Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/045acf0e-b1e3-3c78-872e-fe454abc46e3.roa
File:                     045acf0e-b1e3-3c78-872e-fe454abc46e3.roa (raw, json)
Hash identifier:          w5Xuy3AwkiEdYiefMWS3HUSDA1ZDHOwYOgaNGOfhzb4=
Subject key identifier:   87:51:DB:7A:17:11:02:34:DE:04:39:43:E0:87:07:47:80:FD:04:82
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBE743E735362AE02E93C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/045acf0e-b1e3-3c78-872e-fe454abc46e3.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1015:b1d0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:e7:43:e7:35:36:2a:e0:2e:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=a24759fe-5e60-4d16-bd40-673620e602d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ae:35:2c:d0:8b:f0:4b:24:d2:78:60:7b:f3:
                    6c:c5:e7:c5:92:91:8b:b4:5b:20:7f:ef:25:78:a4:
                    1e:07:14:10:61:9e:63:b2:e7:4f:4b:5f:a0:f6:9c:
                    ce:57:74:a3:a6:36:2d:dc:d1:03:cb:ce:f9:46:58:
                    cf:d3:96:25:0c:7c:06:0a:b6:ed:37:a1:5c:65:35:
                    06:cc:15:68:7d:29:5b:8e:9f:b1:a0:b1:53:a9:3e:
                    7f:93:f1:5f:0b:2f:ee:65:61:69:3d:69:50:a9:b9:
                    85:33:ab:35:2c:f3:f1:3a:79:ca:26:f4:5c:0a:be:
                    42:af:33:09:86:12:11:bb:12:74:53:92:41:71:2e:
                    7a:2d:26:ea:6a:76:6b:d8:db:0f:9f:19:31:e2:d8:
                    29:16:af:9e:f8:9f:7c:88:d6:a9:4b:6f:e8:91:ce:
                    cb:90:31:69:8c:21:c7:f0:d3:52:ee:f3:2b:1a:69:
                    23:4c:a6:1e:8f:e0:70:80:f8:16:a6:58:ca:ce:b3:
                    a4:d2:01:21:49:be:1f:40:f8:f1:cd:76:f0:3f:a7:
                    22:64:32:56:c3:a9:3a:71:96:0a:d3:14:25:5a:72:
                    d8:60:93:cb:da:3b:ee:be:3f:67:6d:ab:d5:9d:38:
                    0b:82:88:a1:8c:cb:1b:9b:11:d7:8f:4a:48:67:9f:
                    48:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:51:DB:7A:17:11:02:34:DE:04:39:43:E0:87:07:47:80:FD:04:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/045acf0e-b1e3-3c78-872e-fe454abc46e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:b1d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:19:89:b7:b9:c7:1a:01:53:58:35:e9:1e:a0:49:89:cb:77:
         d9:6f:30:c1:1a:23:a4:5b:7f:43:1f:65:c8:3d:7b:8b:5c:24:
         0a:12:d9:cc:4a:5c:cd:ab:45:4b:b9:a0:65:3d:ef:65:04:a5:
         05:71:af:8f:64:55:04:e5:b3:38:80:b0:42:9f:c9:c1:6c:10:
         82:d6:85:1e:5b:9b:92:33:0c:9e:fb:a0:26:c4:f6:3d:6a:9d:
         89:3f:c2:0a:87:3d:71:4d:4e:0c:c5:86:bc:9d:a3:a3:98:20:
         11:eb:24:56:e8:e1:81:dd:b2:dc:08:47:74:03:25:4e:58:56:
         84:af:6d:31:5b:f7:3d:48:91:61:47:c7:10:ac:fe:c1:ad:ec:
         64:95:7b:aa:0a:0b:59:33:47:22:e1:b2:db:28:0b:bf:9f:30:
         c7:66:67:d4:0a:a6:fe:13:6c:bd:6b:a1:9e:37:59:ce:30:ed:
         e7:55:5d:b9:8e:79:6d:e7:ea:b9:2a:aa:4a:59:e2:3e:9a:14:
         7b:8b:a0:45:73:cb:32:f5:00:22:dd:11:99:de:ea:6a:ae:19:
         01:f4:e4:c8:8b:87:6e:72:cb:3d:66:a9:30:b8:2a:6a:24:b6:
         e8:ec:12:f2:28:b9:c7:7d:36:11:63:e8:fc:2a:83:41:75:bb:
         fd:03:90:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:09 2024 by rpki-client on console-ams.rpki-client.org