Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/275d9937-937b-39a1-a7cd-727ebec4a941.roa
File:                     275d9937-937b-39a1-a7cd-727ebec4a941.roa (raw, json)
Hash identifier:          4k5F75OqmS46aUpA3abTIwOoNT55Btqba+FbGFYLxqg=
Subject key identifier:   6A:37:CF:34:EB:2C:7D:2F:C5:D7:3E:91:55:10:17:F9:2D:43:9F:8F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4A9FD3CF743D0F6998068BF
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/275d9937-937b-39a1-a7cd-727ebec4a941.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100b:a000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:a9:fd:3c:f7:43:d0:f6:99:80:68:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=7a69b674-0ab5-4303-a53c-fdcf3d3ec046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8e:f8:75:70:de:6a:7a:5a:af:bc:c4:e6:6f:
                    f8:46:47:d9:fb:44:cd:71:48:e0:1a:d0:17:66:dd:
                    8a:ff:1f:cb:5d:0e:b3:d2:3b:5f:e3:92:a7:56:ca:
                    ab:c8:62:bf:8c:99:ee:78:e0:09:6f:53:c3:52:79:
                    4d:33:1d:f4:29:7b:c5:39:8c:44:62:88:81:ad:99:
                    cd:72:75:3b:22:d7:00:6b:f5:00:db:45:12:18:f1:
                    f8:76:ab:22:be:75:af:9a:52:4e:37:b9:ac:5e:ab:
                    b6:5c:51:4f:91:6e:5b:94:45:93:31:e9:44:cc:e3:
                    fa:a3:87:39:05:3e:a1:ff:b7:49:99:53:da:00:a5:
                    59:20:8c:c1:b6:dd:41:da:f6:0d:13:05:90:1c:2d:
                    ea:74:96:68:dc:84:55:f3:dc:03:2f:09:df:ef:74:
                    1a:d3:80:01:93:0e:52:a6:ef:22:57:d5:4c:4b:50:
                    a0:84:04:b9:47:16:27:ad:f0:44:62:b1:d0:29:b9:
                    89:42:e6:50:7b:33:ff:a1:c8:04:39:f0:43:50:a9:
                    4d:54:88:d1:a0:c2:48:ec:ec:e9:95:c0:b3:8b:0b:
                    16:a9:d8:0b:c7:40:42:19:09:ed:05:4d:f4:55:9c:
                    9b:3e:4e:04:af:ea:91:d3:3f:0f:28:67:0b:23:16:
                    89:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:37:CF:34:EB:2C:7D:2F:C5:D7:3E:91:55:10:17:F9:2D:43:9F:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/275d9937-937b-39a1-a7cd-727ebec4a941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:99:ac:7b:57:39:d5:cc:7d:54:f7:81:ef:8d:f6:4a:e5:77:
         6e:b6:cd:f4:bc:a7:98:bd:99:37:37:0d:74:ef:f8:bc:b6:d2:
         ef:41:51:c5:b5:2f:93:08:73:d6:8e:2f:1b:bc:2c:c4:2c:33:
         62:8d:9b:f7:7b:8c:ff:55:56:b1:6c:6a:f1:10:ac:7b:b8:8d:
         29:5d:7c:25:67:8d:e6:d3:1b:fc:49:5f:9a:fb:a8:92:d6:c2:
         39:cd:49:b7:5e:a2:0e:70:8f:e2:4b:88:98:2d:9a:c2:6a:46:
         e3:3a:50:ec:eb:51:48:25:74:b6:f8:85:86:46:0e:57:d4:4e:
         52:05:15:df:ae:93:2f:59:90:0d:b8:8d:8e:c3:75:60:0b:62:
         c0:19:69:d0:b0:7a:68:3b:6c:06:fe:d5:5e:ae:1b:3c:12:17:
         05:f6:03:20:5e:17:69:39:f5:a5:09:ca:e8:99:46:1d:60:12:
         a3:e5:ab:57:45:56:d4:15:52:82:9e:62:64:9f:62:ff:a7:21:
         02:0b:39:21:ef:34:16:7c:2f:eb:c5:72:ed:12:02:bd:34:9d:
         b2:4d:6e:42:6f:5d:81:f6:f3:88:aa:9b:60:14:df:cc:11:b3:
         a2:46:88:0b:3c:a6:64:f7:85:ec:e1:d3:58:4e:d3:00:d4:a3:
         0a:60:9c:58
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfEqf0890PQ9pmAaL8wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk
N2E2OWI2NzQtMGFiNS00MzAzLWE1M2MtZmRjZjNkM2VjMDQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY74dXDeanpar7zE5m/4RkfZ+0TNcUjgGtAX
Zt2K/x/LXQ6z0jtf45KnVsqryGK/jJnueOAJb1PDUnlNMx30KXvFOYxEYoiBrZnN
cnU7ItcAa/UA20USGPH4dqsivnWvmlJON7msXqu2XFFPkW5blEWTMelEzOP6o4c5
BT6h/7dJmVPaAKVZIIzBtt1B2vYNEwWQHC3qdJZo3IRV89wDLwnf73Qa04ABkw5S
pu8iV9VMS1CghAS5RxYnrfBEYrHQKbmJQuZQezP/ocgEOfBDUKlNVIjRoMJI7Ozp
lcCziwsWqdgLx0BCGQntBU30VZybPk4Er+qR0z8PKGcLIxaJvwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGo3zzTrLH0vxdc+kVUQF/ktQ5+PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjc1ZDk5MzctOTM3Yi0z
OWExLWE3Y2QtNzI3ZWJlYzRhOTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQC6AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAK6ZrHtXOdXMfVT3ge+N9krld262zfS8p5i9mTc3DXTv+Ly20u9B
UcW1L5MIc9aOLxu8LMQsM2KNm/d7jP9VVrFsavEQrHu4jSldfCVnjebTG/xJX5r7
qJLWwjnNSbdeog5wj+JLiJgtmsJqRuM6UOzrUUgldLb4hYZGDlfUTlIFFd+uky9Z
kA24jY7DdWALYsAZadCwemg7bAb+1V6uGzwSFwX2AyBeF2k59aUJyuiZRh1gEqPl
q1dFVtQVUoKeYmSfYv+nIQILOSHvNBZ8L+vFcu0SAr00nbJNbkJvXYH284iqm2AU
38wRs6JGiAs8pmT3hezh01hO0wDUowpgnFg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:21 2024 by rpki-client on console-fra.rpki-client.org