Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08bf8618-5c93-3c70-8a91-f933fcc0b856.roa
File:                     08bf8618-5c93-3c70-8a91-f933fcc0b856.roa (raw, json)
Hash identifier:          +gnC8X5F1nEpsTB8cLCa8Zw0RVJwwvL4ptA5H3ZZeAs=
Subject key identifier:   3E:5A:F0:B8:D5:85:8E:37:75:6D:B3:19:D5:F4:C3:3E:5B:73:D0:54
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D768FB328E6CCD0E7F9EBE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08bf8618-5c93-3c70-8a91-f933fcc0b856.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1000:b140::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:8f:b3:28:e6:cc:d0:e7:f9:eb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=5567be3e-2ace-44b0-8ffe-3e2b066aad06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:79:f1:5f:cb:bd:ca:9a:71:1a:17:9a:df:36:
                    0c:9c:b5:86:80:a1:e3:de:aa:a5:29:91:16:91:71:
                    be:65:d5:7d:53:e3:34:01:b7:27:b6:88:28:2c:05:
                    19:11:3d:72:4b:4f:6c:cb:08:1c:95:f4:da:b4:5b:
                    e7:44:4d:43:78:46:ef:71:3b:d3:d0:60:ff:05:85:
                    5f:ba:59:74:28:9b:ab:97:7a:7b:a6:86:54:37:ee:
                    c9:b6:46:fb:98:65:ac:3f:1c:19:41:a5:61:ea:2c:
                    a5:67:25:76:21:78:9f:e4:52:a9:e0:74:cf:91:92:
                    94:0e:28:99:2b:50:e4:c4:37:52:7a:ab:b5:6c:6f:
                    5e:b8:ad:f3:e5:56:cf:b4:20:4b:ad:7f:6c:00:21:
                    45:dc:9f:86:26:ec:97:f1:96:19:6f:a1:b1:30:b3:
                    c4:07:70:3e:ec:66:fa:7c:b0:77:e7:23:9f:f2:ab:
                    68:d5:83:4a:1b:f5:dc:a9:79:0b:f6:69:75:9c:43:
                    1e:a8:c0:9d:b1:8e:09:f2:d2:75:7a:02:93:6b:0a:
                    75:68:44:09:c3:5b:2c:7c:82:fd:00:60:19:50:a9:
                    10:bc:16:42:cc:3a:cd:26:0b:dd:b8:31:8c:9d:62:
                    89:88:60:b8:99:d5:e5:29:3e:ee:3e:b4:9f:e3:b8:
                    43:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5A:F0:B8:D5:85:8E:37:75:6D:B3:19:D5:F4:C3:3E:5B:73:D0:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08bf8618-5c93-3c70-8a91-f933fcc0b856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:b140::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:30:97:9f:0d:12:34:4d:58:da:59:91:75:8e:45:86:31:b2:
         6c:84:3e:ed:8c:90:1f:ed:22:b0:de:30:5e:d1:61:63:a3:56:
         76:51:31:02:0e:d5:90:ad:54:51:85:c7:2e:0c:53:cb:41:02:
         36:f3:19:e3:5e:57:89:c6:ea:c7:3b:77:59:c7:87:e2:27:dc:
         0b:28:3a:c3:ce:90:21:cb:78:3e:3c:8a:1c:89:db:9b:5b:d6:
         3b:74:29:f5:03:7c:16:b9:a1:27:50:4e:a5:fa:57:d9:55:9e:
         70:46:82:83:bd:38:95:5e:37:08:be:62:d3:20:a3:6c:dd:d7:
         a9:f5:da:73:be:5f:34:45:6d:d8:df:ee:f8:18:a6:7a:3d:75:
         34:e2:06:79:b9:89:78:f0:85:67:5d:5a:0b:9f:50:70:08:51:
         91:47:d0:f0:aa:3a:b5:05:94:98:c2:82:c3:d9:cb:70:e1:51:
         4c:64:38:a2:4c:aa:b1:df:56:ed:d3:bf:c0:4b:3e:04:ce:e2:
         08:2b:30:3a:e3:3d:e0:64:62:7d:d9:b0:7b:5b:71:3e:72:a3:
         15:88:7b:46:2b:47:66:d2:92:c7:4c:9f:a8:eb:81:26:04:55:
         db:3f:95:03:6d:14:eb:dc:94:9e:a7:9e:ef:49:a1:1a:33:51:
         34:d5:32:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:16 2024 by rpki-client on console-fra.rpki-client.org