Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0df227cc-7ed3-38e5-8d4a-40af7924dd80.roa
File:                     0df227cc-7ed3-38e5-8d4a-40af7924dd80.roa (raw, json)
Hash identifier:          47yg8TVhCaSWl8MehHCujpxTWHuSyuwXeYdoZUGAK/U=
Subject key identifier:   DE:24:C0:5B:6F:A1:F8:B8:4F:32:46:E8:89:93:F8:68:76:83:BD:53
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846E3E220886162874C4D9581B0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0df227cc-7ed3-38e5-8d4a-40af7924dd80.roa
Signing time:             Fri 16 Aug 2024 01:37:08 +0000
ROA not before:           Fri 16 Aug 2024 01:37:08 +0000
ROA not after:            Thu 14 Nov 2024 02:37:08 +0000
asID:                     6167
IP address blocks:        2600:100f:a020::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:e2:20:88:61:62:87:4c:4d:95:81:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:37:08 2024 GMT
            Not After : Nov 14 02:37:08 2024 GMT
        Subject: CN=0cdc00ec-8a51-4fd9-981f-62f4d12cac0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:3e:a0:35:87:26:1d:62:fa:4d:bb:a2:f6:
                    73:cf:4b:2f:fb:08:b0:9c:45:b9:59:ab:6e:52:4f:
                    f9:a7:65:e5:8e:28:9a:f4:cd:07:2c:8d:58:01:5e:
                    d1:e4:09:ef:fa:a3:8b:dd:a3:d3:55:21:ed:8e:58:
                    d0:d5:fe:25:d1:dc:b0:c6:47:05:8a:2d:b4:7d:ca:
                    d6:9e:b0:43:f6:f7:cf:de:7c:33:47:a1:a5:af:11:
                    e8:61:c4:2f:95:d8:5c:c9:76:42:ed:90:2b:b0:a8:
                    47:12:87:b9:60:e1:16:48:11:2c:3a:3d:4f:11:ff:
                    24:16:4c:0a:a0:39:52:06:45:b2:43:71:d7:8d:e1:
                    58:4b:b0:98:10:94:72:8a:ba:44:38:4c:42:9c:fe:
                    c2:73:d3:39:0f:95:74:d0:e2:9f:6f:3b:6f:cc:1d:
                    6d:62:4a:47:e8:e8:29:8d:92:9c:8b:ab:68:1f:57:
                    53:8c:38:c0:58:7c:3b:04:3d:d9:1c:cc:dd:b1:d8:
                    2c:4b:80:6d:d9:d2:0b:fe:a6:7e:08:d0:9a:30:89:
                    29:d3:fd:d2:8a:9c:c7:46:69:9b:31:d6:a8:3d:c5:
                    7d:67:35:aa:37:c2:2f:a9:af:6b:4b:ee:33:99:17:
                    3e:18:cf:1c:d5:00:35:66:8e:4b:88:06:23:1e:d4:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:24:C0:5B:6F:A1:F8:B8:4F:32:46:E8:89:93:F8:68:76:83:BD:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0df227cc-7ed3-38e5-8d4a-40af7924dd80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:a020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:a0:4c:f0:ca:46:85:78:a6:b4:7f:3b:ca:cc:a6:c5:86:a7:
         f0:69:d9:f5:16:5f:06:5a:e0:aa:3b:4e:82:30:18:1f:5f:05:
         49:48:85:d1:be:27:e6:24:ee:68:e1:d4:31:d3:f0:ff:64:c4:
         e3:31:11:da:fe:67:cf:4d:0e:16:4d:fe:33:98:cb:c5:03:f2:
         66:c1:d2:f1:62:20:9d:ab:c5:08:b0:62:b3:a5:c1:42:02:0a:
         be:aa:c2:09:0d:88:9d:81:48:1f:f8:41:01:6e:63:9f:98:ab:
         db:53:7b:05:c2:b0:2a:fb:55:54:fd:45:c4:1a:5f:af:4f:bf:
         c5:19:04:19:eb:41:d1:77:eb:92:47:61:68:9e:cd:95:b6:3a:
         cd:18:e6:ef:36:7e:60:64:d1:48:40:c6:4c:98:b2:7f:7d:b3:
         1a:c4:d4:db:a3:30:24:fb:db:db:3d:7c:b2:ed:c4:e5:cf:80:
         bb:55:24:2d:42:a5:f6:1f:44:5a:ae:b8:42:f8:70:8b:81:6f:
         ac:32:a2:ac:0a:f0:9e:6e:46:90:43:4e:e4:9a:1e:ee:88:3b:
         69:2c:b9:f5:38:50:e5:c4:5c:ac:2e:85:93:80:1f:40:d0:24:
         87:6f:0c:c8:36:03:a7:2c:0b:d2:65:78:34:1d:9d:f1:e4:a2:
         15:42:6d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:26 2024 by rpki-client on console-fra.rpki-client.org