Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4b572e0b-6545-3cff-b15d-573806742740.roa
File:                     4b572e0b-6545-3cff-b15d-573806742740.roa (raw, json)
Hash identifier:          1UxbMosQRjixvuZW5lbtkyM88TQdkbT+jX6vLt6IxAA=
Subject key identifier:   38:FC:74:DF:DA:E1:2A:72:D1:2F:01:CF:96:5F:67:6B:82:4D:33:55
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBEB9BBA011FE381DAB220
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4b572e0b-6545-3cff-b15d-573806742740.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1017:b110::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:eb:9b:ba:01:1f:e3:81:da:b2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=f835a195-9714-404f-82d6-638c1a3faf7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8b:c6:18:cd:4c:84:15:be:9d:91:b4:cf:8e:
                    f5:7b:71:92:a2:dc:da:6d:ca:33:a3:dc:11:93:23:
                    cb:17:6c:83:dd:fc:09:e4:f1:b7:38:7f:bf:b8:03:
                    63:5b:3b:3a:6e:40:05:84:d4:21:6b:77:17:3f:b4:
                    39:c3:d8:17:82:ed:8b:18:da:6b:74:42:2c:d5:78:
                    ff:b0:db:92:6b:c3:60:30:59:d9:09:90:39:47:b3:
                    23:9b:4b:8c:e2:05:04:e9:54:3c:89:5d:96:67:30:
                    04:5b:f0:72:9f:8a:d9:f4:e5:da:d1:b5:f7:3e:6c:
                    b0:a4:38:de:75:41:eb:17:70:f6:dc:fe:c5:37:ec:
                    be:fb:4d:cf:88:ce:b4:cf:17:b9:e8:52:fb:0a:e0:
                    ec:09:93:fa:92:37:af:f4:d8:4c:89:cb:33:ac:04:
                    59:36:c1:2b:4e:5e:f1:04:87:1d:bf:09:d3:8d:dd:
                    5e:fa:f1:fe:5e:a5:35:0d:1f:10:cc:a5:7c:34:4a:
                    1d:0c:86:bf:2f:c4:d8:4d:80:d0:95:e2:7a:8d:24:
                    7d:cc:d5:a5:8b:64:35:5c:a8:de:c1:2b:2a:6a:d8:
                    9b:95:6b:ba:d6:6a:8c:7e:0e:8b:5c:0e:60:fe:5e:
                    eb:0a:2a:91:41:3a:28:23:d1:d3:32:78:aa:16:ff:
                    18:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FC:74:DF:DA:E1:2A:72:D1:2F:01:CF:96:5F:67:6B:82:4D:33:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4b572e0b-6545-3cff-b15d-573806742740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:b110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:c2:b4:7c:ed:b1:02:a0:0f:3b:bd:f5:b5:53:cb:0b:e8:03:
         fa:53:68:79:cb:e9:82:3a:f9:c9:42:74:f7:1d:06:27:04:4b:
         ed:01:52:03:5f:b5:01:b0:1a:e9:27:65:03:d5:c2:7f:95:38:
         fa:17:a1:86:0b:0f:71:a6:63:6d:4f:6a:e3:97:62:ed:a3:c1:
         84:f0:7f:aa:28:25:83:64:38:ab:a7:5d:46:27:19:ec:08:0d:
         7c:6e:78:30:75:a2:bb:cf:4d:a8:48:6e:5c:e4:a3:71:2e:cc:
         96:91:a6:70:27:02:57:16:0d:45:c8:1a:be:66:3a:a7:13:c8:
         d7:14:7e:87:71:cf:82:6b:05:b9:e3:59:5e:b8:c6:d6:49:34:
         2a:53:88:a1:23:13:49:dc:ba:8c:2d:59:98:5b:b1:1d:1b:b4:
         1f:57:86:86:26:4d:2d:39:95:3c:f7:b4:14:7f:1d:b7:03:44:
         e6:e0:f7:df:41:35:2f:33:66:00:73:a0:16:b9:68:00:e6:56:
         91:38:7f:6c:52:5c:4d:d4:73:bd:6d:3a:c2:a7:46:dc:0e:94:
         f7:da:ab:94:d8:10:b8:e5:85:2f:88:87:54:02:d8:86:71:8b:
         8d:01:8e:ef:92:d3:67:cf:c6:8c:3a:c6:a6:cb:5d:cc:e5:d3:
         e2:ab:d3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:24 2024 by rpki-client on console-ams.rpki-client.org