Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f443b15-2d1e-33b9-bf13-f9513ee52f25.roa
File:                     3f443b15-2d1e-33b9-bf13-f9513ee52f25.roa (raw, json)
Hash identifier:          aKaFo4xJ9nqZZcMHt+WstB5KdPSPh0OhXe7vOi5nYho=
Subject key identifier:   D1:49:3B:2E:4D:CF:FF:14:5B:A4:F9:E9:EB:97:A8:95:AD:28:A9:CD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846E3E190C2711AFF121DD61000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f443b15-2d1e-33b9-bf13-f9513ee52f25.roa
Signing time:             Fri 16 Aug 2024 01:36:00 +0000
ROA not before:           Fri 16 Aug 2024 01:36:00 +0000
ROA not after:            Thu 14 Nov 2024 02:36:00 +0000
asID:                     6167
IP address blocks:        2600:1009:b0c8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:e1:90:c2:71:1a:ff:12:1d:d6:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:36:00 2024 GMT
            Not After : Nov 14 02:36:00 2024 GMT
        Subject: CN=dd409a58-5701-43b3-b576-c77d200b337d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:db:40:85:fc:a1:5b:8a:ba:b8:71:93:ac:99:
                    88:0b:8c:51:02:18:e1:65:1c:68:1d:49:6f:1e:45:
                    f8:76:13:b1:0c:37:5e:95:31:4c:6c:ac:a9:e2:6c:
                    26:83:e1:22:10:22:c4:b0:06:fb:ae:b4:59:95:4a:
                    b3:15:d1:ba:5a:8c:67:42:3e:cc:82:0b:81:58:d5:
                    d9:66:fb:4e:17:7e:62:3e:94:21:ab:0c:ed:2b:38:
                    6f:a8:47:3a:81:3d:39:18:1a:39:1d:c5:85:a3:5c:
                    e9:db:20:42:af:ca:4d:f4:8e:d8:af:5d:ab:80:d4:
                    a0:53:ff:5b:a4:c4:24:96:01:6f:34:94:a0:f1:1c:
                    24:1d:07:22:c8:f1:af:7f:64:a1:dd:13:dc:f1:08:
                    e4:61:00:d8:03:d0:f4:9b:97:7a:72:ac:47:fe:d6:
                    b9:e8:82:53:1c:4c:5e:e6:bc:34:19:ef:e3:ef:d4:
                    ff:df:1d:1e:41:39:a2:1a:68:ef:f4:1c:db:56:d1:
                    84:f3:67:0c:5b:69:22:a8:b9:8c:50:ef:f7:6d:b6:
                    22:c4:8d:2e:6a:f8:81:5c:4e:93:40:83:40:9d:af:
                    cc:e6:fc:ca:84:b0:69:83:79:65:57:39:9a:88:a2:
                    8b:1e:89:65:d6:76:7e:fe:ba:45:5a:ba:9a:d0:24:
                    9b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:49:3B:2E:4D:CF:FF:14:5B:A4:F9:E9:EB:97:A8:95:AD:28:A9:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f443b15-2d1e-33b9-bf13-f9513ee52f25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b0c8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:43:41:8f:5d:9d:ab:68:34:40:04:32:77:1d:b9:f9:7a:11:
         ff:1d:2c:d1:cd:7f:37:fc:d8:ba:5f:ab:94:b6:48:77:d7:1f:
         f0:f0:27:1a:9a:35:91:d5:39:78:de:c1:f1:4e:af:84:36:d8:
         60:59:cc:e0:3f:6a:dd:d6:95:80:14:8c:df:5c:9a:00:3d:55:
         21:76:fa:7e:a9:20:d0:16:6a:48:63:49:47:61:a2:7d:4f:46:
         7c:f6:b0:4d:b3:5c:b8:1f:e8:e3:f9:0e:3a:69:d9:4b:2f:dd:
         80:6d:46:14:16:6a:a7:75:10:a4:c8:47:48:88:8b:cd:f1:04:
         cb:bc:02:ea:f9:81:3f:f6:cb:0b:98:18:79:2b:5c:e4:58:89:
         43:e2:b6:ba:cb:c1:82:f3:7f:83:99:cd:8b:49:38:ae:1d:c6:
         52:b1:e7:5a:e1:f2:0c:26:bb:49:96:90:dc:82:c5:ef:25:50:
         28:59:dd:83:c5:83:fb:ba:fe:df:25:0b:05:ab:90:01:cf:b2:
         c7:85:d2:ee:d5:f8:4b:f2:b8:3b:24:ba:d8:79:c4:ac:c6:c0:
         70:b4:82:1f:55:26:2a:d2:cf:a1:7e:d0:02:6f:f2:96:7d:48:
         f4:c5:54:46:8c:1c:4a:4b:94:1a:fa:09:c0:a7:27:a9:b5:2a:
         34:f3:eb:56
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEbj4ZDCcRr/Eh3WEAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDgxNjAxMzYwMFoXDTI0MTExNDAyMzYwMFowLzEtMCsGA1UEAxMk
ZGQ0MDlhNTgtNTcwMS00M2IzLWI1NzYtYzc3ZDIwMGIzMzdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNtAhfyhW4q6uHGTrJmIC4xRAhjhZRxoHUlv
HkX4dhOxDDdelTFMbKyp4mwmg+EiECLEsAb7rrRZlUqzFdG6WoxnQj7MgguBWNXZ
ZvtOF35iPpQhqwztKzhvqEc6gT05GBo5HcWFo1zp2yBCr8pN9I7Yr12rgNSgU/9b
pMQklgFvNJSg8RwkHQciyPGvf2Sh3RPc8QjkYQDYA9D0m5d6cqxH/ta56IJTHExe
5rw0Ge/j79T/3x0eQTmiGmjv9BzbVtGE82cMW2kiqLmMUO/3bbYixI0uaviBXE6T
QINAna/M5vzKhLBpg3llVzmaiKKLHoll1nZ+/rpFWrqa0CSb5wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNFJOy5Nz/8UW6T56euXqJWtKKnNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2Y0NDNiMTUtMmQxZS0z
M2I5LWJmMTMtZjk1MTNlZTUyZjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQCbDI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADdDQY9dnatoNEAEMncdufl6Ef8dLNHNfzf82Lpfq5S2SHfXH/Dw
JxqaNZHVOXjewfFOr4Q22GBZzOA/at3WlYAUjN9cmgA9VSF2+n6pINAWakhjSUdh
on1PRnz2sE2zXLgf6OP5Djpp2Usv3YBtRhQWaqd1EKTIR0iIi83xBMu8Aur5gT/2
ywuYGHkrXORYiUPitrrLwYLzf4OZzYtJOK4dxlKx51rh8gwmu0mWkNyCxe8lUChZ
3YPFg/u6/t8lCwWrkAHPsseF0u7V+EvyuDskuth5xKzGwHC0gh9VJirSz6F+0AJv
8pZ9SPTFVEaMHEpLlBr6CcCnJ6m1KjTz61Y=
-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:21 2024 by rpki-client on console-ams.rpki-client.org