Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f496490-9129-3812-aa81-75d71b89bab3.roa
File:                     0f496490-9129-3812-aa81-75d71b89bab3.roa (raw, json)
Hash identifier:          NhXwmKiWDm4xEdSMLWyCtkjFOxYbgnnx84KhsOFNcZI=
Subject key identifier:   C4:F3:AA:C8:86:D7:99:D7:EB:75:E2:BA:18:5D:EE:95:AC:55:2B:CC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846E3E1D485243DAF0B7E16EA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f496490-9129-3812-aa81-75d71b89bab3.roa
Signing time:             Fri 16 Aug 2024 01:36:32 +0000
ROA not before:           Fri 16 Aug 2024 01:36:32 +0000
ROA not after:            Thu 14 Nov 2024 02:36:32 +0000
asID:                     6167
IP address blocks:        2600:100d:a121::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:e1:d4:85:24:3d:af:0b:7e:16:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:36:32 2024 GMT
            Not After : Nov 14 02:36:32 2024 GMT
        Subject: CN=cfb90634-dbc6-4626-81dd-2075d9203b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:07:21:75:63:fa:8b:66:d0:d1:3e:96:8a:fc:
                    aa:e0:d3:98:b0:bc:ce:80:ec:d9:39:3a:3c:cb:2e:
                    bd:df:1e:25:37:4a:1d:f5:30:22:3d:67:10:69:8c:
                    c5:12:01:08:82:e2:e4:dd:b8:9a:e2:91:00:bc:bd:
                    b6:82:a4:48:ed:89:10:43:b0:1d:ed:9d:62:17:ef:
                    03:36:a9:55:68:19:e4:82:a3:c0:5d:4d:26:f0:ef:
                    40:47:32:7c:8f:39:d3:57:8e:95:5d:9a:b5:93:2d:
                    1d:63:55:70:d9:79:98:a5:d6:c4:4c:6d:31:69:eb:
                    40:60:50:e8:b9:2c:26:df:53:f8:70:65:0d:f4:53:
                    1c:9b:89:03:38:43:70:fe:8a:a0:96:0b:61:8a:ee:
                    14:99:7f:8f:3b:2d:57:5b:6e:57:6f:42:71:41:67:
                    8c:7f:05:63:13:13:c1:57:3c:a7:64:5b:18:b2:ec:
                    82:60:d3:03:ac:c6:8d:07:ee:e6:ff:4b:35:58:2b:
                    2a:61:58:36:e7:98:23:e9:a6:a6:cb:16:6c:27:3e:
                    fd:97:5b:c4:a2:59:e6:dd:31:e3:4a:ec:3e:68:9f:
                    a7:42:01:56:ba:4f:69:6d:ac:3d:df:23:7f:c0:85:
                    e7:e8:d3:eb:83:10:f0:58:e0:68:16:7a:64:e5:ab:
                    16:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F3:AA:C8:86:D7:99:D7:EB:75:E2:BA:18:5D:EE:95:AC:55:2B:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f496490-9129-3812-aa81-75d71b89bab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:a121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:d0:b7:b9:5f:68:5d:11:76:a1:22:32:41:e6:71:49:79:55:
         7c:69:46:3c:95:f5:92:5e:50:3e:de:41:37:dc:26:d9:4f:73:
         ef:9d:54:89:1f:05:36:a6:0b:c6:66:4d:cb:da:31:ec:5d:2c:
         cc:4c:92:bf:0b:22:f9:a9:28:a6:19:57:70:65:30:9b:8a:5d:
         96:63:72:3e:a9:70:88:99:0e:40:6f:cb:16:22:33:e3:35:71:
         05:84:9e:b4:f1:6e:bb:84:c3:f4:a5:cd:76:21:58:aa:f1:0c:
         e6:fe:da:45:8d:6f:64:3a:48:a1:47:af:f9:37:05:e3:39:c2:
         26:83:e5:03:b1:87:d2:34:33:4b:51:dd:7c:26:b1:39:87:57:
         92:11:22:7e:db:5c:cb:8f:29:43:46:37:a1:a2:cc:83:f4:e6:
         7d:86:31:72:3e:96:5b:41:cb:41:d8:d2:06:ca:45:ec:aa:7b:
         5d:98:3e:a1:38:d0:9f:2f:ca:5f:4e:a5:ef:b3:6d:01:58:1c:
         50:16:d1:b7:3e:31:dc:bf:6e:8a:59:3a:a2:1a:aa:52:0a:5b:
         75:3b:0c:0a:02:cb:32:54:e2:8f:1b:b8:cd:b3:05:da:71:cd:
         36:8c:f9:15:b5:9d:10:8e:0a:50:33:ab:3b:b5:bd:fe:21:e0:
         74:4d:11:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:26 2024 by rpki-client on console-fra.rpki-client.org