Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47d57d9b-8dfb-322a-9391-61dbdb1ae483.roa
File:                     47d57d9b-8dfb-322a-9391-61dbdb1ae483.roa (raw, json)
Hash identifier:          xrkIvVfuvP6Bl9kBRhupjHQKWT8H15Z9Ue9GduPbWRU=
Subject key identifier:   9C:8D:A8:4C:F3:15:DC:5B:45:71:C9:1F:4C:E1:24:92:88:93:6A:94
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBEBE2C97B873D4CDB6600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47d57d9b-8dfb-322a-9391-61dbdb1ae483.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1017:b150::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:eb:e2:c9:7b:87:3d:4c:db:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=feea66c7-9af6-4306-8d22-1f309b46b395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4a:59:f0:e3:4f:83:28:9f:14:3a:67:f7:4f:
                    cc:ae:2f:76:7c:a6:2b:d3:97:dd:7b:04:ac:50:c7:
                    a9:d5:45:09:cc:f1:c6:59:48:3b:d2:ff:32:47:1e:
                    42:f6:aa:4c:a6:67:c0:d1:e4:d7:ed:0c:44:c6:17:
                    63:f4:c7:22:a9:99:91:9d:15:e0:5e:16:bd:b0:4c:
                    99:82:ab:04:ed:0f:89:2d:73:dc:32:e4:7b:65:a2:
                    fa:81:c0:3c:fa:2e:92:a9:ac:5e:6f:2c:b9:d5:94:
                    bb:d2:52:c1:3c:38:e5:f0:b7:8b:55:9c:23:1d:19:
                    fb:a1:e0:7e:24:e7:3f:ef:79:f8:f3:28:6d:06:1c:
                    3d:2f:13:aa:9d:a2:6a:fe:ba:6c:8e:71:61:ef:c8:
                    d1:ef:8d:46:a6:14:12:e1:3c:81:00:0f:9c:b7:a2:
                    9c:1f:b6:ce:1f:5d:8b:dd:c6:df:57:22:5a:16:25:
                    7b:7f:84:86:d8:b5:e4:ae:de:67:c1:55:3d:79:03:
                    ec:08:44:c1:55:75:f0:0f:ca:11:83:22:75:c9:c9:
                    a8:05:21:af:9c:b0:be:3e:af:af:b5:1c:dc:29:c0:
                    07:a7:dd:49:e8:56:16:75:a4:fe:36:e5:44:96:4d:
                    91:a0:a0:79:30:8e:dd:ba:9d:39:ab:b7:2f:55:e1:
                    a7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8D:A8:4C:F3:15:DC:5B:45:71:C9:1F:4C:E1:24:92:88:93:6A:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47d57d9b-8dfb-322a-9391-61dbdb1ae483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:b150::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:4b:f9:7f:77:36:a1:8e:34:b6:3f:ce:49:ab:82:2a:04:e2:
         46:fd:7b:a7:cb:ff:eb:dc:9d:f7:f6:10:75:01:3d:a6:59:20:
         f3:35:03:d2:e7:12:42:eb:90:ee:02:04:f7:ff:be:93:db:a6:
         c9:ca:3a:0b:38:1c:2d:4e:b7:a8:cd:f2:64:86:8c:56:42:12:
         fa:cf:54:d0:ef:e0:dc:3f:2c:c7:85:59:27:e2:ff:16:70:5d:
         2d:36:16:e0:4d:c6:48:f9:0c:36:90:2c:05:26:3f:7c:2f:f8:
         79:5e:a1:4a:89:b6:25:e3:4f:89:5d:5b:dc:a0:89:57:90:ba:
         6a:33:f7:0f:fe:99:4f:82:2f:ed:75:91:c9:f9:99:9c:50:cd:
         b8:7b:9a:9e:97:24:fb:a1:09:2e:31:9d:f7:af:72:4f:dd:e8:
         5d:af:de:df:6a:48:0a:f3:24:26:6c:7c:11:ef:93:00:dd:21:
         29:08:fc:90:1f:48:93:62:88:c8:8e:bf:f3:4a:18:b2:32:f6:
         fd:b6:63:d8:48:4e:74:e5:72:24:c9:b9:13:88:d2:9c:5d:36:
         ff:96:7f:11:56:a9:7e:e4:a8:d2:32:9f:35:c8:8a:11:14:3f:
         52:1e:af:88:e2:37:34:65:51:73:23:cc:76:1f:b7:34:8b:25:
         f2:35:49:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:24 2024 by rpki-client on console-ams.rpki-client.org