Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f83d128-384f-3f86-8408-b677a598bcc5.roa
File:                     3f83d128-384f-3f86-8408-b677a598bcc5.roa (raw, json)
Hash identifier:          bi7iur+pdxWip8cJmxmEXoycmQ+h1mPZsEvW6IpQ044=
Subject key identifier:   5E:39:6F:DD:A0:6F:F3:08:1E:A3:10:31:04:C2:94:B3:42:1C:32:B7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBEB199E849807365BA682
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f83d128-384f-3f86-8408-b677a598bcc5.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1017:b010::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:eb:19:9e:84:98:07:36:5b:a6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=9fd7ce6f-201a-407e-bba0-9e3cb78ebf54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:59:83:e1:9e:75:85:58:c3:6e:16:0c:20:07:
                    d7:95:13:66:a6:b0:8a:63:bb:8c:35:42:c1:10:5c:
                    52:1d:fa:1c:59:92:49:95:92:8e:9b:fb:b3:68:49:
                    af:a8:8d:dc:dd:89:ad:cc:a8:8c:b6:b0:3f:61:19:
                    b8:de:2c:10:1d:49:2d:d7:7c:b8:ab:2b:7a:05:4f:
                    39:a8:84:e4:49:6e:cd:05:03:9d:9b:bc:ce:57:e2:
                    18:3b:52:05:2e:31:a3:40:d7:00:58:22:43:9f:9f:
                    69:bb:8c:3e:c2:9e:36:e6:4e:ac:ea:c4:38:c7:6c:
                    68:b9:ff:1c:3e:81:0e:ea:0c:e2:3c:c7:1e:17:9d:
                    22:fe:fa:10:aa:98:04:0a:da:55:19:4d:85:d3:4c:
                    51:20:26:46:be:77:bf:55:c5:35:db:1f:1e:9f:03:
                    01:59:ce:08:2a:ec:22:13:e2:fe:5c:e5:51:e8:e4:
                    d1:ae:ea:2a:e6:13:9d:5b:9e:2f:1c:ec:07:40:c1:
                    4c:c0:ef:f5:71:40:1e:fd:95:23:b4:d2:92:fa:07:
                    ba:bc:86:c2:da:50:64:c6:07:69:e7:0c:04:1d:f1:
                    34:a5:e8:f2:5b:e6:99:26:19:22:fd:4d:97:e7:f8:
                    8d:b5:98:2b:39:78:0d:2a:f2:72:d1:a5:6c:af:b3:
                    f5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:39:6F:DD:A0:6F:F3:08:1E:A3:10:31:04:C2:94:B3:42:1C:32:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f83d128-384f-3f86-8408-b677a598bcc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:b010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:af:34:d3:43:58:20:08:8f:ab:b2:8c:fd:45:e6:c0:6e:d2:
         c2:56:48:da:b0:57:58:99:07:83:25:fe:15:f0:35:ce:6c:f2:
         d4:87:30:6c:cb:16:ec:39:56:76:44:74:18:78:37:26:30:7c:
         dc:e5:bb:3a:d8:57:e0:fc:77:aa:da:0c:e8:b8:d2:0b:41:73:
         c7:f6:45:36:91:0b:cb:b9:25:50:3b:30:a1:fc:da:39:8e:e6:
         f6:21:ef:52:d7:b7:f3:71:5c:a0:ec:be:d8:29:dd:55:20:c5:
         b8:36:83:07:f6:6d:43:9c:b5:ea:59:d8:f1:b2:33:73:74:76:
         ff:98:65:3c:b1:e5:f0:60:a7:e0:d2:7a:5e:d4:bf:03:d0:86:
         1b:db:75:9a:92:08:fc:37:ed:bc:12:99:e0:43:d3:ea:cf:11:
         fd:5d:cf:af:d9:82:ee:bd:b5:df:4b:a0:f2:44:3b:c4:ab:bf:
         c4:93:74:94:c3:6d:bb:65:9a:f3:93:b9:61:eb:29:a3:05:df:
         11:03:d7:cc:b3:cd:1d:ac:39:b2:0e:fc:6b:41:d6:46:64:0b:
         f6:99:9f:70:4a:4b:19:c7:75:e5:89:ca:4f:fd:0d:fa:f6:96:
         89:0d:db:c5:7c:93:cd:c5:27:12:e7:04:e9:60:6c:15:d1:27:
         95:7a:cf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:41 2024 by rpki-client on console-fra.rpki-client.org