Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/19355bbf-4ba4-3a88-9475-4ee8ec309451.roa
File:                     19355bbf-4ba4-3a88-9475-4ee8ec309451.roa (raw, json)
Hash identifier:          YIF8tnWSaYQ/mRhFp0V1WcpUceGCk514xLAi39PaNU4=
Subject key identifier:   AF:27:F5:DF:A7:4D:A6:85:6E:C9:DE:92:5C:BA:65:AB:31:14:1D:49
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D769DAB69E6668DA98FD700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/19355bbf-4ba4-3a88-9475-4ee8ec309451.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1004:b060::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:9d:ab:69:e6:66:8d:a9:8f:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=2b07fb25-5485-4f0b-9cfc-62a0067424ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fc:5e:6c:5c:b8:72:33:f2:99:0e:b0:97:04:
                    dd:f4:80:2c:c8:19:57:d9:87:a6:79:c0:7a:50:a4:
                    c3:ad:48:6d:ec:77:83:52:17:76:68:37:99:44:f3:
                    b8:b4:e3:3a:48:2e:11:af:15:56:09:e4:33:0e:0a:
                    25:5f:cf:80:98:e7:84:cf:a4:ba:eb:36:46:20:82:
                    05:c6:cc:3a:2f:bc:dc:6f:84:1a:18:de:cb:35:cb:
                    5c:a2:58:9a:22:be:66:06:5e:12:11:43:52:02:91:
                    0d:98:bf:b9:7e:a4:1a:ff:17:b6:50:25:7f:99:ee:
                    1f:90:79:82:34:de:b1:72:0b:ec:24:cc:d3:1a:3b:
                    11:dc:b4:c1:51:8d:2d:f6:cf:1a:93:55:68:bd:ce:
                    8d:6a:3c:d4:12:ad:9c:23:66:4d:eb:b1:16:e4:98:
                    5f:c4:89:ac:c6:ba:27:f6:1e:c7:ce:77:9c:aa:e7:
                    79:56:5a:5e:d8:ca:bb:e7:5a:3a:75:c5:62:4c:6b:
                    17:a5:ba:38:87:57:7a:22:ae:4f:3f:c3:07:03:78:
                    63:39:1c:fd:64:6e:4d:39:da:a3:6b:78:2e:af:40:
                    e6:4d:69:00:43:85:a5:02:e7:6f:d1:2f:62:2d:c4:
                    79:1f:3d:e3:60:0f:1c:15:a8:a4:0d:ac:74:e2:af:
                    36:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:27:F5:DF:A7:4D:A6:85:6E:C9:DE:92:5C:BA:65:AB:31:14:1D:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/19355bbf-4ba4-3a88-9475-4ee8ec309451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b060::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:30:4d:da:1f:cf:e7:d3:a4:55:67:97:47:52:04:fd:f8:bc:
         aa:34:64:02:77:08:ee:29:6b:30:61:77:57:e2:35:fa:71:35:
         67:01:88:cc:3b:b4:c5:cf:69:47:88:8a:c2:b1:16:66:74:e3:
         76:2b:c0:9e:32:cf:28:be:f6:45:d0:c2:21:11:e7:f0:a0:57:
         32:72:0d:5e:70:55:2e:92:d6:77:69:6b:ac:c3:61:a7:dd:6b:
         82:dc:9c:31:93:b0:b6:96:9e:44:7a:46:1b:4c:57:5d:8a:a5:
         47:ef:57:ed:84:aa:d6:c5:c5:cc:bf:3f:6c:48:07:22:b3:76:
         ac:06:6e:29:34:4a:d5:7b:62:04:0f:ed:05:ae:45:1e:4f:e7:
         04:d8:d8:74:49:50:c2:0a:f8:81:3c:4a:ca:ca:cc:82:72:c1:
         b6:52:01:c4:1a:3f:b6:64:69:88:eb:3b:af:ce:74:40:71:c8:
         dc:1e:1f:a3:dc:1d:de:85:8b:5d:95:4d:ea:4e:e3:4a:2d:ff:
         6c:f1:c8:1c:bd:70:5c:67:79:bf:a2:fe:13:b4:82:77:78:87:
         7d:71:94:80:c8:c5:5b:42:0c:c0:7c:55:59:d4:51:37:85:21:
         9b:2f:6f:b1:c0:9e:76:59:08:77:fe:f5:60:96:c6:31:6b:ad:
         a5:10:c8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:29 2024 by rpki-client on console-fra.rpki-client.org