Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41bf9bdc-2c8e-313f-bfe0-23bdf9865186.roa
File:                     41bf9bdc-2c8e-313f-bfe0-23bdf9865186.roa (raw, json)
Hash identifier:          yshy4d0i1rZn81TfFICjXHXdOegfLqd3CZ5mFTzRlUY=
Subject key identifier:   33:FA:C6:7E:05:EA:7F:28:41:95:6A:BD:15:4B:D8:CD:70:B1:33:5C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76C4D7BDA157C5864C4340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41bf9bdc-2c8e-313f-bfe0-23bdf9865186.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     701
IP address blocks:        2600:4040:d000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:c4:d7:bd:a1:57:c5:86:4c:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=5b27860e-18b6-4027-808d-3c69da2deb89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:99:ba:8c:b7:65:fa:47:97:e1:bd:7d:a4:ae:
                    3f:dc:59:b0:fd:ed:24:8b:58:92:40:97:43:9f:01:
                    e7:1c:7a:e0:52:a7:89:39:11:d4:37:39:b8:03:e0:
                    29:d1:d8:88:98:58:17:5c:7f:38:2c:56:04:c3:a3:
                    a7:05:b9:7f:12:dc:8d:c1:14:85:f8:e4:72:80:c7:
                    75:51:24:d9:41:72:0f:c8:ae:36:10:68:5e:76:4a:
                    74:e7:b4:23:b6:85:51:d3:b4:fc:86:95:28:8f:72:
                    64:76:04:59:97:92:1e:27:e7:9c:49:14:a1:82:a2:
                    50:56:4a:75:f6:48:94:29:de:25:1b:b6:3f:49:21:
                    55:53:05:37:08:e0:3b:59:c2:ce:40:a6:8b:1c:b7:
                    3a:c5:77:ad:bc:5d:19:f9:4c:5e:e4:a4:05:df:46:
                    d5:f6:4d:e0:65:45:a9:8a:1f:ca:a8:b9:a5:45:30:
                    ce:9f:23:90:3c:c1:d3:62:50:b3:ba:c5:f3:d6:3d:
                    8a:9e:c5:f9:b7:5d:86:a5:42:14:e7:f1:9e:ae:78:
                    9a:a1:91:52:9c:a4:5d:68:b8:d3:69:b2:c8:c2:46:
                    fb:de:24:6f:91:2c:d3:9e:bc:73:08:c1:cd:8e:fe:
                    f4:49:13:9e:46:8e:1d:7a:1e:b0:fa:d6:57:b7:4e:
                    6b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FA:C6:7E:05:EA:7F:28:41:95:6A:BD:15:4B:D8:CD:70:B1:33:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41bf9bdc-2c8e-313f-bfe0-23bdf9865186.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4040:d000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:79:e6:7e:ef:c9:83:d6:b5:42:34:4d:e8:4e:2a:b6:3a:11:
         63:00:e6:11:ae:7f:68:1c:3a:b7:66:4b:3b:29:4a:40:78:02:
         72:25:d0:07:1a:72:b5:c6:d3:f9:63:ee:7c:58:c3:c8:fa:c7:
         2c:39:22:2a:84:91:a0:c9:54:e1:99:24:0d:17:28:0f:9f:1d:
         37:69:02:2c:9e:71:d9:9c:41:4c:4e:76:ea:51:bf:be:95:99:
         55:a6:e6:a1:8e:39:37:a5:9d:3a:d7:2c:f2:58:6a:23:ba:17:
         55:d4:f6:c9:30:f1:ea:d9:f6:40:72:a9:1e:88:2d:71:cd:cb:
         17:5b:65:da:3f:ba:74:48:24:36:c9:71:4b:b0:81:80:e6:70:
         0c:71:b9:04:22:c5:9b:7c:64:32:17:c7:ad:0f:6d:50:c8:b2:
         73:17:ac:ed:c0:e3:cd:b6:ca:52:19:21:a3:c0:19:f8:18:aa:
         1d:89:b0:74:c6:82:06:58:ce:a7:37:65:fe:f2:e2:0e:12:07:
         7b:03:2f:1b:6b:11:d4:22:f1:79:00:fc:0a:8c:fc:a8:ff:8d:
         db:fc:ad:d0:ef:e2:be:f0:b3:0f:ef:58:6d:f0:1c:75:d0:77:
         93:15:5f:9e:33:f7:de:8f:a5:3e:8f:da:df:5b:d3:c7:8c:5d:
         06:2a:3c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:23 2024 by rpki-client on console-ams.rpki-client.org