Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1446c42a-db1d-37a6-a7e1-c64f8187d22f.roa
File:                     1446c42a-db1d-37a6-a7e1-c64f8187d22f.roa (raw, json)
Hash identifier:          S+zsKn+19j505Ou034Oz0OZBLRZBzj4Bsh1Bbdx1nZE=
Subject key identifier:   C2:90:66:FC:D5:9C:87:D3:9C:45:D4:8C:42:43:47:83:C2:DB:6E:27
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76C4C801861256436C1EB0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1446c42a-db1d-37a6-a7e1-c64f8187d22f.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     701
IP address blocks:        2600:4041::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:c4:c8:01:86:12:56:43:6c:1e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=75c40d50-9e97-4659-b323-89f40c3c63cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:69:62:6d:9d:58:17:3b:b7:d3:29:23:66:1b:
                    d1:56:5c:44:13:16:31:6b:ec:ae:5b:64:f8:67:61:
                    33:61:eb:5e:e4:62:ef:49:5e:68:70:bb:76:c6:a5:
                    84:db:9f:c3:05:61:7e:3b:ef:cf:2d:a1:f1:e4:4a:
                    e1:74:76:11:2b:bc:ea:c4:48:7f:da:13:91:27:6d:
                    ba:18:e1:a5:00:97:47:67:fc:ec:3e:45:5e:8e:f1:
                    be:a3:87:26:f2:10:ca:bb:76:1b:64:ed:25:d1:53:
                    e7:e8:cc:18:ca:02:ad:b0:47:c7:87:f4:58:7f:e2:
                    94:3f:2d:5b:48:12:49:3d:60:5c:41:68:c7:cb:5f:
                    9d:a9:38:a6:4b:3e:2e:79:5d:8d:3b:b8:8b:ba:79:
                    7f:ae:4d:f0:04:a1:56:fa:4e:a2:41:f9:d6:49:65:
                    c0:06:c6:cb:e4:73:0a:d8:6c:b0:c2:66:d2:d0:0b:
                    de:1a:1a:e4:4c:98:b1:76:f2:67:f2:23:40:56:c3:
                    ec:68:18:fb:e7:da:85:11:20:7c:49:36:5b:88:f3:
                    0a:bb:13:0f:15:d5:b4:04:c4:37:07:4f:37:f0:6c:
                    0d:da:9b:85:d8:0a:32:8e:03:62:a6:e0:92:a8:96:
                    8a:cd:9f:af:d4:ff:7b:90:f1:cf:0b:eb:bc:11:77:
                    9e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:90:66:FC:D5:9C:87:D3:9C:45:D4:8C:42:43:47:83:C2:DB:6E:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1446c42a-db1d-37a6-a7e1-c64f8187d22f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4041::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:5e:e8:3e:61:33:f4:c4:0c:d9:63:8c:28:a4:bd:73:cb:c3:
         68:55:87:c5:11:78:83:2c:e6:5b:53:b9:57:1c:f8:5e:1c:c2:
         63:61:e1:bb:03:8a:dc:da:e6:be:32:0c:13:4a:74:e6:a0:4d:
         86:c0:fe:fc:cc:b9:d8:50:98:28:d4:99:37:ff:92:66:a8:a6:
         5d:77:1b:f8:23:93:4a:b7:55:f9:d2:ab:67:a0:af:20:d6:8e:
         2d:8e:a1:bc:e1:d8:86:b5:f7:41:02:5c:b0:5b:9f:ef:cd:7e:
         2c:ef:c5:f0:f8:08:8d:10:04:b4:7c:63:97:5c:9b:c5:e9:a1:
         a1:e0:55:e9:d6:f1:88:57:2f:c7:c3:a4:86:39:d9:47:d7:b4:
         ff:11:f6:6a:4a:5e:39:13:eb:56:4e:70:64:9c:5b:9e:8c:49:
         0d:9e:e5:be:b8:9d:9b:f8:43:2f:50:0c:c9:69:68:08:12:8c:
         0c:8e:97:50:73:5b:3d:35:70:d7:a4:5d:99:bd:0c:9c:97:51:
         05:5d:a6:55:3d:d5:11:fe:2d:6a:72:cf:df:4f:d6:ce:4c:d8:
         36:a0:4d:ee:dd:6b:59:47:3b:b8:c7:be:21:1c:be:1c:9c:49:
         55:4c:fd:35:ee:c4:3d:83:ac:de:33:2d:5e:42:a2:e2:e4:87:
         06:c2:c1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:12 2024 by rpki-client on console-ams.rpki-client.org