Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02e8ca16-a0ef-3b93-853e-62adf72da7a3.roa
File:                     02e8ca16-a0ef-3b93-853e-62adf72da7a3.roa (raw, json)
Hash identifier:          rdNueSVFJe9MFfyWTK6dpyEfUSQxrsYfgaE0AxpSIqg=
Subject key identifier:   80:5B:4C:01:E3:3A:64:DC:A1:A8:3A:E1:AE:2F:DD:7E:CB:16:0E:33
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA034ADC598B0C06745800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02e8ca16-a0ef-3b93-853e-62adf72da7a3.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100d:9100::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:03:4a:dc:59:8b:0c:06:74:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=d1c9246b-8b69-47d4-819b-3aa8195e6519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:63:fc:fa:73:78:cd:ea:e7:49:4c:5b:60:5c:
                    2b:8f:01:80:85:9e:61:f0:1d:30:88:4a:2e:76:0d:
                    01:4a:bb:a8:6a:64:4e:06:d6:51:fe:6b:f4:d7:b1:
                    ca:f8:bf:ce:e9:b2:63:ed:21:08:ce:a1:e3:ed:29:
                    43:45:3a:90:bb:02:f8:52:23:5e:22:3b:a2:2c:e7:
                    96:21:ae:60:2c:24:22:7e:d5:b1:6e:c3:84:ab:82:
                    49:55:f3:82:d6:80:87:54:8a:43:96:17:3b:07:8e:
                    32:aa:90:1f:81:c4:39:23:63:da:37:e3:c9:d7:4d:
                    71:b3:be:eb:8d:c0:1b:6f:a5:a5:f1:ad:ab:aa:62:
                    d4:c8:7f:1e:f5:93:ae:6a:6c:b8:a6:bc:b6:96:23:
                    7c:80:24:65:9f:4f:e6:26:d0:08:b6:61:58:cf:dd:
                    8c:7c:fb:b5:55:48:07:d2:91:13:91:57:0b:17:0e:
                    73:a5:a2:53:7f:c1:56:96:c1:e4:03:e5:65:d2:e9:
                    d0:33:fd:fa:3a:7e:4e:f8:ba:78:1b:7e:93:70:1a:
                    01:3e:32:23:51:47:de:dd:ee:df:ea:d5:b1:3c:13:
                    28:f7:78:de:7c:1b:30:7e:b8:4d:b0:54:4c:58:4a:
                    02:85:1c:43:b4:57:8d:55:2e:f8:6a:31:69:49:16:
                    46:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5B:4C:01:E3:3A:64:DC:A1:A8:3A:E1:AE:2F:DD:7E:CB:16:0E:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02e8ca16-a0ef-3b93-853e-62adf72da7a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:9100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e9:fb:3e:89:e0:8b:fd:92:95:c8:88:f2:97:f8:61:ac:8b:
         69:ee:9d:00:22:d5:07:88:0a:bf:c6:8d:9c:65:fc:34:f4:74:
         76:c3:f4:dd:61:92:85:4c:9e:aa:50:7d:4b:65:21:59:48:85:
         db:4e:1d:6e:b4:ff:b2:04:a7:c8:21:d8:be:06:88:39:69:95:
         c7:88:59:fe:86:de:c0:af:78:37:d7:5c:c2:92:48:bb:bb:fd:
         73:ec:78:80:d4:d6:ff:56:0f:55:0c:30:ea:ba:a7:d8:81:fe:
         89:da:73:8b:8b:e4:5b:71:59:23:40:28:a4:c8:02:5d:a7:4c:
         f0:54:32:9d:f1:9f:3d:7b:0e:fa:81:63:c4:f9:ab:c8:90:d6:
         77:0f:0e:24:77:b4:f5:9f:93:b8:d0:cb:40:2d:bc:8e:a4:66:
         40:7a:43:f7:25:75:db:5a:21:76:59:f4:aa:50:4d:c6:4a:93:
         9f:7d:67:e0:72:7a:42:dd:aa:a5:4d:05:ab:74:5f:f9:74:7b:
         d2:61:ce:fc:87:d1:c5:78:b2:26:7b:39:29:6b:a9:e0:c1:25:
         ae:30:4a:8c:b1:53:ef:f7:ae:5c:f5:ed:5e:de:e6:ba:2a:9e:
         2b:87:01:b3:e1:71:de:47:49:c3:ae:f3:2e:ec:16:d8:e4:47:
         44:ab:81:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:08 2024 by rpki-client on console-ams.rpki-client.org