Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1af0a8e6-a15b-3e1f-a222-c0faa9eedeb7.roa
File:                     1af0a8e6-a15b-3e1f-a222-c0faa9eedeb7.roa (raw, json)
Hash identifier:          yko03yAP/I9ZucH+u2fhMmKv0pFfEgbtfW7unxp2egk=
Subject key identifier:   6C:46:A2:6B:64:1D:FD:10:4A:8D:B9:9F:4B:2A:5F:C7:3C:08:26:30
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76A96EC992F391AA95BDC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1af0a8e6-a15b-3e1f-a222-c0faa9eedeb7.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1007:b080::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:a9:6e:c9:92:f3:91:aa:95:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=2fbf2689-efd4-42f1-980f-961db78c03ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:d9:c4:a5:39:ad:93:0a:75:f8:b5:d9:6b:
                    08:e3:95:d0:8b:d6:23:29:88:fa:f1:b1:66:99:24:
                    e9:cd:f9:69:41:f1:b7:ed:04:74:1d:b0:d8:fd:8e:
                    65:81:77:49:69:e0:6e:f9:64:33:40:fb:c6:92:d6:
                    b3:6a:1c:01:2f:d5:86:c9:f3:3d:c3:db:56:cf:88:
                    9f:18:12:b7:20:82:64:4a:ef:d2:f1:90:65:ab:27:
                    6b:7b:c7:9a:ff:13:e4:28:57:6b:7d:a4:2f:97:36:
                    87:02:71:d1:30:96:f7:4c:cb:6a:86:68:66:31:a6:
                    fe:39:9f:b9:ac:0f:b0:ad:5c:e5:86:91:32:2a:90:
                    cf:8d:07:77:df:be:55:96:a0:39:a5:78:e0:e7:8a:
                    1c:d8:9b:92:b4:c3:3c:a8:82:43:f0:37:07:dd:e0:
                    19:82:a4:cc:66:a5:1d:fb:17:4c:c8:14:a8:fd:86:
                    70:f6:2b:b2:79:53:3d:6f:33:74:e2:11:62:e3:cb:
                    bc:bb:fc:c3:b0:a4:1d:a5:f4:3c:c0:17:9a:04:65:
                    03:5a:70:e9:66:ea:5c:27:4c:2e:db:2d:4e:a2:b9:
                    12:9e:17:93:73:91:a6:3a:e4:a2:8b:db:a4:6c:38:
                    fc:1a:96:86:51:f3:a0:78:3a:7f:44:0f:3f:84:42:
                    a5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:46:A2:6B:64:1D:FD:10:4A:8D:B9:9F:4B:2A:5F:C7:3C:08:26:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1af0a8e6-a15b-3e1f-a222-c0faa9eedeb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:b080::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:fe:2f:22:b6:a9:5d:15:4e:84:fc:99:0a:3d:4b:3f:d4:06:
         84:fe:4c:7b:ef:08:aa:8a:9b:41:9b:1b:f4:41:93:ea:f8:b6:
         51:44:b2:f7:02:0e:5e:82:ff:a7:d3:9f:23:12:b5:b4:82:00:
         91:01:5d:35:4e:92:72:84:a7:5a:91:33:1a:18:34:c3:dc:fc:
         d6:0b:99:f4:3c:f5:81:d0:33:e3:6e:cc:95:24:e4:e1:21:32:
         6f:a1:73:ba:6f:35:7d:12:6c:29:7d:be:84:b3:e7:ba:76:19:
         ab:8c:e4:64:9e:22:ab:24:a2:89:fb:1a:f2:44:b0:80:3d:88:
         36:56:b0:fb:e4:9d:a7:e9:e7:2a:c2:ef:90:97:76:41:a3:3e:
         bd:9e:7b:e2:f9:1f:1d:41:ca:4e:39:17:47:22:90:bf:af:88:
         49:98:04:03:a0:f0:83:d5:d6:9e:a6:4d:bc:f2:26:89:22:f6:
         de:b1:b3:b2:a4:56:92:66:5d:63:6e:ad:43:de:b5:2f:41:1f:
         7e:26:2b:b2:54:fc:61:1e:ad:00:52:ea:fc:01:cf:56:f0:a7:
         43:0a:21:3a:3c:0a:35:0f:85:3a:87:6f:df:0d:95:92:eb:ad:
         d6:de:eb:88:d7:25:95:a4:0b:08:52:6f:33:9c:e6:3f:11:71:
         db:0d:20:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:29 2024 by rpki-client on console-fra.rpki-client.org