Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43525853-8b1e-3b18-8df9-ef821557792f.roa
File:                     43525853-8b1e-3b18-8df9-ef821557792f.roa (raw, json)
Hash identifier:          1sK+bQxMOpzJBXMK0u4UJkGsFyaLvZn2OT+pceFjHNg=
Subject key identifier:   B0:E3:D4:D2:C1:54:37:A4:C6:0B:AD:CB:5E:98:F1:27:C3:95:F3:B6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584704BB16447149D80861606140
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43525853-8b1e-3b18-8df9-ef821557792f.roa
Signing time:             Tue 27 Aug 2024 20:00:08 +0000
ROA not before:           Tue 27 Aug 2024 20:00:08 +0000
ROA not after:            Mon 25 Nov 2024 21:00:08 +0000
asID:                     6167
IP address blocks:        2600:1005:a120::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:04:bb:16:44:71:49:d8:08:61:60:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 27 20:00:08 2024 GMT
            Not After : Nov 25 21:00:08 2024 GMT
        Subject: CN=ef526855-f755-48fb-a35b-9b3d39985be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:6b:3f:73:d1:50:f5:a1:50:46:32:18:a8:
                    9b:ef:2f:c1:f6:ec:a1:8d:66:99:b8:7e:0c:a7:56:
                    4a:9c:ad:46:3b:0a:13:98:eb:19:10:9d:69:2b:2c:
                    29:e6:51:0f:92:46:0e:e8:93:a1:fc:04:85:0c:7b:
                    66:db:7a:ee:f3:f7:ff:4b:cd:44:da:b3:51:82:21:
                    21:94:30:7e:17:f5:ad:92:ec:45:73:e4:7b:9d:07:
                    83:5e:e1:fd:7a:51:98:cf:81:43:6f:7f:11:9b:27:
                    5b:7c:be:86:f5:2e:da:c9:f1:1a:2c:ba:a5:df:7d:
                    8f:45:c6:6a:bb:9f:19:89:0b:e2:74:8e:a8:bb:1e:
                    f2:73:da:93:ce:c7:83:16:8c:1c:38:72:6b:da:35:
                    7f:98:49:6b:5f:3e:29:a0:b1:73:46:6d:dc:e7:2b:
                    8b:3e:44:54:41:05:19:46:aa:35:5f:9e:99:80:73:
                    5a:77:38:44:88:0b:d6:91:c0:e8:cf:d6:ad:c7:90:
                    76:cb:58:3e:ab:e9:8b:3d:a6:ec:b0:35:68:0b:32:
                    22:b8:95:40:27:94:d3:dd:16:17:71:59:f1:47:9c:
                    b5:a8:42:cf:80:23:69:b8:f2:54:63:37:b6:87:56:
                    90:1b:f5:cd:ce:aa:7d:0d:7f:a0:82:1a:9a:cf:8a:
                    ba:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E3:D4:D2:C1:54:37:A4:C6:0B:AD:CB:5E:98:F1:27:C3:95:F3:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43525853-8b1e-3b18-8df9-ef821557792f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:a120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c6:64:48:57:37:43:04:89:bd:1d:dd:8d:16:c5:70:8f:1e:
         14:b2:ee:33:be:fc:31:06:3a:a1:6e:2e:a5:14:c5:fa:8c:85:
         85:cf:cc:01:89:32:22:ba:8f:48:d9:3a:3c:6a:19:ec:0a:b6:
         ca:34:17:ab:35:9b:2f:47:2a:3f:a7:8e:37:07:1f:2d:9c:1a:
         a8:f4:22:e6:a5:5c:40:73:be:e3:df:2d:49:8d:42:c7:88:a3:
         10:50:84:30:a5:9e:46:6e:2f:bd:dd:14:43:7f:ab:d0:e9:98:
         44:98:0f:9b:5c:8b:5f:24:31:80:41:54:00:44:f5:30:30:db:
         c0:54:88:e7:3a:82:55:19:0c:37:65:af:c8:db:63:1c:1f:93:
         cf:47:a1:1a:8c:06:ea:16:1c:7e:8f:b7:39:14:43:c6:9f:d2:
         0c:43:27:2b:43:da:53:14:e7:1e:6f:4a:f0:58:98:da:54:42:
         7d:86:0c:67:97:97:6c:86:2a:60:ff:e2:0d:ee:e2:27:38:3a:
         11:81:69:18:d4:5f:e0:94:d8:fe:77:1f:43:c8:bc:28:89:1f:
         df:d2:83:24:27:46:41:60:d6:61:61:be:f9:77:f8:a4:7a:54:
         29:93:cb:a1:ad:17:08:46:c0:f0:7c:ca:e2:bb:56:88:fe:a4:
         a6:7e:fb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:42 2024 by rpki-client on console-fra.rpki-client.org