Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/159d45dd-e250-32c8-a33f-37e12f196da2.roa
File:                     159d45dd-e250-32c8-a33f-37e12f196da2.roa (raw, json)
Hash identifier:          S763y8FfZpg2QdcUXuI4eEa+OhKkH3e11kvk5fgjSS4=
Subject key identifier:   F3:75:50:CC:E1:CC:7F:52:12:6E:A8:EB:D0:70:C1:13:6C:DF:5C:3A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D769B1015BF0197DAE22A40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/159d45dd-e250-32c8-a33f-37e12f196da2.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1003:b470::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:9b:10:15:bf:01:97:da:e2:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=9721f329-354e-464c-94a6-69535e95763d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:96:ea:0e:2d:ee:36:64:ff:df:b0:45:16:37:
                    31:35:14:4e:c7:33:0e:19:c7:cc:e0:b0:a2:8a:12:
                    e6:a9:5c:c8:40:3f:79:ce:bd:87:d9:55:4d:bc:91:
                    23:ab:84:98:6f:66:2a:7f:bc:dc:a5:b1:03:d3:6f:
                    64:61:87:1a:cb:54:99:2d:a3:df:6a:fc:0b:74:f8:
                    3b:00:9d:3d:64:02:a0:91:ed:3b:60:1e:66:68:2f:
                    33:e9:3f:e2:14:90:16:f0:d3:28:d3:52:9b:1e:03:
                    b3:56:f1:9b:a7:55:99:ab:65:d9:db:d6:fa:72:47:
                    9c:a2:a4:57:74:14:03:3e:2a:56:6e:67:57:ba:b5:
                    37:50:9d:b9:4d:52:c2:0e:ed:ac:65:88:5a:2c:c8:
                    4c:c4:81:df:85:dc:68:3a:f4:6f:39:22:79:25:e6:
                    e4:c7:96:c2:74:5f:54:e9:a8:f3:5e:3f:dd:22:c7:
                    70:2b:43:4b:12:3d:65:7b:ea:1d:0a:2c:46:94:4b:
                    34:09:70:e6:42:17:96:0d:c5:7f:96:91:ed:e9:c8:
                    ba:ba:d0:07:0f:00:45:90:fd:53:4a:2e:dc:8a:99:
                    4f:ae:f2:d6:1c:dd:93:26:53:ed:dc:20:d9:52:95:
                    34:88:40:4e:7d:af:c7:f8:f8:e4:8b:aa:c1:eb:31:
                    81:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:75:50:CC:E1:CC:7F:52:12:6E:A8:EB:D0:70:C1:13:6C:DF:5C:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/159d45dd-e250-32c8-a33f-37e12f196da2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b470::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:6e:b4:3b:ae:06:cb:06:85:ab:f9:fc:06:b0:05:86:14:97:
         c4:14:61:c4:59:12:da:ac:d4:8e:fd:30:0b:ca:7d:d0:ca:3c:
         cb:b1:e3:86:bd:88:04:a4:fa:d0:10:76:14:48:ff:8a:c4:a3:
         8d:dd:a8:9b:53:b7:06:65:e8:7a:a7:bd:85:14:0f:aa:26:84:
         a0:a9:79:fc:db:98:a3:c8:39:0c:ce:a1:da:2d:6a:f3:68:14:
         28:36:3c:43:cf:df:3b:72:b9:c2:4c:9d:26:38:3f:80:4d:aa:
         88:a4:18:48:3d:6a:51:91:b0:12:de:33:5f:90:56:04:ee:d3:
         a6:21:42:67:20:5b:27:2f:a3:7f:22:f1:01:b7:41:34:5b:53:
         26:17:ab:07:0c:e8:17:45:00:28:c9:43:9c:ae:1a:52:ff:cd:
         f5:01:dc:3c:1d:a4:25:57:47:56:bf:fc:f0:9d:dc:1d:52:ea:
         81:73:5f:9f:49:bc:f1:11:9f:32:0a:3b:90:ea:18:31:90:9f:
         cc:64:7f:ee:03:46:74:7e:b3:d7:f1:77:73:df:f6:1f:9e:82:
         f3:cf:1c:bc:b4:b9:c3:8e:8b:83:c4:a8:7c:69:4d:f5:c6:9a:
         9a:34:98:f9:56:fd:66:bd:68:31:a1:28:58:0a:3a:59:e0:62:
         db:50:ed:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:13 2024 by rpki-client on console-ams.rpki-client.org