Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/457ef28f-e871-334f-8b42-4db92f061919.roa
File:                     457ef28f-e871-334f-8b42-4db92f061919.roa (raw, json)
Hash identifier:          NCujGgJt0LLrk8g4/sgzhznHcYn+IHAyloZcukgFTQk=
Subject key identifier:   0C:CC:CB:EA:BA:2D:59:99:FA:32:71:62:14:62:CB:EC:FA:C1:B7:AF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA0EFF97AFD9A5A6316340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/457ef28f-e871-334f-8b42-4db92f061919.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100f:b090::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:0e:ff:97:af:d9:a5:a6:31:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=7b866aca-1e7f-4afd-845d-c4fe286b4230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:89:08:21:0f:51:28:78:05:2d:3e:e9:dd:d9:
                    17:67:f4:e2:cb:64:5f:9e:cf:55:df:e9:ec:9e:ca:
                    e3:be:c5:ee:e0:ef:57:5d:3d:15:e4:09:28:63:68:
                    fb:c3:37:91:66:3e:d1:e3:73:a9:3a:a4:75:c7:1a:
                    f0:87:81:e4:a2:f1:c6:a9:08:18:49:c9:fc:2a:5f:
                    1a:bf:a4:e9:ed:20:10:d9:a9:2b:fc:f2:cc:a1:83:
                    51:9b:c6:9c:68:9a:21:e5:b5:df:c5:56:69:21:5e:
                    ad:c5:d8:1c:1f:a9:b5:0f:0e:ff:a1:bd:3c:9d:da:
                    d1:08:5e:d0:f4:dc:8a:cf:7a:02:ff:08:0e:51:74:
                    f3:1a:4e:6b:99:63:66:85:cf:bf:9c:4d:82:55:ee:
                    ee:16:f3:d7:a8:0e:44:62:a1:c9:8c:ab:30:e5:66:
                    0a:e5:c0:40:c5:f2:04:08:76:71:0f:bf:e2:77:59:
                    1c:db:c8:a8:a9:ad:62:cc:bc:48:58:c4:a6:e9:73:
                    14:a9:c0:2a:9d:3a:15:19:41:42:d8:a8:87:d6:bb:
                    57:f8:08:e3:a8:b4:61:99:29:49:15:af:cc:38:6d:
                    c9:f4:80:bc:fa:86:7d:74:69:21:f7:0d:98:60:7d:
                    a1:eb:1b:17:4b:f4:df:75:b1:13:10:e5:c5:a7:60:
                    19:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CC:CB:EA:BA:2D:59:99:FA:32:71:62:14:62:CB:EC:FA:C1:B7:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/457ef28f-e871-334f-8b42-4db92f061919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:7b:3e:8f:fd:c5:10:c9:bd:ad:f8:e6:3a:59:ee:98:b8:80:
         8a:e3:d7:dc:95:99:e6:da:9f:cb:bb:77:d3:db:97:e8:3c:eb:
         99:5c:64:dc:b8:5e:de:61:00:e8:71:47:03:1a:99:54:a6:71:
         4f:69:d0:51:d9:3a:10:86:83:53:85:c3:48:e8:7b:07:1b:5b:
         28:44:63:d6:a7:c5:61:41:eb:40:ec:37:a1:ca:bb:cf:e5:40:
         1a:80:54:a9:c0:ae:3b:8b:ae:37:55:e3:5d:00:54:52:71:38:
         a3:9e:0e:f0:3e:b4:94:f5:07:d6:ef:48:e4:f5:43:95:fc:cc:
         ea:59:28:6d:0c:e8:4b:10:cb:45:bf:1a:a1:c4:e9:0e:2b:e8:
         05:49:4a:81:03:98:97:fa:48:7e:42:e7:3c:a2:a1:8f:cc:ce:
         3c:c3:d3:77:38:3a:7f:47:d0:24:6c:3f:89:41:c9:0c:dd:fd:
         9a:98:27:dd:8c:3b:ae:1e:62:89:20:87:9b:ef:02:16:c8:34:
         2f:a5:97:25:08:f8:08:91:e9:66:92:6a:c6:44:64:e3:99:90:
         8b:68:fc:c6:9d:bb:15:84:b2:0e:ff:f9:a4:f1:51:80:71:94:
         37:9d:52:db:ec:fc:63:9b:04:6d:35:c6:cf:92:ce:62:7a:f6:
         bb:69:91:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:23 2024 by rpki-client on console-ams.rpki-client.org