Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4303f15c-b944-3d85-b59c-17393a66007f.roa
File:                     4303f15c-b944-3d85-b59c-17393a66007f.roa (raw, json)
Hash identifier:          cDDkAQE1kx5F5gpPx7Gc1x0ohPnE3qPwyB7ptTU1JvE=
Subject key identifier:   29:9E:59:3D:CD:5F:B3:17:D4:A2:3E:D7:AF:78:31:88:0A:84:C4:33
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D769CD5D2BBE2F7FF70F780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4303f15c-b944-3d85-b59c-17393a66007f.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1004:a032::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:9c:d5:d2:bb:e2:f7:ff:70:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=a261c2d8-a4a2-483b-9b1a-cfd19bb3b589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e0:0c:9e:79:16:0c:55:eb:5f:b4:10:75:bf:
                    50:ac:81:d1:24:fd:a2:c2:d2:47:e5:d9:c3:de:8a:
                    97:02:2a:c6:d9:3f:4c:76:39:b8:10:47:6d:91:28:
                    45:38:45:d8:4d:1d:17:40:1c:fd:5d:7d:c4:4a:e4:
                    8f:09:cc:36:03:3f:40:96:d5:87:1b:07:64:2d:b0:
                    ed:14:d9:a8:14:d0:f3:41:27:8b:bd:96:4c:2e:4b:
                    77:60:82:0f:d5:5c:fa:8c:03:67:4f:b2:ee:26:07:
                    29:37:9d:0a:c3:49:9e:35:f0:ea:8a:02:e5:14:c3:
                    a7:16:b4:64:94:58:46:ec:16:90:02:7c:e8:86:33:
                    23:e2:48:35:96:3c:80:cd:54:6f:0f:7c:87:38:b4:
                    52:c4:46:05:66:63:e5:01:34:c9:64:14:32:24:fa:
                    de:3f:cf:76:b4:d7:85:43:68:86:88:83:5e:db:60:
                    04:4a:0f:68:9e:56:88:4a:e6:95:70:d3:a6:11:e2:
                    af:40:f5:04:ce:a9:fb:0a:3a:71:4f:6a:cd:dd:76:
                    e7:0b:af:76:42:11:4f:f5:b4:16:db:b4:dd:53:04:
                    ed:c7:78:00:f4:e3:99:ef:9d:3a:e4:cc:92:b4:3e:
                    c8:6a:2e:34:1f:51:82:d7:63:30:fb:14:f3:5d:db:
                    d6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9E:59:3D:CD:5F:B3:17:D4:A2:3E:D7:AF:78:31:88:0A:84:C4:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4303f15c-b944-3d85-b59c-17393a66007f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:a032::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:22:63:78:46:35:96:ac:03:f5:5f:69:f6:23:f1:ab:34:65:
         c9:55:63:1b:8a:81:6a:4f:88:ca:69:1f:ef:b8:30:f7:79:15:
         10:9b:da:56:f5:e2:53:3a:cf:68:66:a8:39:1f:66:8c:db:8b:
         a4:84:1f:e0:e0:8d:63:a4:e3:fb:1c:79:ac:fa:1e:1c:bb:c2:
         67:ba:f4:90:0e:9f:a5:13:44:98:7c:8e:5a:44:1b:e8:f6:b1:
         45:d1:ec:0a:34:53:89:1e:1b:90:8a:cd:41:84:66:6e:64:ae:
         a7:6f:5a:69:35:0e:3c:9f:9f:72:f5:f9:af:6a:8a:cf:11:da:
         62:9c:92:c8:06:f1:aa:35:14:67:51:2f:91:19:fe:cb:a7:ca:
         6e:23:71:67:a9:bd:86:68:24:f1:c3:47:72:15:8d:07:f6:2a:
         24:3e:32:f0:9f:12:80:90:30:aa:9a:04:a3:ab:16:44:5e:fb:
         1b:95:4c:d1:b9:44:01:96:db:c8:27:f9:95:08:72:fb:75:bc:
         41:20:97:8f:81:1d:b7:e2:1a:ed:9a:4b:43:b1:e8:ba:e6:91:
         64:e4:ad:96:b2:60:c6:26:b5:7c:69:7b:f5:18:d7:47:b0:1f:
         6d:60:e2:7a:78:9b:59:4a:f8:45:42:ab:81:67:36:95:bc:61:
         30:d1:ce:6b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeddpzV0rvi9/9w94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
YTI2MWMyZDgtYTRhMi00ODNiLTliMWEtY2ZkMTliYjNiNTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OAMnnkWDFXrX7QQdb9QrIHRJP2iwtJH5dnD
3oqXAirG2T9Mdjm4EEdtkShFOEXYTR0XQBz9XX3ESuSPCcw2Az9AltWHGwdkLbDt
FNmoFNDzQSeLvZZMLkt3YIIP1Vz6jANnT7LuJgcpN50Kw0meNfDqigLlFMOnFrRk
lFhG7BaQAnzohjMj4kg1ljyAzVRvD3yHOLRSxEYFZmPlATTJZBQyJPreP892tNeF
Q2iGiINe22AESg9onlaISuaVcNOmEeKvQPUEzqn7CjpxT2rN3XbnC692QhFP9bQW
27TdUwTtx3gA9OOZ75065MyStD7Iai40H1GC12Mw+xTzXdvWRwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCmeWT3NX7MX1KI+1694MYgKhMQzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDMwM2YxNWMtYjk0NC0z
ZDg1LWI1OWMtMTczOTNhNjYwMDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQBKAy
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADQiY3hGNZasA/VfafYj8as0ZclVYxuKgWpPiMppH++4MPd5FRCb
2lb14lM6z2hmqDkfZozbi6SEH+DgjWOk4/sceaz6Hhy7wme69JAOn6UTRJh8jlpE
G+j2sUXR7Ao0U4keG5CKzUGEZm5krqdvWmk1Djyfn3L1+a9qis8R2mKcksgG8ao1
FGdRL5EZ/sunym4jcWepvYZoJPHDR3IVjQf2KiQ+MvCfEoCQMKqaBKOrFkRe+xuV
TNG5RAGW28gn+ZUIcvt1vEEgl4+BHbfiGu2aS0Ox6LrmkWTkrZayYMYmtXxpe/UY
10ewH21g4np4m1lK+EVCq4FnNpW8YTDRzms=
-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:42 2024 by rpki-client on console-fra.rpki-client.org