Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e945473-c232-3d51-bf11-bc5217cff867.roa
File:                     1e945473-c232-3d51-bf11-bc5217cff867.roa (raw, json)
Hash identifier:          Dlzy+ezKAdEkUYU8QuyHKG0efr5PTgVgF6X5atObITQ=
Subject key identifier:   4A:50:DE:84:56:B4:F8:BC:64:5D:F4:E6:5D:4F:A8:82:D9:30:97:FD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76989C5D22066998418780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e945473-c232-3d51-bf11-bc5217cff867.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1002:d040::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:98:9c:5d:22:06:69:98:41:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=aee8a625-2a17-47f0-9ae3-87e73631c41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:df:83:7d:42:fb:ce:e4:e9:ae:84:54:3b:b3:
                    f8:d9:d1:33:fe:83:3a:fa:ab:f5:bf:39:7e:df:28:
                    9c:29:5e:26:ff:8a:b4:e5:06:94:c5:7f:64:e0:c4:
                    33:70:fe:d9:2a:b6:15:3c:5b:3f:e3:22:f0:40:86:
                    d8:35:4d:99:1b:cd:35:63:c9:48:c1:d5:b3:64:3d:
                    b9:9a:2c:72:25:be:3d:37:2a:bf:4b:a6:ad:59:75:
                    e0:55:f9:62:68:91:98:0c:61:62:01:4b:d4:81:20:
                    5b:fe:4a:e9:43:46:36:97:20:39:3a:99:c3:01:39:
                    34:e0:25:13:ce:4e:bd:f9:98:18:8a:b6:29:2b:a9:
                    c9:00:06:0b:c3:e9:c7:c8:10:cc:3a:11:96:3f:5d:
                    21:f8:65:e4:88:97:be:9f:63:46:b6:8b:be:7d:3c:
                    49:f2:ad:09:7f:10:78:80:92:00:4e:50:77:90:53:
                    ae:e1:e3:95:4f:91:81:87:47:0c:58:ff:9f:38:98:
                    44:97:f5:06:33:6e:a0:1b:b9:28:ed:4d:93:f5:7a:
                    09:f7:2e:38:d7:de:27:c1:88:ea:19:1c:f7:12:83:
                    29:02:f2:7b:a2:3f:f1:fd:27:a1:d6:d2:02:9f:51:
                    84:ab:47:30:23:22:44:c5:8d:3b:e4:2e:b5:cd:15:
                    31:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:50:DE:84:56:B4:F8:BC:64:5D:F4:E6:5D:4F:A8:82:D9:30:97:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e945473-c232-3d51-bf11-bc5217cff867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:d040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:eb:cd:05:83:8c:ca:98:8b:71:22:24:c2:a7:30:de:e2:8d:
         5d:2d:f4:4b:72:1f:9c:de:c7:63:37:8f:b1:73:b8:5a:e5:e9:
         ba:10:6b:c6:9a:61:83:ee:86:ff:82:6b:31:e4:7c:71:76:94:
         15:59:fe:69:26:7b:81:81:fa:f5:7c:3a:a4:94:11:7a:72:6a:
         93:4a:44:fb:56:bf:9d:7c:a6:b3:dd:a6:f8:58:26:52:85:10:
         66:95:24:55:47:a1:50:a5:30:16:1e:03:22:fc:52:80:22:3d:
         97:43:cc:2e:91:ef:12:d2:50:af:1c:b2:47:bd:77:76:29:34:
         48:c2:8e:cb:35:f4:6b:cc:92:51:7e:ff:27:29:16:e6:d9:02:
         c7:6f:97:b7:99:34:a7:03:81:fc:f7:cb:9f:59:0e:9d:93:45:
         b3:7b:ce:29:ba:c4:3e:e7:18:6a:6b:c8:64:2a:8e:04:0e:8b:
         d4:03:7a:08:38:cf:e1:77:28:92:c5:48:d5:25:42:b0:b5:7c:
         1d:92:33:78:f9:3f:1f:3d:2c:0f:2a:05:58:3e:38:ff:a0:88:
         40:11:7c:ad:6f:64:4e:f2:3f:43:b3:4d:1a:de:e0:01:b1:69:
         2d:48:67:15:a9:98:da:0f:07:d8:26:e9:bc:e0:2d:79:db:15:
         37:43:6e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:15 2024 by rpki-client on console-ams.rpki-client.org