Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43fc22d3-8640-3949-8385-f3bfb894240e.roa
File:                     43fc22d3-8640-3949-8385-f3bfb894240e.roa (raw, json)
Hash identifier:          bzJxMXGddQMPd0fIDZvUwsZC/Bpm03glTUSIm7bsDtg=
Subject key identifier:   5D:CF:C2:05:F0:F6:89:2F:F7:7B:EE:9F:C8:13:A5:90:9B:60:97:D7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA00EE718EF9AD87E55200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43fc22d3-8640-3949-8385-f3bfb894240e.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100c:b0e0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:00:ee:71:8e:f9:ad:87:e5:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=ed8550d5-bc48-4bc2-9bfb-89bc17ff63ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:25:9d:6f:74:7e:57:d1:fe:d2:c5:08:0f:57:
                    a7:c5:26:b1:e0:88:36:eb:fa:93:e3:96:c2:27:eb:
                    59:25:6b:d8:83:e9:68:6b:18:02:7d:92:6c:5a:42:
                    9f:c4:13:f1:85:78:ac:0a:b1:b0:3f:92:7e:49:e1:
                    24:ff:4b:66:ff:38:09:06:b1:0c:7b:ee:07:34:01:
                    97:59:2d:f8:61:97:f8:e0:8a:e8:ce:72:09:7c:a3:
                    55:0b:93:c2:ae:12:c6:8f:64:33:38:eb:e4:56:4c:
                    7b:df:99:5c:88:9e:8a:91:c0:c9:8e:39:c5:d8:5b:
                    c4:91:c1:cc:c6:a5:8c:a2:a0:6e:7d:6e:f5:b3:5d:
                    8f:cd:77:87:fc:b2:35:bf:82:6b:93:20:b6:b0:4f:
                    1b:ca:27:da:4b:b7:57:03:56:8c:72:56:fe:0c:6c:
                    47:c7:ce:22:d7:6f:23:dd:aa:27:fb:0b:91:7f:ea:
                    4c:db:66:b5:27:09:62:4c:20:63:30:47:c4:8c:b5:
                    cf:eb:fd:29:2a:f4:dc:ee:51:a2:23:3e:d3:4b:b7:
                    97:7b:19:a1:34:ba:4f:5b:95:e3:55:26:cf:31:bb:
                    0d:9e:8c:da:ab:80:67:d3:c5:e3:36:e8:b4:93:ff:
                    09:fb:60:5b:3d:e6:e1:52:7b:f1:0a:29:33:7d:3b:
                    e6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CF:C2:05:F0:F6:89:2F:F7:7B:EE:9F:C8:13:A5:90:9B:60:97:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43fc22d3-8640-3949-8385-f3bfb894240e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b0e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:4b:ff:93:88:6e:0e:e0:5c:5e:b7:ab:9e:4f:c5:20:cd:e7:
         c3:9d:93:30:6a:6d:13:f6:a6:c7:3d:d2:20:ac:7a:d5:5a:73:
         80:52:86:77:3e:33:00:2f:4d:06:5a:52:fe:5b:fe:de:f2:cc:
         9a:2d:c8:db:6f:99:18:ad:37:e9:49:be:3f:5d:f7:6f:df:3d:
         1c:9f:73:db:d9:54:66:3e:39:b9:82:4d:14:06:6e:b8:2a:16:
         8e:3d:b4:49:a4:0e:fe:84:03:c2:2c:6d:04:eb:99:b4:e1:13:
         02:d7:81:98:fe:44:11:8a:d9:ff:55:37:4b:ad:da:dc:ab:79:
         df:97:83:32:6f:84:40:ab:62:dc:8e:d8:18:37:0e:27:4e:65:
         4d:f0:e7:17:f8:ff:1a:e8:13:dc:8d:96:6d:68:6c:7b:f9:63:
         ff:74:33:2e:98:07:38:d1:96:01:85:06:a7:00:bc:c2:3b:7d:
         c7:f5:50:52:ee:f5:7b:37:ff:54:64:87:e4:85:7b:12:09:c5:
         e0:af:8f:28:05:35:cf:41:98:69:c3:25:c4:cb:3f:64:cf:b3:
         9f:2c:a6:ef:03:07:ac:09:45:58:5f:bc:d9:af:db:83:a5:ea:
         27:91:d3:fe:1c:44:3f:9e:e1:9d:04:e0:3d:9d:85:1d:06:5d:
         98:82:93:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:23 2024 by rpki-client on console-ams.rpki-client.org