Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01edf865-2110-3a1c-a4e1-f2ec6b9fb953.roa
File:                     01edf865-2110-3a1c-a4e1-f2ec6b9fb953.roa (raw, json)
Hash identifier:          yxqxZdg7Tim3Cc5r/A7mxNcxCS6j7UvtdztIkXk6dVg=
Subject key identifier:   86:13:10:C2:E7:47:A1:C0:9C:A0:05:F9:8F:3F:4C:06:0B:11:80:A0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846E3E1A81981F438B16ECDA180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01edf865-2110-3a1c-a4e1-f2ec6b9fb953.roa
Signing time:             Fri 16 Aug 2024 01:36:11 +0000
ROA not before:           Fri 16 Aug 2024 01:36:11 +0000
ROA not after:            Thu 14 Nov 2024 02:36:11 +0000
asID:                     6167
IP address blocks:        2600:100a:b1e0::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:e1:a8:19:81:f4:38:b1:6e:cd:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:36:11 2024 GMT
            Not After : Nov 14 02:36:11 2024 GMT
        Subject: CN=2d259e90-4431-41f8-abc4-3ab06a96b5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:35:c9:b2:70:88:ca:59:d2:eb:84:75:77:
                    1f:5f:f5:26:73:5b:d3:ab:4a:54:94:ae:d7:4f:0d:
                    37:04:31:42:58:01:4c:02:c7:cc:4f:2b:86:07:ec:
                    3e:8c:48:2e:72:ee:9f:7d:fe:40:6c:95:5e:e3:ba:
                    b5:cd:6c:b7:b9:53:6d:d1:d1:6d:2f:dd:99:45:37:
                    db:32:17:52:f0:ab:f5:fa:0b:27:d1:69:57:8e:d5:
                    c2:53:d8:10:75:5c:b2:4b:28:95:e7:56:b5:1a:c1:
                    09:1d:25:c7:8e:de:88:d7:11:39:9f:4d:87:5b:33:
                    66:6a:4f:45:f7:83:fb:25:17:28:e3:b1:0b:04:e6:
                    41:8f:3d:ff:f7:cd:88:39:9b:7c:ef:f6:40:6b:91:
                    ed:84:05:76:92:61:45:d0:c3:34:79:48:d8:c7:99:
                    87:4b:17:da:5f:ff:01:db:08:fb:6f:d5:a7:03:98:
                    fb:bc:b3:a9:19:79:08:04:d9:75:41:a1:77:9f:ac:
                    04:1d:77:72:25:03:17:0d:0a:78:45:a8:db:47:93:
                    e5:41:79:9b:a1:3d:bd:7e:f9:85:26:bf:f1:87:f7:
                    0f:dc:2e:14:f2:3f:3c:78:81:e7:c5:8b:e6:8b:0b:
                    da:05:94:99:42:48:c0:9f:eb:39:dc:e4:40:57:87:
                    7e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:13:10:C2:E7:47:A1:C0:9C:A0:05:F9:8F:3F:4C:06:0B:11:80:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01edf865-2110-3a1c-a4e1-f2ec6b9fb953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:b1e0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:64:ba:a9:b3:12:55:12:c3:e0:6f:c3:bd:78:b9:e0:4b:fc:
         f3:2d:23:1d:75:27:f0:d6:d4:56:44:96:4c:86:7c:b8:c2:7c:
         d5:f8:ee:9b:6a:96:50:f3:86:ba:6d:d6:58:29:de:82:22:28:
         c1:23:c9:ba:6e:92:e9:1c:14:e1:5b:e4:4e:64:4d:70:32:ae:
         2b:29:9e:cb:08:ad:47:0c:d4:d3:ce:b1:29:19:c2:8a:47:39:
         e4:52:04:2d:1d:b9:5f:22:ad:5c:53:8e:23:c9:90:7d:92:4d:
         82:d5:79:9c:1a:78:61:37:b7:2c:e6:a9:1e:b7:6c:92:75:49:
         df:71:7e:2a:f2:98:18:e9:fd:e7:5b:5c:ad:e4:c6:bf:dc:33:
         9c:7e:13:6c:10:fd:81:78:0d:fc:37:70:63:93:4c:e7:25:bf:
         61:fd:ee:06:9b:fc:64:46:91:81:e7:89:dd:5b:b5:e0:c3:d5:
         1a:0e:5c:42:b7:f5:18:0c:56:26:22:e2:f9:90:68:cb:ef:c1:
         a7:27:52:ed:9c:75:fb:ab:1e:06:2e:b6:9d:68:ce:50:b3:a1:
         7c:02:bf:8e:5e:e7:0e:6b:eb:55:9c:30:f4:af:22:8c:1f:3d:
         3e:32:67:8b:f1:0d:31:d1:40:c0:89:ca:d2:8a:d3:0a:19:04:
         0e:98:f6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:22 2024 by rpki-client on console-fra.rpki-client.org