Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1121f1d7-fc6b-3498-827a-04ab4fe508f2.roa
File:                     1121f1d7-fc6b-3498-827a-04ab4fe508f2.roa (raw, json)
Hash identifier:          X6RLuMUhq2h4hvW64qU2FRvUXTznUpuFR27VWHzOAVA=
Subject key identifier:   E8:D4:C0:55:4B:03:DB:B1:CC:25:E9:11:A1:CA:91:9C:0E:A6:72:B3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBE22F68DD583A07726680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1121f1d7-fc6b-3498-827a-04ab4fe508f2.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1014:b000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:e2:2f:68:dd:58:3a:07:72:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=8200c154-3b16-4f9d-9fcb-0380b0927787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:39:9f:33:53:c2:ec:f6:4f:72:88:26:20:51:
                    bd:c7:13:4b:dc:5a:a5:b2:a4:e0:6c:31:af:e2:36:
                    6b:9b:15:bc:77:37:1c:69:5a:69:28:10:dd:e0:b0:
                    9c:f4:48:9a:6a:58:26:ab:b3:87:2e:7a:06:f3:e2:
                    f9:b9:c5:af:98:79:c7:7f:82:96:7b:92:1c:d7:3c:
                    5c:0a:67:5c:a9:8b:d2:c7:90:7a:8e:8a:88:f2:3b:
                    ca:1a:ab:1b:96:f6:1d:f9:78:f6:bb:22:b5:6b:81:
                    15:a1:a2:44:4a:b3:0f:ce:b5:98:61:03:31:e2:a8:
                    c5:bc:1a:ae:11:bf:44:61:e8:51:27:06:8a:d6:f7:
                    d2:68:0d:53:71:dd:26:d6:47:5f:66:1b:b0:42:8f:
                    91:b1:cd:98:36:78:69:81:a7:31:fc:52:cc:3f:47:
                    b0:52:52:7f:4e:17:2d:8d:db:77:5c:14:9e:dc:06:
                    77:c0:60:23:34:f0:ca:4d:fc:1e:39:50:f0:c5:4a:
                    9e:47:40:64:d4:02:04:45:00:38:06:84:3d:5e:20:
                    42:85:e1:d3:2f:e4:e4:8f:59:65:bb:0d:c2:5d:73:
                    a2:e1:e3:3e:64:67:73:35:a4:13:89:54:b0:a2:ed:
                    2a:63:ae:22:36:5a:22:78:06:b6:1e:f9:06:80:a4:
                    47:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D4:C0:55:4B:03:DB:B1:CC:25:E9:11:A1:CA:91:9C:0E:A6:72:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1121f1d7-fc6b-3498-827a-04ab4fe508f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:f5:27:fe:2c:10:15:af:2d:53:77:e7:2b:37:04:0e:ea:0d:
         85:b6:04:f4:fd:aa:35:a7:6d:cf:74:f1:0e:7a:d5:4d:16:58:
         ef:76:ce:20:33:c3:6f:71:e9:57:48:ed:12:84:22:25:2d:71:
         3c:4d:e3:9f:1c:ef:4c:d8:7d:6d:b6:bf:7c:de:12:34:fa:fc:
         72:ee:6a:3f:5f:c3:7d:d1:32:8d:d6:72:b6:1c:a3:5b:10:f4:
         7c:95:92:e7:5a:9c:d1:0c:f4:3d:cb:88:db:a9:ab:65:c6:fc:
         f7:a0:8b:5e:8e:06:af:7a:1f:a6:9d:9d:80:13:40:06:4f:6e:
         54:69:f8:d4:b4:dc:61:89:1a:0d:4a:35:02:b1:4d:c3:db:9e:
         37:a2:cf:19:90:3a:8e:69:16:3d:55:44:d5:44:36:11:02:85:
         2b:77:b0:61:e4:9c:54:e3:b5:64:5a:ec:60:d6:26:9a:0a:91:
         46:3e:71:e1:01:76:47:f2:99:88:f7:46:59:b2:05:53:f5:86:
         6d:9b:8d:02:81:0c:aa:7f:70:b2:ea:cb:e4:d0:0a:be:ec:35:
         cf:35:24:b8:03:ab:4d:79:7e:ec:24:ee:49:8f:0b:70:df:56:
         39:02:5c:60:39:fd:b1:61:08:8f:0f:29:bb:d8:df:53:7d:b3:
         ff:48:05:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:27 2024 by rpki-client on console-fra.rpki-client.org