Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c8f83b5-4dbf-3e71-9590-dc38c7b6f7ab.roa
File:                     0c8f83b5-4dbf-3e71-9590-dc38c7b6f7ab.roa (raw, json)
Hash identifier:          c9tDn8nXmv2ygqX2eiVdL+d4I5Qez/MmtmTOEyTHb28=
Subject key identifier:   BD:CA:C5:2B:DE:E8:2D:59:5E:68:F6:93:FD:FD:DD:59:3D:5D:99:A5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846E3E220582B7FABE42B4E8A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c8f83b5-4dbf-3e71-9590-dc38c7b6f7ab.roa
Signing time:             Fri 16 Aug 2024 01:37:07 +0000
ROA not before:           Fri 16 Aug 2024 01:37:07 +0000
ROA not after:            Thu 14 Nov 2024 02:37:07 +0000
asID:                     6167
IP address blocks:        2600:100f:a010::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:e2:20:58:2b:7f:ab:e4:2b:4e:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:37:07 2024 GMT
            Not After : Nov 14 02:37:07 2024 GMT
        Subject: CN=066b6253-d9d3-494e-97fa-cb8c525d81ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c7:b9:9e:a5:6d:06:c6:44:0d:67:8f:64:6d:
                    3e:e5:a8:5c:58:cb:87:9b:dc:68:26:98:1b:f0:86:
                    55:80:80:2c:84:80:d2:eb:0b:f3:f8:4d:a4:6b:d3:
                    fa:c9:6a:0d:d3:01:d7:bf:6c:3d:64:04:37:fc:d1:
                    86:2d:d5:a7:ff:ef:f3:c2:36:df:cb:cb:77:a6:30:
                    c0:6c:63:cf:94:8c:9b:b5:8e:f8:79:cc:89:c6:eb:
                    6b:88:49:e3:13:d6:37:a1:df:eb:cd:a0:02:be:7f:
                    75:1f:60:d6:9a:47:c3:a7:1e:76:84:8d:51:2a:00:
                    be:19:55:e7:90:7a:a6:34:68:3a:7e:22:f2:91:b1:
                    d3:c1:a6:c9:f5:7e:eb:7f:9d:1d:de:65:65:05:77:
                    ad:2b:71:6b:2e:81:23:fa:8a:58:bb:1e:21:1d:4b:
                    04:50:92:de:00:c8:17:e4:af:93:5b:47:e5:13:65:
                    f8:1c:b0:95:9c:4c:6a:62:b8:2e:c5:a7:90:24:bf:
                    ed:e0:9b:a5:9b:e8:77:75:aa:fa:a4:c4:62:b4:80:
                    bf:f6:a1:8e:ac:f2:73:9d:ab:39:b5:e2:0d:6f:96:
                    f6:8f:da:e5:ce:68:f9:85:3f:7a:69:cd:e2:ef:44:
                    8b:85:7e:96:04:9f:4e:71:01:0a:78:25:08:36:8a:
                    fa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CA:C5:2B:DE:E8:2D:59:5E:68:F6:93:FD:FD:DD:59:3D:5D:99:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c8f83b5-4dbf-3e71-9590-dc38c7b6f7ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:a010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:bf:95:89:8a:58:fa:16:17:bf:6f:67:fe:4f:6f:45:4b:a9:
         c4:60:7f:08:7c:20:bd:60:68:e7:60:b4:2a:00:5a:05:44:bd:
         a7:bd:9e:41:b5:e9:1f:0d:03:5d:6c:5b:28:12:d3:c2:c8:76:
         22:59:f7:21:5a:3f:e7:94:b8:bd:be:22:6f:2f:1e:27:3c:4c:
         c4:61:24:2d:3e:3a:55:3f:78:8a:15:c2:e9:ff:14:d1:b7:9c:
         87:0d:56:83:47:a9:2b:36:20:82:64:d1:c1:dc:04:1b:2e:98:
         25:4d:1c:0e:2d:16:e6:1e:66:6f:a2:30:ad:fa:08:f4:72:ab:
         d7:a9:5d:88:10:d6:bf:34:49:c5:c8:dc:8a:2a:66:bb:07:8d:
         64:52:00:c8:63:77:8e:db:87:02:fc:16:30:97:3b:4a:09:9c:
         1f:07:e4:60:c1:89:ba:06:73:09:df:cb:5f:e6:31:96:39:de:
         83:09:0b:e0:98:2b:80:16:f3:f6:34:b6:03:6d:07:b8:15:01:
         e7:6b:c4:70:e5:e6:3c:0c:44:a5:e2:d1:7b:a8:d1:fb:57:56:
         67:79:8d:09:54:66:ec:cf:34:74:53:52:aa:78:5d:d0:09:a6:
         4f:81:43:98:2e:d4:72:e7:50:41:54:05:47:59:18:82:5f:0e:
         95:2c:85:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:25 2024 by rpki-client on console-fra.rpki-client.org