Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/491e68eb-db81-34f0-ae82-acd7f4a68fe7.roa
File:                     491e68eb-db81-34f0-ae82-acd7f4a68fe7.roa (raw, json)
Hash identifier:          bKVJ0R+iFrmavQ3orTqRAZLC+y1MZO3kpFeSC/qGeyY=
Subject key identifier:   D1:11:35:20:36:65:B1:E6:97:A2:52:3C:2A:10:3F:16:7B:7B:03:D7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA02928F1E87DE5465AE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/491e68eb-db81-34f0-ae82-acd7f4a68fe7.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100c:d280::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:02:92:8f:1e:87:de:54:65:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=f8b6802b-1272-4e09-a202-39cc84daeea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f6:1e:3c:41:f9:c7:26:a3:2c:9b:ff:2f:66:
                    52:d4:0d:ca:79:69:8e:6f:5d:c3:ee:8b:1e:86:2c:
                    70:8a:4b:12:43:37:cc:49:07:71:66:e2:f7:e8:49:
                    6c:fe:76:86:1e:54:d4:51:af:fb:e3:73:18:2d:ea:
                    4e:b8:d0:5a:cf:19:35:0c:8e:d7:26:79:2b:e6:dd:
                    10:c7:11:d1:fe:79:82:62:08:af:0b:62:d1:85:55:
                    f5:0b:a1:d6:20:f3:7f:ab:0a:ad:b2:30:2e:39:5a:
                    dd:fa:cc:66:11:09:90:85:c6:87:eb:bd:a1:af:59:
                    91:c7:f5:ed:88:8a:5d:a3:49:ac:07:bc:a4:05:28:
                    de:e8:23:1b:a7:9b:9b:ac:be:87:41:b1:19:b9:41:
                    55:8f:28:06:3c:39:d9:18:d5:26:ff:03:1f:3a:dd:
                    25:e0:c1:ea:dc:ec:e1:ed:03:84:88:10:ea:a7:88:
                    e2:1f:15:f5:af:8f:35:7f:4f:29:83:c0:05:46:92:
                    08:df:df:96:b5:57:92:3e:ca:ad:15:16:6c:73:81:
                    a0:59:fa:99:f8:cb:45:fb:64:e1:f8:37:bd:59:e9:
                    9e:14:88:fa:21:82:8c:f4:a4:99:d4:9b:a1:ba:2d:
                    c8:6f:f8:5b:68:47:c2:28:44:16:2c:87:28:e1:c4:
                    86:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:11:35:20:36:65:B1:E6:97:A2:52:3C:2A:10:3F:16:7B:7B:03:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/491e68eb-db81-34f0-ae82-acd7f4a68fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:d280::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:97:b6:b4:6e:ac:a9:6f:57:46:4e:25:52:c0:41:91:fb:29:
         04:aa:48:09:52:2a:42:29:35:70:e7:ee:ec:b4:7b:54:52:82:
         df:40:0e:f1:43:60:70:35:78:97:ce:a3:12:24:60:1d:6c:a6:
         a9:98:6b:43:8e:52:3f:69:5c:85:60:4f:b0:aa:d6:77:f3:46:
         48:5b:f0:51:30:bc:89:ab:b2:49:da:ae:1f:59:64:3b:8f:e1:
         11:ea:fc:0b:33:ee:82:f6:76:ef:12:1c:e2:73:45:1a:c0:17:
         9d:c6:b9:8e:db:9e:92:52:a0:43:0c:98:db:8f:bb:60:3e:3c:
         8b:33:84:59:dc:be:5d:1f:93:76:42:4e:d1:1f:32:fd:29:11:
         59:95:06:c6:92:38:7c:d6:4a:34:5c:92:f1:b0:7b:fc:03:02:
         70:43:92:08:43:da:63:be:c6:c6:21:9b:06:52:49:fe:04:eb:
         fd:e9:76:6d:da:6e:66:67:a1:92:74:a3:31:da:65:00:0a:11:
         8f:89:4f:88:df:f2:84:cf:6d:d7:86:44:47:60:0f:ff:1e:51:
         95:5c:68:15:22:2f:32:3c:1e:b4:aa:82:6e:93:1f:63:a2:85:
         6f:df:1d:78:c8:c4:62:7c:19:47:f3:0b:8e:68:86:3a:74:ed:
         0c:85:2e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:24 2024 by rpki-client on console-ams.rpki-client.org