Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c48add0-c899-3f0b-a930-0aa11c6d73e2.roa
File:                     4c48add0-c899-3f0b-a930-0aa11c6d73e2.roa (raw, json)
Hash identifier:          HUSSJZDk298TyQc8DYpXRDUuktNhjR/V5DxuER8sNu0=
Subject key identifier:   EE:C2:E3:1B:42:47:D9:F4:86:41:A0:44:1C:3D:87:79:3F:EE:FB:A7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBE7F63BD2EB9C6B30C4A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c48add0-c899-3f0b-a930-0aa11c6d73e2.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1015:d000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:e7:f6:3b:d2:eb:9c:6b:30:c4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=ab88916e-bb0b-43cf-bcd6-0ff90b6e5386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:37:a9:52:c7:b7:50:1c:56:c2:43:7e:41:bf:
                    61:33:e3:2b:2d:8f:91:c2:76:90:dd:1d:08:bb:e0:
                    0c:93:87:7c:3d:0b:1d:cc:87:e7:ea:2c:58:b2:19:
                    48:8b:c3:2a:62:8a:cc:e1:7e:46:4b:be:16:66:5e:
                    7c:27:c7:b9:27:86:df:be:63:cc:64:a0:e5:01:99:
                    1b:2f:2a:13:1b:31:fb:b0:14:e6:3d:8c:4d:e2:b4:
                    0d:c0:bd:29:cb:72:48:12:5a:30:5e:6f:86:0c:9e:
                    67:2c:85:32:5b:8e:7a:a4:59:79:df:34:1c:74:a8:
                    63:40:21:33:ff:ba:fc:1b:9f:71:27:bb:15:23:ae:
                    ce:51:65:cb:00:31:a6:6d:e8:83:73:9d:93:5f:4e:
                    bd:6f:f2:d2:2e:5a:1c:9f:4d:1f:76:d3:2a:8c:28:
                    43:77:3b:03:97:35:17:f4:e4:7c:72:1e:d3:d5:ff:
                    3a:3a:39:3e:e2:3b:bc:57:f6:12:98:eb:4b:f4:d1:
                    98:bb:76:5d:3b:8a:96:89:4b:0e:a3:0c:ea:c1:32:
                    9d:ee:d3:74:7d:0a:8d:ed:18:bb:c8:c0:55:c4:8b:
                    89:26:7f:26:18:83:ee:86:56:61:20:f2:4b:92:5f:
                    13:02:f0:3d:73:0e:28:68:8e:8e:ea:15:2e:d9:c1:
                    aa:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C2:E3:1B:42:47:D9:F4:86:41:A0:44:1C:3D:87:79:3F:EE:FB:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c48add0-c899-3f0b-a930-0aa11c6d73e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:58:4f:f1:a6:94:8c:f3:7d:19:b7:60:82:d8:6b:c5:18:a9:
         e7:0c:35:39:77:d3:a2:36:33:4d:69:c3:58:6d:59:3b:89:21:
         7d:b5:ca:cc:69:48:19:73:06:c6:32:af:a2:78:da:6f:22:cd:
         21:c7:ae:b0:bf:dc:0e:27:1e:26:5c:8f:d9:e3:21:36:a1:a1:
         55:93:6b:86:b3:f0:0c:53:e0:47:59:ca:10:50:97:5c:65:da:
         74:4f:c8:7d:3e:2a:3c:7f:b2:43:13:6a:a3:93:5f:ee:8c:f9:
         02:d9:6e:fc:c2:84:2b:0a:f1:5f:14:eb:6c:b6:fe:e6:80:ca:
         ae:8e:8c:57:45:ae:85:c8:fc:f8:ca:6f:bb:0a:a9:97:3e:8c:
         f4:6b:40:4d:50:ac:a3:7a:21:42:e6:cc:bb:3a:57:ee:bd:ac:
         33:d8:50:fc:9e:61:49:3f:2d:6c:f5:7f:13:09:f1:3a:3d:f8:
         8d:da:83:f4:c4:40:77:16:e3:aa:b4:bb:12:03:38:5a:a7:35:
         13:31:20:fa:bc:64:7b:17:57:a2:19:a6:60:03:25:49:e9:79:
         e8:0f:49:ae:e3:cd:9d:5c:a9:41:be:ab:8a:60:d4:db:01:3f:
         ad:ac:fe:eb:02:fd:6d:5c:a6:67:1e:41:26:9d:4d:a7:91:37:
         4e:79:ef:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:44 2024 by rpki-client on console-fra.rpki-client.org