Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/191b0486-4982-3082-ba0d-f032fecfd65d.roa
File:                     191b0486-4982-3082-ba0d-f032fecfd65d.roa (raw, json)
Hash identifier:          ytGtiA7h9SIimenZDX3Johd5NUqqNcLFVlJhbf5o7p4=
Subject key identifier:   6B:5A:21:20:CA:C6:F0:7B:A8:60:11:38:6C:EE:F6:5B:CE:A0:53:7A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D769E77CF375DD27213C800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/191b0486-4982-3082-ba0d-f032fecfd65d.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1004:b140::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:9e:77:cf:37:5d:d2:72:13:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=f9566df7-dd1d-4984-882f-2e9f4a598c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dc:26:a7:71:e6:93:03:05:79:fa:d1:e7:5e:
                    da:55:9d:f6:e2:32:e2:36:5b:83:79:9c:08:1b:d7:
                    59:18:b5:29:91:06:0c:8c:c6:7a:25:5e:6d:0d:0d:
                    32:41:0f:3c:24:04:4c:11:98:a0:60:20:42:42:a7:
                    5a:dd:80:de:66:de:ff:ed:bd:f6:ea:a5:89:b2:ea:
                    92:1f:ce:1e:b7:fd:ce:d5:50:35:11:d9:ea:fa:6c:
                    2b:4c:75:5b:d8:a3:37:29:c4:cc:69:2e:53:88:3d:
                    2b:53:21:85:8a:20:8b:92:c9:da:a8:78:99:ab:c3:
                    41:42:f8:ac:de:65:d9:7b:d9:57:38:57:a1:da:69:
                    3b:3a:65:4d:38:5f:3d:7e:85:5d:9a:f5:b7:35:3a:
                    f4:6c:86:10:db:8f:10:54:44:24:89:d0:49:77:39:
                    ce:07:1f:42:3e:ac:b1:6a:29:a5:b5:2d:38:28:1e:
                    7f:58:17:9b:45:35:dd:88:57:ec:a7:17:ac:e3:3f:
                    fb:4c:2b:41:b4:8e:3f:75:4a:d0:ae:67:10:89:71:
                    ad:bc:dc:6f:f6:d3:6b:a6:c9:77:8c:95:37:0a:b1:
                    cd:1d:78:54:d8:5a:66:8a:d8:d2:ee:b5:0f:54:5a:
                    b1:06:da:40:9a:28:80:71:22:0f:21:8a:07:d2:a9:
                    46:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5A:21:20:CA:C6:F0:7B:A8:60:11:38:6C:EE:F6:5B:CE:A0:53:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/191b0486-4982-3082-ba0d-f032fecfd65d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b140::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:1a:84:6c:4c:99:16:e0:b1:4c:92:37:8b:99:48:4c:35:97:
         36:72:16:0b:16:ea:0b:c0:87:51:8f:91:68:a8:e4:aa:e5:eb:
         c5:1f:ed:0b:cd:a4:9f:fb:73:be:23:fc:c8:2a:d1:0a:11:a9:
         18:d4:f6:87:bb:cb:f7:da:74:a8:d5:4e:b2:2a:13:42:08:1c:
         43:a5:bc:59:13:a7:2e:22:e2:35:72:75:c9:0a:29:9a:2a:de:
         6c:ce:bb:82:c7:a9:a7:dc:6e:55:26:77:9d:e0:62:7d:23:54:
         b0:ee:50:13:f2:a9:93:5d:0d:ea:4f:2a:d1:8d:fe:d1:34:96:
         f7:80:83:8c:2f:eb:47:d3:cb:81:de:77:4f:a9:1c:d6:0c:35:
         10:3a:8e:62:f1:55:ee:42:a4:4c:6d:cf:f3:68:90:48:03:2c:
         4c:4b:13:eb:0a:f1:1a:ae:85:4c:bd:78:cd:2f:85:c0:9f:fc:
         18:dc:6c:82:3c:67:6e:25:ec:61:b6:7f:70:52:5f:a5:e2:39:
         6f:c5:3a:f1:06:a0:7b:5b:9a:e2:2f:93:f9:89:11:4f:e5:40:
         7d:e5:c7:35:d1:18:f6:48:fe:70:c5:28:56:c7:74:75:94:ae:
         da:5f:a1:ff:2a:1d:e2:8f:51:1b:24:9d:c7:9e:15:13:4b:82:
         7b:fe:ee:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:06 2024 by rpki-client on console-ams.rpki-client.org