Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d085a8b-c77a-3c87-ae86-43ba2eb42dff.roa
File:                     4d085a8b-c77a-3c87-ae86-43ba2eb42dff.roa (raw, json)
Hash identifier:          6ui/nM5gf83lm1isZcx7Rnlv4sAQEgJNG0+Xcl6R46E=
Subject key identifier:   A6:ED:1E:4E:4C:E4:DF:FB:E6:DF:C8:E1:46:4F:0A:A8:17:50:9E:DF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D7697B4DA514ABD98E0B240
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d085a8b-c77a-3c87-ae86-43ba2eb42dff.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1002:b110::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:97:b4:da:51:4a:bd:98:e0:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=c9cee264-2a48-48de-911d-5defa969d10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4d:1d:30:8d:46:c6:f6:f8:c9:7f:34:15:84:
                    dc:ce:17:54:c1:88:2a:04:25:33:5d:9e:fe:b9:fc:
                    16:53:71:e7:f2:80:4b:c9:6a:8d:af:09:9f:89:93:
                    ae:39:92:8e:c2:53:29:bf:93:98:5f:3c:e2:33:4f:
                    01:8e:1a:9f:b0:47:17:d5:2e:0f:70:53:21:fc:16:
                    a2:5a:8e:5b:6e:c3:68:26:b1:26:4c:c6:e1:30:11:
                    8c:16:29:be:3a:91:d9:c9:0f:24:f5:80:9f:99:55:
                    ba:28:43:dd:fd:f9:5b:b7:1a:48:69:20:39:c2:c8:
                    fc:2b:e2:c9:a1:d9:33:88:78:82:80:a1:5f:06:1f:
                    7f:44:9c:a1:e7:58:33:bf:a3:aa:88:cb:33:9b:68:
                    b4:64:97:f4:9f:ea:5c:1c:1d:62:c3:24:b7:e0:b9:
                    3f:97:71:9c:07:9c:81:89:67:22:78:d3:35:6c:1c:
                    6c:a9:07:eb:a1:89:60:0c:d9:22:97:dd:c3:5c:4e:
                    eb:b4:f9:74:40:2a:ad:b2:2a:15:a9:f8:16:51:e4:
                    c9:b3:5c:ed:24:30:5f:32:29:78:77:4e:24:d1:ee:
                    3d:cb:b1:74:b1:16:82:28:e3:50:a1:7e:ab:fc:9e:
                    58:98:c6:66:a6:90:11:a8:4e:3b:10:eb:64:8a:8e:
                    d7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:ED:1E:4E:4C:E4:DF:FB:E6:DF:C8:E1:46:4F:0A:A8:17:50:9E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d085a8b-c77a-3c87-ae86-43ba2eb42dff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:b110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:1e:dd:fa:01:b9:4d:a6:e4:38:e9:aa:d1:9b:43:02:40:dc:
         f0:fb:c4:a3:7a:79:c5:03:ef:f1:b4:bc:b1:35:15:33:d1:32:
         8b:b5:27:d4:74:3b:4c:31:40:fd:a5:78:e9:b7:96:c7:70:f1:
         17:d1:c4:01:05:c9:f0:a5:3a:81:64:e9:bd:4c:8c:22:55:24:
         aa:2c:31:b7:b5:cc:09:5e:b5:61:0a:df:5e:05:3d:ea:66:68:
         2e:3a:70:06:0e:c5:a8:9a:8c:e6:17:d3:49:b3:09:d2:b5:92:
         9b:6b:4c:0a:a4:2b:3a:a0:f3:c4:d8:3b:57:5b:e7:32:35:b8:
         a2:49:ba:ae:d8:aa:81:fe:b0:ea:bb:f4:50:33:8c:db:fa:17:
         ee:2a:58:c4:d9:49:4d:92:25:31:ec:e9:9f:22:a4:a0:60:69:
         58:a5:70:c8:d2:a3:e8:16:80:93:8c:d8:46:ea:4d:55:b3:77:
         bf:f3:6a:f0:ba:f4:4c:16:f4:26:0c:99:cd:34:f3:71:e7:dc:
         e8:bf:40:a3:e7:6f:65:fa:55:aa:e0:55:eb:13:b6:0e:ba:2a:
         d4:41:cf:6d:b4:06:e4:37:c8:c3:53:e1:20:d2:4b:3d:40:66:
         75:84:cd:67:54:b3:96:a9:f9:05:c5:e5:5f:47:bf:42:62:3a:
         a7:f5:f0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:25 2024 by rpki-client on console-ams.rpki-client.org