Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41bc444d-fc17-342e-a87d-42693e9d75f4.roa
File:                     41bc444d-fc17-342e-a87d-42693e9d75f4.roa (raw, json)
Hash identifier:          yRaDW6eAWq42cVLwqFUGM6B90MWAYH3GTUspW7O+Jpc=
Subject key identifier:   24:DD:26:F7:15:42:23:1B:4E:BE:78:5D:E8:19:87:8D:E5:21:EE:DF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBE253B63DB733F016A880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41bc444d-fc17-342e-a87d-42693e9d75f4.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1014:b020::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:e2:53:b6:3d:b7:33:f0:16:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=7d7e00a1-56b3-4566-8a2d-86df3d00edb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:91:ec:d0:07:8c:b2:2c:ae:98:6c:12:a1:37:
                    b6:cb:54:f1:6f:f8:1c:3a:4c:4b:c9:7c:bf:a3:67:
                    08:12:e7:6a:bc:61:4c:e2:a9:e6:64:ca:0c:d6:ef:
                    1f:40:4d:43:87:1b:54:fd:0b:16:69:79:f8:f1:37:
                    f1:50:f9:a2:8a:00:2a:09:05:eb:14:c5:2f:8c:0e:
                    44:90:76:0f:0a:c8:bd:8c:52:26:21:e6:52:92:38:
                    bd:0e:9c:c7:ba:64:2c:c2:1a:32:b1:76:5e:43:50:
                    1c:a9:77:f8:bd:af:f2:22:61:71:80:8c:d4:f4:9e:
                    ba:79:25:a6:74:6a:d6:e8:ec:52:a0:12:60:59:bc:
                    80:70:5f:ee:11:d3:f6:99:80:28:7b:c5:e4:1e:e2:
                    49:11:ce:9b:06:b6:12:d6:c8:b2:82:ee:f6:ba:06:
                    e5:88:0c:c5:f2:d7:6b:f6:99:19:a3:12:97:89:62:
                    65:84:a2:79:87:41:8a:d6:3f:0c:e1:4c:70:21:13:
                    1f:c3:d6:69:24:54:24:33:4f:b6:ae:b0:90:75:b1:
                    cf:4c:13:f1:29:f1:cd:78:3a:18:21:9b:4a:7e:4d:
                    e8:76:7f:3b:28:5a:10:e4:c1:ff:c4:e5:d9:06:d1:
                    24:9f:4f:59:1e:f3:7a:14:f6:fc:95:55:7e:2f:77:
                    31:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DD:26:F7:15:42:23:1B:4E:BE:78:5D:E8:19:87:8D:E5:21:EE:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41bc444d-fc17-342e-a87d-42693e9d75f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:a3:33:c9:23:f9:4b:08:43:6d:e1:e3:9d:d1:02:2c:89:fd:
         7e:1d:bd:cb:db:1d:41:41:6f:b4:ae:79:b7:b7:3c:a4:e3:3c:
         36:67:4b:22:57:6c:af:95:e2:f2:bd:67:08:a7:b6:94:e5:a0:
         90:9e:9f:9b:bb:b6:95:d1:5a:ae:ea:5f:c4:77:dd:e3:af:83:
         76:35:b6:3f:a5:e2:fe:58:11:cd:df:6d:ce:ea:ee:41:d8:c8:
         10:05:9e:97:3f:10:00:d1:fd:85:e7:ae:b4:37:58:39:08:94:
         43:22:dd:04:41:b5:08:ce:1a:87:34:09:6d:db:06:fd:16:f9:
         ad:40:ed:a7:64:20:fb:f5:3d:a8:c7:d3:38:48:65:77:36:a1:
         c0:c5:7c:fb:5f:c1:a2:3d:3b:5e:ab:61:04:d3:9e:1d:ae:ea:
         b2:33:e7:7e:e8:61:70:49:4d:58:d3:fe:6d:6c:51:6b:1c:ec:
         f8:48:60:9a:26:86:d7:40:2b:bc:45:74:11:21:1e:cf:e7:68:
         9e:8e:8d:e3:5e:30:d8:de:b0:78:27:f3:1a:c4:b9:27:a3:31:
         2d:7c:ba:4b:bc:2f:35:48:0f:ea:c3:89:27:24:f8:d3:f7:74:
         fd:64:1b:25:1d:fb:83:a4:f5:a8:98:cb:d8:4f:f5:d8:2f:56:
         7d:92:2b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:41 2024 by rpki-client on console-fra.rpki-client.org