Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/029026db-be4a-34ad-a755-ccf7d447a20f.roa
File:                     029026db-be4a-34ad-a755-ccf7d447a20f.roa (raw, json)
Hash identifier:          BbcdRCoqQZS7MfrIP46EiHwYGSSmkh34zh7160MImnY=
Subject key identifier:   49:44:0B:E5:F5:3F:11:E2:08:BA:86:1A:34:56:27:78:AE:6C:6B:63
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBD1E61BA7CFB642269E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/029026db-be4a-34ad-a755-ccf7d447a20f.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1010:a021::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:d1:e6:1b:a7:cf:b6:42:26:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=a4335758-7f60-4b3c-8b05-804536c3562e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2f:81:77:3c:71:39:15:c9:c6:36:50:d1:3f:
                    e1:1d:b2:9d:0a:68:9e:e2:b5:c4:1c:8c:1d:dc:f7:
                    c8:8e:2f:61:91:a3:fc:c4:61:2e:7f:43:9e:2e:e8:
                    63:cb:5b:a4:80:73:70:6b:07:70:67:28:18:60:ae:
                    17:d5:28:e3:33:92:ad:d7:64:d2:3c:80:07:96:d3:
                    8e:b1:f7:08:f1:63:52:e4:6f:0d:cc:21:00:80:8e:
                    ce:c0:2f:9e:ae:10:2b:9c:0b:32:4d:a4:88:0b:b4:
                    b6:57:47:9d:21:23:c1:ba:e7:29:96:7b:24:0c:19:
                    ff:c8:ec:07:ab:51:7c:3c:01:ce:59:ff:93:19:31:
                    36:b3:70:fe:a4:dd:4f:5f:ae:83:05:85:f5:9f:5c:
                    ba:fb:4c:c9:78:6b:62:38:be:89:c8:84:75:0c:fe:
                    db:98:f0:2d:6e:5b:94:9f:ad:dc:73:26:c4:97:ed:
                    b2:4d:49:fc:74:d0:f0:1e:a1:10:6c:d9:bf:88:00:
                    24:e1:a2:5f:da:f6:cc:e4:7c:36:08:ee:4b:0f:93:
                    61:87:b9:9d:32:11:05:20:b1:09:90:e2:0b:4a:63:
                    69:4f:05:6c:d0:a6:2a:26:af:c0:8f:94:1a:dd:b8:
                    5d:a0:d2:95:44:d4:68:43:2c:b0:ad:e9:f2:ae:d4:
                    eb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:44:0B:E5:F5:3F:11:E2:08:BA:86:1A:34:56:27:78:AE:6C:6B:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/029026db-be4a-34ad-a755-ccf7d447a20f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:a021::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:06:02:73:40:7b:3d:1d:71:d0:97:cf:9b:ce:d4:f1:36:57:
         0a:b5:38:1f:85:7b:c5:8a:96:76:83:f9:d4:d6:b5:eb:6c:f0:
         c4:9e:1d:f6:7c:1f:05:af:bb:8c:37:59:0a:56:1b:8d:1a:a7:
         2f:01:ff:63:58:f3:9b:a9:19:53:57:eb:98:44:e4:e0:ba:40:
         aa:bf:1a:5c:a1:5b:9a:2d:8d:d4:65:f2:3c:08:ba:66:c7:e5:
         03:c3:cb:d7:49:19:9b:2b:44:a5:91:2e:07:46:0a:49:c4:93:
         4f:8a:be:74:59:5b:e4:92:2e:0d:d6:a2:4e:09:39:2f:ca:28:
         56:d1:95:9f:62:99:ec:d7:1b:d3:39:94:98:d2:42:02:57:b0:
         65:87:40:18:61:12:a6:a0:73:82:c1:f2:1b:ae:1d:0f:25:5b:
         db:67:4f:19:33:ed:00:5d:35:60:fd:c4:03:b1:31:54:24:d4:
         e6:79:25:87:7e:89:f2:b9:31:f7:fa:e8:cd:d8:b8:a7:60:bd:
         06:97:46:13:e3:4f:8a:eb:85:90:58:56:85:5c:15:ca:ee:8b:
         ec:98:72:b0:b8:42:0e:66:73:8a:8e:5d:18:2d:b5:ed:3d:3b:
         d1:f6:9b:79:ed:8d:b9:49:cb:fb:f9:5b:5d:2c:ff:37:ec:e3:
         77:fe:2e:8d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeJ69HmG6fPtkImngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAxNDEzMDA0N1oXDTI1MDExMjE0MDA0N1owLzEtMCsGA1UEAxMk
YTQzMzU3NTgtN2Y2MC00YjNjLThiMDUtODA0NTM2YzM1NjJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi+BdzxxORXJxjZQ0T/hHbKdCmie4rXEHIwd
3PfIji9hkaP8xGEuf0OeLuhjy1ukgHNwawdwZygYYK4X1SjjM5Kt12TSPIAHltOO
sfcI8WNS5G8NzCEAgI7OwC+erhArnAsyTaSIC7S2V0edISPBuucplnskDBn/yOwH
q1F8PAHOWf+TGTE2s3D+pN1PX66DBYX1n1y6+0zJeGtiOL6JyIR1DP7bmPAtbluU
n63ccybEl+2yTUn8dNDwHqEQbNm/iAAk4aJf2vbM5Hw2CO5LD5Nhh7mdMhEFILEJ
kOILSmNpTwVs0KYqJq/Aj5Qa3bhdoNKVRNRoQyywrenyrtTrXQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFElEC+X1PxHiCLqGGjRWJ3iubGtjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDI5MDI2ZGItYmU0YS0z
NGFkLWE3NTUtY2NmN2Q0NDdhMjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQEKAh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIgGAnNAez0dcdCXz5vO1PE2Vwq1OB+Fe8WKlnaD+dTWtets8MSe
HfZ8HwWvu4w3WQpWG40apy8B/2NY85upGVNX65hE5OC6QKq/GlyhW5otjdRl8jwI
umbH5QPDy9dJGZsrRKWRLgdGCknEk0+KvnRZW+SSLg3Wok4JOS/KKFbRlZ9imezX
G9M5lJjSQgJXsGWHQBhhEqagc4LB8huuHQ8lW9tnTxkz7QBdNWD9xAOxMVQk1OZ5
JYd+ifK5Mff66M3YuKdgvQaXRhPjT4rrhZBYVoVcFcrui+yYcrC4Qg5mc4qOXRgt
te09O9H2m3ntjblJy/v5W10s/zfs43f+Lo0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:08 2024 by rpki-client on console-ams.rpki-client.org