Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34a08d4d-df68-3fc9-bd9e-5df34a463c1c.roa
File:                     34a08d4d-df68-3fc9-bd9e-5df34a463c1c.roa (raw, json)
Hash identifier:          SfqsMM/feHXxu5FIfrdPs7B/ye+3NBhDqzaotpXME2I=
Subject key identifier:   5C:27:32:3C:9F:12:DB:89:E9:D7:F6:18:D0:65:74:F6:56:3C:86:B5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D648CB825BD4D4232255C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34a08d4d-df68-3fc9-bd9e-5df34a463c1c.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6167
IP address blocks:        2607:f160:40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:48:cb:82:5b:d4:d4:23:22:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=e216881d-9000-488c-a485-b28c858b4dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:07:c0:0c:4d:41:d5:5b:1c:be:a7:13:45:35:
                    c8:2f:29:af:54:7a:51:ba:2e:52:17:be:75:a4:a3:
                    b9:03:db:7c:ee:76:93:47:a1:dc:65:5d:ed:07:8b:
                    da:91:e3:b0:f3:ba:2e:ed:33:8d:b5:c7:a9:92:c3:
                    f7:16:2f:35:d1:a7:7a:f2:41:69:bd:2d:f5:cf:7f:
                    1c:fa:31:b1:57:d8:11:5a:90:ba:ce:ea:7f:16:6d:
                    05:c0:eb:c0:a0:93:b6:0b:94:c5:fc:db:67:1e:d4:
                    22:d4:c5:2d:a5:b5:07:f9:bd:0a:62:3f:01:e1:6b:
                    cd:07:94:14:4c:1f:3d:01:40:07:59:bc:57:90:c6:
                    ad:21:26:4a:62:99:33:3a:4c:6f:bb:9a:43:90:07:
                    ae:c3:04:f9:7b:f1:c5:1e:a7:24:8e:f6:23:b4:b7:
                    63:f5:e7:29:69:aa:55:64:01:ac:70:e5:36:c0:b9:
                    a8:4a:8d:d9:0b:8a:1d:44:07:1f:72:6c:5f:1e:16:
                    59:37:3a:e7:1b:7b:90:6c:2d:0f:4c:61:99:c5:fb:
                    06:3a:7d:ee:38:1c:23:a6:01:e7:bf:c1:b9:44:16:
                    a8:9b:74:07:b3:f5:02:94:90:b3:f3:e5:b3:d2:d8:
                    ba:11:3c:af:dc:c2:52:9c:23:72:05:e4:e8:fd:0a:
                    16:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:27:32:3C:9F:12:DB:89:E9:D7:F6:18:D0:65:74:F6:56:3C:86:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34a08d4d-df68-3fc9-bd9e-5df34a463c1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f160:40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a2:af:5a:96:74:99:3d:98:3e:ba:09:40:ae:4c:69:63:35:
         42:5f:98:ca:62:63:ff:42:c1:e9:2e:e6:9c:4e:7d:55:df:ff:
         bf:ea:b8:32:de:72:ec:c7:9f:6a:a0:98:e9:7c:c0:5b:80:cb:
         50:78:9e:c8:1b:fc:60:d8:22:b0:33:cb:f8:04:ef:63:f7:6b:
         bd:e5:27:e1:00:b7:9e:24:c6:50:66:e5:1f:35:80:74:f9:7d:
         1b:e9:f8:64:b9:65:e3:86:26:c0:fb:fb:71:d4:c6:47:2a:64:
         6d:d3:18:ea:0c:7d:d1:e9:6a:c3:8c:f0:c5:60:3f:b4:ac:48:
         d5:75:59:6e:85:29:5b:70:af:41:3a:2e:ca:03:54:3c:80:41:
         48:58:42:16:b6:35:c3:98:66:e0:86:94:00:8d:eb:f4:b1:81:
         d2:65:d6:d9:cd:44:d4:a1:24:0b:7e:4e:6f:7a:fb:f5:bf:0d:
         ef:e1:78:9a:79:d9:b1:19:74:a2:ea:eb:0b:b4:c2:3a:5e:de:
         d5:4c:31:55:ed:90:91:36:cf:08:7d:ee:a7:9d:2d:af:fc:f9:
         73:60:31:10:e2:05:60:97:3d:4f:5a:2b:6c:62:7d:d3:71:be:
         ba:5f:88:a2:3c:04:89:28:ea:c5:c1:76:ea:3d:ae:34:8b:cd:
         76:40:b6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:20 2024 by rpki-client on console-ams.rpki-client.org