Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d0b5a39-eb9b-3103-aa48-2c6e7de29d93.roa
File:                     1d0b5a39-eb9b-3103-aa48-2c6e7de29d93.roa (raw, json)
Hash identifier:          DUzNaclx5jQ2Ybn9bX4jt7S+gINq4ffMI8lNdMhAB5A=
Subject key identifier:   66:06:BE:D6:64:67:38:08:C8:E3:AF:9B:6F:F5:E9:AA:79:A5:5B:6E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76C4E666EEEBABCCA20480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d0b5a39-eb9b-3103-aa48-2c6e7de29d93.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     701
IP address blocks:        2600:4040:c000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:c4:e6:66:ee:eb:ab:cc:a2:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=e3afca33-58e6-48f1-b2fd-90e3668a0eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b2:bc:ae:23:d1:9b:6e:5d:82:a2:01:e7:4f:
                    cf:e5:9a:03:a6:e8:6c:5e:3f:d8:48:c7:1d:96:81:
                    f3:a8:a0:8d:ee:37:4b:fa:a9:0a:99:4f:3b:7b:c5:
                    6b:22:90:30:23:11:22:e8:4e:9d:dc:40:39:b3:0c:
                    e1:43:6b:db:78:64:eb:ff:4e:23:ec:a5:e3:72:cc:
                    1d:93:15:a3:7d:c8:1f:13:f3:38:1e:28:ef:2e:49:
                    9f:45:b0:b9:66:0d:bc:e4:0c:fb:2e:5c:41:f8:26:
                    18:ca:c2:23:ed:5a:ce:c7:8e:31:ba:e7:f2:d9:45:
                    a4:d6:74:70:d9:5b:b2:e6:4b:33:70:56:59:b2:ad:
                    cb:9e:b0:52:4a:1d:f3:62:e5:4b:00:fa:7a:40:ba:
                    a2:1a:6d:7c:87:cc:86:b1:01:f8:3d:78:33:22:98:
                    16:6e:a8:1a:b1:cc:25:e4:78:24:52:ff:0a:11:e6:
                    d0:9c:5a:f1:d6:c7:68:60:07:c4:88:25:83:4c:35:
                    6c:5c:71:7b:47:94:3c:d6:fc:f3:a8:a3:d4:e0:c1:
                    a3:7b:28:cd:d3:71:a5:29:dd:65:5d:08:e7:c8:be:
                    4b:26:f8:3e:7e:02:9b:b4:61:28:cd:36:4c:4c:84:
                    65:7e:20:20:71:b2:ed:c0:d2:8c:fd:ab:36:7f:de:
                    7e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:06:BE:D6:64:67:38:08:C8:E3:AF:9B:6F:F5:E9:AA:79:A5:5B:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d0b5a39-eb9b-3103-aa48-2c6e7de29d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4040:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:5f:e5:da:2d:73:15:c7:09:e9:1c:f7:90:78:b3:ff:a6:57:
         06:c7:84:cc:91:63:60:92:9a:3b:26:3f:54:1b:68:fe:0d:4b:
         b7:48:4a:1b:62:2d:f4:5b:a4:ed:03:f1:1c:8a:91:f2:44:9d:
         7d:46:bd:cc:2b:4e:ec:13:ec:3a:8a:3e:95:47:2a:a9:8d:72:
         2a:b0:c9:85:79:24:b3:a9:31:f3:ff:06:dd:e1:a3:ee:36:c1:
         6d:60:5e:63:ec:38:9c:de:4c:54:8e:cc:73:e3:a2:99:fb:9f:
         24:34:f4:60:95:6a:fd:8f:e1:fd:5a:de:a3:3e:1e:fa:35:79:
         4a:d0:b3:6d:d8:6b:7e:ff:00:6e:ab:b2:6d:23:1c:8c:39:65:
         51:66:8e:22:36:fc:c2:c8:47:2b:0b:10:4b:bc:5d:11:42:55:
         1b:dd:85:69:73:ab:68:aa:d7:ee:5a:a2:53:64:3b:16:3e:95:
         ab:2f:70:44:69:0d:bb:2e:3a:57:d5:56:3c:06:9f:59:69:9a:
         a4:57:5e:b5:e9:e7:0d:ec:73:7b:17:c5:fd:b5:7f:91:44:8e:
         e0:8d:bf:0c:d4:cd:a2:bd:ac:89:d6:3f:f5:af:60:36:3b:85:
         df:5b:f8:3f:c9:95:46:b2:76:15:82:a0:88:ce:bb:c0:e6:f1:
         f9:e1:58:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:14 2024 by rpki-client on console-ams.rpki-client.org