31:8a:82:7e:61:87:57:d5:99:
         52:f0:f5:80:f6:f7:8d:eb:ae:1a:69:3e:ef:b6:67:27:08:75:
         6c:33:48:69:15:2e:2a:28:4b:3e:ac:d0:43:4f:86:90:c6:87:
         37:a9:b6:5d:2f:72:71:6b:04:4e:e0:fe:56:8f:80:8e:98:b5:
         d0:a6:83:60:c1:b2:e8:2f:bb:2d:22:65:39:c3:78:d3:0f:94:
         d4:cf:ab:15:ff:8e:a0:bd:c1:de:ec:8d:09:c4:93:0d:e4:cc:
         e3:1d:e0:56:0a:2f:7a:af:02:44:64:17:9b:7f:92:b1:f9:72:
         fb:20:22:61:44:77:b7:0a:c6:78:75:a6:f9:4d:88:30:c8:75:
         5a:b3:d2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:52 2024 by rpki-client on console-ams.rpki-client.org