Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18b7d70f-1b30-3575-9a4f-e9dd8e74c2b1.roa
File:                     18b7d70f-1b30-3575-9a4f-e9dd8e74c2b1.roa (raw, json)
Hash identifier:          X6TwtKdIT60uHqgTg5h1k8wY5Zh2XdAVGDDvmMPFRpk=
Subject key identifier:   1B:E7:B9:55:F7:EA:E8:C6:BA:B4:93:11:17:05:52:FE:A5:14:9A:4A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D769622A2FB8FAB419EEB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18b7d70f-1b30-3575-9a4f-e9dd8e74c2b1.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1002:9100::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:96:22:a2:fb:8f:ab:41:9e:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=ffa62c67-647d-4a4c-aac8-7ff5555c508b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:ff:c8:58:ac:8b:5b:0d:09:18:81:e1:7a:
                    5d:c9:b9:2d:9d:fa:72:f5:91:a8:cc:ac:a5:a4:92:
                    36:ca:30:c2:b2:08:de:c2:bf:da:cb:91:c8:97:69:
                    09:f5:98:91:09:52:f9:b7:19:b2:1c:6b:7f:b0:76:
                    e1:d4:b9:10:24:c7:f1:8b:4f:ba:8f:2f:64:d1:b1:
                    01:9c:cb:82:53:58:d7:f1:9e:35:c9:6c:4b:70:7a:
                    d6:a2:e1:16:49:16:59:d5:57:6d:f4:5a:fb:29:34:
                    88:9b:46:32:c6:b1:a5:ec:fc:43:22:d1:fb:d2:0d:
                    be:57:b1:54:be:72:8c:60:4f:a9:3d:87:6f:d7:76:
                    d5:0f:b2:2f:e4:5c:15:ca:ba:6c:20:d3:ea:54:cc:
                    24:9e:be:b9:18:5a:32:ed:d2:5a:34:85:21:e4:22:
                    28:ac:57:b9:77:dc:7b:6c:df:90:72:d7:90:bb:c1:
                    a1:f5:73:a2:bf:f7:83:81:dc:dc:ad:66:a0:f8:ba:
                    5d:e1:31:ad:03:99:af:f2:05:1e:35:25:3e:29:a7:
                    a6:cd:37:5a:d1:50:d6:b2:47:33:50:ad:90:28:27:
                    e2:92:e3:be:32:8b:55:e6:92:73:27:c3:b7:5b:59:
                    cb:c4:e0:7a:4e:00:f6:f0:bd:9b:ac:a0:59:8c:6c:
                    85:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E7:B9:55:F7:EA:E8:C6:BA:B4:93:11:17:05:52:FE:A5:14:9A:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18b7d70f-1b30-3575-9a4f-e9dd8e74c2b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:9100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:d4:c6:5f:5d:96:9f:ed:e5:3a:b0:33:22:ba:c3:12:2a:1a:
         eb:83:6e:3c:65:07:1d:9c:68:70:72:cd:9b:c2:1b:8a:b2:8b:
         93:e8:80:83:fd:f4:c6:b3:56:5b:ff:3a:6f:1c:7e:6b:30:80:
         28:09:04:4e:84:89:f5:2b:94:85:d4:0d:f0:34:84:16:f3:5d:
         3c:5a:11:67:69:4f:97:eb:cd:c0:99:c2:e3:23:71:3e:5c:be:
         94:77:14:52:db:f7:5d:9a:0d:2d:4e:52:c4:7e:32:04:44:bb:
         38:b7:67:58:90:50:9a:77:ad:c7:2c:55:a1:a5:48:52:e1:1e:
         cb:2a:27:aa:44:a1:f0:d0:2f:ab:e0:a6:30:32:d9:69:0a:81:
         e2:ff:33:ac:9f:46:e3:9b:31:23:8e:99:26:2c:a7:49:99:49:
         6a:74:2e:44:02:80:4b:16:60:0c:c7:d7:ce:83:5b:2f:aa:95:
         70:c3:9d:8b:0e:fc:01:ed:38:ea:5a:31:1f:7f:50:f3:ae:80:
         21:fe:8a:48:ef:ff:b6:75:15:39:22:b4:65:f5:cc:dc:45:21:
         5a:5d:2b:38:c4:42:a8:55:3a:01:bf:4d:e4:75:c6:08:11:bc:
         5b:2d:70:a8:dd:74:ec:6b:77:31:e2:ff:83:71:3d:4a:42:53:
         4c:c3:75:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:13 2024 by rpki-client on console-ams.rpki-client.org