Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d7be1ef-153a-3553-9765-0f3544128e72.roa
File:                     3d7be1ef-153a-3553-9765-0f3544128e72.roa (raw, json)
Hash identifier:          vPUMjo6wRA20rct363Ys2ANqGsCZfzoyziHWGUoE9so=
Subject key identifier:   D2:E1:CF:09:37:55:70:C1:2B:63:1F:FB:22:47:5C:87:ED:E9:E7:1E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA09E37FF1EC90E3A03340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d7be1ef-153a-3553-9765-0f3544128e72.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100e:b080::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:09:e3:7f:f1:ec:90:e3:a0:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=39abb838-42ef-40a7-9d4b-15b057d8f6cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:56:fc:23:bc:6d:f5:98:43:0b:22:b6:3f:d8:
                    58:ef:13:16:3b:42:38:f0:81:fe:11:a7:b5:52:18:
                    92:94:e0:69:5b:eb:9f:b6:4c:2c:c4:45:f1:0d:42:
                    24:26:1e:da:ed:b5:d0:0b:a4:22:06:e6:1e:2d:c0:
                    45:ce:a1:6d:54:46:2a:b3:63:54:9c:86:e1:15:5c:
                    ae:8c:52:b1:9b:3a:14:a5:3b:e0:bd:14:da:3d:27:
                    cf:93:44:af:0f:51:5e:6f:1c:ab:ba:54:17:d7:82:
                    12:66:d6:94:51:68:07:46:d5:4e:82:ad:78:41:89:
                    ad:67:8a:01:79:06:8e:1a:f4:e6:4a:9c:4a:b3:07:
                    e1:fe:f3:47:a2:05:b1:89:b2:d2:e2:0b:86:0f:14:
                    0a:fd:9e:20:8d:61:3a:e8:34:60:a0:6b:5a:cb:62:
                    d3:73:a0:2f:53:4c:97:41:24:82:1a:62:06:59:a5:
                    9f:c3:3a:1b:aa:c6:8d:64:72:fb:ff:a6:25:d9:d5:
                    47:24:9b:0f:16:dc:bd:8b:b5:80:a5:6c:ac:d4:e2:
                    f8:e0:9a:6f:34:73:4f:9c:1a:76:c0:dd:ec:48:9f:
                    57:95:a2:17:a6:59:16:a3:66:32:6b:da:cb:19:ee:
                    97:06:1f:dd:7f:df:23:7c:4c:11:41:61:8a:24:8a:
                    20:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E1:CF:09:37:55:70:C1:2B:63:1F:FB:22:47:5C:87:ED:E9:E7:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d7be1ef-153a-3553-9765-0f3544128e72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b080::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:e0:d3:e7:ad:d2:eb:9d:ee:71:40:7f:71:19:a4:28:5e:05:
         34:d9:28:21:c1:55:22:de:7b:08:ae:c5:69:7a:21:7c:d1:ad:
         b3:c7:d6:7c:e1:e8:c8:6b:eb:10:fb:c1:d2:fb:a2:2d:41:14:
         bd:22:e7:d8:3f:be:7d:17:bb:b1:ec:16:1f:56:ff:41:b7:4e:
         15:3b:7b:60:db:8f:dc:e8:cb:93:60:78:6e:fa:b2:5f:2b:1a:
         7e:6a:7c:c8:c0:eb:f2:de:84:b1:91:7f:52:ff:ec:33:b1:37:
         d4:6d:82:f0:3b:46:d1:0e:e2:5d:df:b1:0f:b3:cc:98:1a:d6:
         90:14:7b:e8:09:39:07:6a:66:0a:b9:44:ca:cd:e9:7b:08:0a:
         f0:6e:df:c8:db:bf:b2:5d:fd:9b:cf:ed:f8:d9:f3:aa:a0:bc:
         06:2f:e0:ef:7b:19:49:dd:9c:7e:83:b9:5f:c7:85:10:9c:01:
         ad:58:39:26:75:02:02:8c:08:ab:15:d0:d3:61:59:85:33:23:
         9e:46:cb:83:b6:4c:5e:f2:a6:df:e2:72:c1:97:be:17:54:48:
         19:cc:fa:99:af:eb:f3:73:af:31:80:30:64:a3:ab:a5:77:78:
         ed:60:d6:28:1a:a6:ba:f3:84:23:42:0d:73:2b:c6:2a:90:39:
         fa:44:4f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:22 2024 by rpki-client on console-ams.rpki-client.org