Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/13481417-1428-3e79-8999-c8845b823ebc.roa
File:                     13481417-1428-3e79-8999-c8845b823ebc.roa (raw, json)
Hash identifier:          L05pW+FxDWBSIzvzaPK5HDvGHg6QIY6N/xLPAohMlXg=
Subject key identifier:   42:E9:D2:C7:F7:5D:06:05:56:64:39:BF:E4:B7:6D:AE:D5:88:37:55
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBD6BD594270D13E768980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/13481417-1428-3e79-8999-c8845b823ebc.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1010:b190::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:d6:bd:59:42:70:d1:3e:76:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=bd343784-1a54-4194-a087-abfc3a8a577c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0e:a6:34:31:2e:da:33:48:19:0a:e6:7a:8d:
                    02:8e:25:04:8f:09:50:87:03:1d:02:01:87:4d:b8:
                    32:3f:ec:f8:80:fb:99:90:a1:bd:1d:9f:0f:da:23:
                    5c:db:6e:12:29:75:c2:c4:78:bf:6e:65:ed:36:6d:
                    b5:ca:04:58:61:7f:79:8c:5f:e1:9c:f4:b3:0c:2a:
                    fa:df:44:62:4d:16:af:1f:b0:f4:f3:aa:36:db:99:
                    fd:05:37:15:76:08:4d:d5:00:9e:89:7a:78:3b:41:
                    88:4b:45:e1:a6:d8:82:9d:a1:69:05:8c:7a:18:86:
                    c9:ee:99:93:91:e4:be:de:c3:1c:e0:5b:ad:37:b2:
                    00:c8:dd:0d:ea:b1:d1:55:40:8f:16:a4:09:17:f0:
                    64:64:84:7f:14:e9:37:6b:28:8d:c7:44:3f:f9:4b:
                    49:55:c0:32:aa:f3:a9:f9:b7:f6:c0:bf:50:67:9a:
                    b7:5a:43:5e:94:fa:d8:c4:12:cf:7b:78:5d:14:dd:
                    62:f4:c6:b4:14:20:4f:8f:c8:60:41:f7:8f:17:8c:
                    eb:22:26:13:bb:ca:f2:32:26:77:3b:43:ac:23:0a:
                    bb:dc:80:dc:ca:4b:30:c5:8d:ef:10:38:45:c6:53:
                    f0:b2:1c:26:16:4d:44:f2:b6:38:09:09:5c:d3:a6:
                    77:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E9:D2:C7:F7:5D:06:05:56:64:39:BF:E4:B7:6D:AE:D5:88:37:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/13481417-1428-3e79-8999-c8845b823ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b190::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ff:3b:3f:4a:d6:81:0a:cf:7c:e4:57:75:9b:03:a2:bc:d4:
         0c:cd:67:1a:d0:57:de:d2:ee:e5:5d:67:65:dd:72:1c:89:95:
         54:be:32:a3:c8:6a:7c:25:97:32:45:35:da:3d:cd:60:9f:fc:
         48:d1:10:76:58:12:db:53:23:4a:ed:b0:76:99:af:4a:81:f5:
         2a:25:da:46:d6:95:91:2c:3d:a2:89:6b:40:e5:6f:49:c3:e1:
         26:28:cd:ab:d5:9f:8f:46:76:5c:6a:b6:11:0a:06:63:f0:3a:
         a2:f6:cd:87:34:ea:bf:d9:0a:cf:c8:50:46:fa:e6:62:f5:52:
         95:a5:30:b8:3b:6a:a5:e4:78:f5:8b:1d:d9:02:db:3c:fa:8e:
         60:41:cf:18:35:36:be:2c:9b:50:e7:dc:f2:ff:d3:b3:96:d3:
         bf:7d:fc:80:66:95:37:85:4f:7a:00:5e:de:18:e1:13:83:75:
         3a:2d:69:eb:44:67:e5:10:3d:0e:ce:c1:1f:b2:35:19:ad:bf:
         cd:a3:df:cf:5f:e5:56:1b:8a:34:49:36:04:4e:6f:19:42:16:
         e4:6c:2f:8f:d5:9c:f5:4d:e3:a6:a2:2a:4d:74:3e:97:09:9d:
         e0:fe:2b:a8:3f:29:ff:6c:05:0f:c1:6c:d9:1a:4b:39:25:cd:
         03:07:54:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:18 2024 by rpki-client on console-fra.rpki-client.org