Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b3d2f6f-d24f-3092-9050-8a32040c4aec.roa
File:                     3b3d2f6f-d24f-3092-9050-8a32040c4aec.roa (raw, json)
Hash identifier:          PSN8DDPnmuY/ZeQzgmiv9rYbnAddpJG7p8TnoIf/l58=
Subject key identifier:   F0:5B:CF:9B:32:AE:05:8B:FD:5D:BF:34:62:96:99:74:FF:22:C3:CF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBE1A6C446C56D1C7CD378
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b3d2f6f-d24f-3092-9050-8a32040c4aec.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1014:a010::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:e1:a6:c4:46:c5:6d:1c:7c:d3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=0cec0c5d-9cfa-42e3-afac-9c4490183dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:af:11:97:bb:04:21:40:81:ed:6f:ba:d0:29:
                    aa:f9:84:11:51:39:4f:f3:10:f3:21:59:62:0d:73:
                    d6:6a:16:37:5d:eb:6b:f8:2d:b7:f9:a8:72:57:6e:
                    c0:fe:08:e2:ed:30:22:7e:e1:84:86:c5:c9:6e:33:
                    4c:22:da:6e:d8:fa:82:ef:df:b7:f2:3c:3f:3c:ca:
                    62:c8:79:55:e2:5a:35:17:aa:2d:cb:c6:6c:3a:c3:
                    4d:b6:4a:6f:a4:92:06:f3:c3:81:6b:f9:e1:6f:41:
                    35:c9:f4:c8:09:86:dd:c5:84:80:9d:32:f5:4b:3c:
                    92:97:84:32:87:20:bc:47:47:ec:19:2d:a7:60:0e:
                    5b:b3:8d:e3:da:1c:8d:ca:6c:2f:5f:88:5e:41:33:
                    28:57:38:3f:c8:8b:9d:06:4c:d8:49:b7:ff:2a:47:
                    e4:7e:19:78:41:58:c2:f3:9c:c6:65:3a:28:73:69:
                    a4:db:a0:87:c7:38:da:96:f9:56:88:2e:8b:d0:c7:
                    b1:5b:33:b7:f6:24:b6:a1:16:06:ca:c3:46:52:0d:
                    5b:60:03:a1:df:0f:60:5e:06:99:0e:bf:f8:95:9c:
                    dd:ba:33:fc:b8:2d:c3:ee:65:84:ce:b1:52:65:9d:
                    56:9c:64:19:a8:7b:46:e2:fe:71:d8:27:1b:04:cc:
                    e1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5B:CF:9B:32:AE:05:8B:FD:5D:BF:34:62:96:99:74:FF:22:C3:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b3d2f6f-d24f-3092-9050-8a32040c4aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:a010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:36:cd:e4:d5:b0:ed:72:fb:d6:9c:9c:95:cd:a0:1f:95:c2:
         bb:82:c7:5e:56:b1:d0:fd:7a:b0:ed:13:10:10:c6:6b:b5:a7:
         41:af:5d:a0:7d:d6:bc:be:a1:6b:31:a1:bf:8c:93:d6:16:d5:
         a2:91:79:b2:71:7d:a8:9a:c4:70:ff:09:d4:60:c0:03:5a:97:
         35:ab:1f:db:26:ea:fd:0b:cb:00:3f:2b:9f:02:87:6a:35:3e:
         36:48:83:32:cd:07:a0:29:11:e9:e4:a0:09:82:a0:1a:17:ab:
         67:83:50:60:e1:16:75:ca:18:be:91:c7:39:9e:e3:aa:1b:a0:
         a4:d1:22:57:a0:d2:91:17:af:86:44:ca:08:31:70:25:6f:69:
         f8:a7:68:c5:73:83:2e:51:bb:bf:4b:a9:25:6c:d0:35:a2:30:
         9b:01:24:b1:94:80:c8:9d:f6:26:fe:43:01:89:06:a1:39:d3:
         b9:53:ae:f8:4c:19:3c:8a:6e:1c:59:81:b7:84:ce:6c:6f:ba:
         5e:f9:8b:b0:ea:4c:3e:da:6b:14:43:09:54:e2:af:59:c5:c0:
         ab:81:6c:1b:c2:de:f9:5b:37:bf:6b:38:0a:68:dc:5b:ce:3f:
         bb:0e:28:ac:33:bf:fd:d3:8a:a7:42:ac:92:f0:15:a4:8d:35:
         08:8d:22:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:21 2024 by rpki-client on console-ams.rpki-client.org