Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2efe2199-d7e6-37ad-a9ee-0813f52600bd.roa
File:                     2efe2199-d7e6-37ad-a9ee-0813f52600bd.roa (raw, json)
Hash identifier:          STOriaeuURqg7Oa52QvKngkMoQPry4N36Gd0LkapoSg=
Subject key identifier:   E1:37:F6:E1:54:28:90:6D:E4:80:CF:4C:D9:1B:E0:FE:C6:2C:FC:BB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D769F10A598FBB15633E300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2efe2199-d7e6-37ad-a9ee-0813f52600bd.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1004:b1c0::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:9f:10:a5:98:fb:b1:56:33:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=b888884d-0f26-4878-a328-d67cb41ca3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0d:a2:07:c3:05:f6:f7:c7:af:f1:2e:13:c0:
                    cb:54:9b:d6:69:d0:d9:71:43:a9:21:57:0d:d7:99:
                    0a:12:f2:45:49:5b:27:90:de:07:a4:ec:59:79:6e:
                    81:3b:42:ef:72:cf:41:24:3d:82:0b:1d:b1:4e:ef:
                    ba:c1:cf:f3:cc:32:7a:e3:05:ff:f5:24:86:85:28:
                    c0:95:6a:79:3c:64:9a:53:0c:39:cc:4e:df:bc:45:
                    39:0e:c6:3a:2d:cd:ff:f5:8e:f0:d3:05:41:d1:1a:
                    2b:7c:ac:53:bc:71:72:12:17:b7:cd:d8:7b:4b:c7:
                    98:77:a6:2c:c4:92:f8:fa:ea:e4:64:b7:cf:22:91:
                    6d:68:84:72:c1:a0:1f:03:56:32:25:25:e1:a2:d2:
                    a0:4c:26:b8:30:00:93:b8:55:7d:9b:de:fb:05:13:
                    d8:d7:82:55:53:4a:70:8e:53:c7:fd:92:ce:67:30:
                    f7:ac:61:22:b4:11:fc:1d:0c:d0:f9:dc:c7:66:c4:
                    8e:66:d1:dd:8b:98:8b:83:76:2d:ea:b7:a2:02:c5:
                    8c:87:9f:90:30:5a:57:1b:49:6c:f3:2f:1b:05:7d:
                    7e:a3:e7:c0:6a:bd:f4:c5:d0:f9:4e:2c:f7:2a:31:
                    12:07:cf:47:6c:a5:38:3b:df:42:88:64:68:35:c8:
                    50:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:37:F6:E1:54:28:90:6D:E4:80:CF:4C:D9:1B:E0:FE:C6:2C:FC:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2efe2199-d7e6-37ad-a9ee-0813f52600bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b1c0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:4f:ed:b6:a0:41:83:d3:5c:12:3e:08:05:dd:45:56:64:09:
         19:6e:45:55:d8:a1:a0:39:5d:3e:e4:a5:1f:e4:99:d7:58:63:
         21:41:ff:94:5f:f7:90:b3:e6:de:ac:23:05:a0:7b:8c:0c:f7:
         92:8a:62:26:a5:20:a5:07:84:03:31:74:c3:2a:fa:89:ab:f0:
         9e:8e:00:fa:71:97:d3:97:07:6d:b3:2b:4a:e7:f0:62:95:e7:
         d8:e4:bf:4a:2f:c1:90:11:01:ef:da:eb:d6:07:fd:23:24:a0:
         30:27:f1:3b:ba:99:bd:48:35:d2:84:68:20:81:4a:7f:80:de:
         a1:c1:a3:3d:46:12:08:fb:85:01:0f:11:cd:f7:34:0a:d4:8b:
         78:c4:aa:8e:37:0a:d3:e5:48:e4:5d:a0:cb:b3:18:3e:d7:24:
         c9:1e:39:9a:3a:bb:24:47:8d:50:ce:66:09:0a:a5:4f:1b:49:
         45:c8:be:6d:62:cc:1b:f8:af:31:bd:51:90:8e:6c:f8:cd:67:
         ff:a7:40:4b:34:1c:00:b2:0a:6b:af:58:3f:78:78:ce:7e:67:
         9e:5a:f7:e5:c1:62:f7:e3:2c:e3:93:c9:10:57:ae:ac:19:95:
         eb:ca:90:4c:d0:c1:a1:0e:b8:6c:f4:96:e6:5c:1a:7b:94:0b:
         5c:2c:f1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:22 2024 by rpki-client on console-fra.rpki-client.org