Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a85bc02-c232-32a4-afa5-874e560f0fe1.roa
File:                     3a85bc02-c232-32a4-afa5-874e560f0fe1.roa (raw, json)
Hash identifier:          1AK9zAyUwr1bkB5RR9pQYvaoTpoHLpm8pXwdi1mwj+w=
Subject key identifier:   EB:DA:30:75:0A:AD:1C:76:6C:2F:01:40:A2:95:3B:82:A2:93:1A:5E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D769CE7B30978F53BA9F990
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a85bc02-c232-32a4-afa5-874e560f0fe1.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1004:a040::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:9c:e7:b3:09:78:f5:3b:a9:f9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=07244bf8-02a5-4648-8406-e07bfff24bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:02:4f:44:1b:40:6e:70:ba:04:29:e0:44:dc:
                    92:f6:4a:c7:e7:a8:a6:ad:6e:19:65:18:4c:63:77:
                    e0:96:a2:0d:5d:d2:73:68:e3:97:8c:2a:85:eb:e8:
                    46:d5:a4:d8:a5:11:90:a6:44:c7:d2:a4:59:03:66:
                    69:36:a5:2c:41:c0:05:be:d1:41:a5:a6:3b:d1:3b:
                    51:cd:c0:29:db:88:3e:0f:6d:64:c1:ce:a2:61:c7:
                    20:75:0c:1b:dd:fc:bc:c6:1d:e2:f9:ca:f7:6e:e2:
                    6d:f5:41:a8:6c:b1:21:d3:99:c6:51:2a:f1:9f:aa:
                    9d:1c:c6:23:fb:21:b9:bd:51:ee:0d:93:56:8e:fe:
                    b0:04:dd:73:a3:59:68:2f:be:f6:3a:d7:dc:7e:5b:
                    d4:1c:8d:c4:ca:b3:c6:e6:ba:2c:ee:2b:70:74:c1:
                    2b:ea:99:ae:c1:48:4c:c8:00:d2:19:66:8b:75:0c:
                    69:52:b6:63:56:61:60:70:1b:6e:3e:d6:1f:f8:04:
                    06:ec:62:9b:e3:50:3c:e1:3f:d1:cd:25:68:f7:60:
                    42:7e:27:88:49:e6:93:cf:49:2d:aa:42:4b:b2:e2:
                    47:63:7c:98:a8:63:ab:1f:55:11:2a:f3:20:68:0f:
                    09:de:5c:ae:7d:64:80:3c:dd:77:43:19:b9:dc:f4:
                    0d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DA:30:75:0A:AD:1C:76:6C:2F:01:40:A2:95:3B:82:A2:93:1A:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a85bc02-c232-32a4-afa5-874e560f0fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:a040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ad:f5:d5:04:f3:4d:8a:73:38:51:08:39:c7:15:40:40:6d:
         b1:87:3a:be:e9:30:0a:90:02:b1:03:f4:e7:91:8b:a0:5d:3f:
         83:83:9b:29:ac:6e:bf:a6:b1:18:1f:90:23:ea:c9:bb:56:65:
         5f:f0:d8:5b:2a:84:3d:ce:11:b6:6a:64:99:18:e7:44:ab:ae:
         c8:46:f5:d5:5a:df:bd:15:ce:c4:e2:e2:8a:aa:35:72:86:5c:
         cf:99:5f:9b:5b:d8:33:dc:fa:39:56:54:e4:94:27:c2:07:47:
         08:1b:1b:a5:6f:c3:86:c8:92:96:66:a8:6b:ca:0d:23:16:4e:
         08:b0:2b:6c:42:f0:cd:78:48:f1:22:6d:9f:45:b8:24:67:9c:
         f2:36:07:9d:02:e9:30:cd:d5:36:e9:c6:29:26:1c:b0:ce:18:
         8a:60:26:bf:28:37:7b:d2:43:4b:56:3e:a9:85:58:85:62:f8:
         b9:c8:ef:9b:ca:28:23:01:ff:90:f5:8b:ca:f7:e6:90:91:35:
         ac:82:b9:45:a2:98:0c:f1:07:67:4f:07:7d:a4:9b:52:85:a3:
         c9:9b:bb:42:3b:86:5e:bc:ed:ba:f6:02:f1:7f:ed:db:5f:fc:
         20:35:86:d5:88:a4:b0:55:f8:6f:a5:dc:17:99:0d:49:44:98:
         9c:da:68:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:25 2024 by rpki-client on console-fra.rpki-client.org