Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d691c19-49e6-3b58-ab16-ad08769d2236.roa
File:                     4d691c19-49e6-3b58-ab16-ad08769d2236.roa (raw, json)
Hash identifier:          NS6JLXt/1PeSLe90N0jzt2eBonswhrI108Mdo4/XjD0=
Subject key identifier:   71:B8:E5:E8:00:A4:D4:DE:54:AC:12:2E:A0:71:CF:7B:C2:70:69:AC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4A9F96A8448F4DD3FF6A880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d691c19-49e6-3b58-ab16-ad08769d2236.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:1009:b180::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:a9:f9:6a:84:48:f4:dd:3f:f6:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=d186e86e-77bc-437c-b4c7-a5707e8b1041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:18:dd:bc:e5:76:46:b6:99:26:90:f6:c7:8a:
                    f1:88:64:cd:57:5d:f5:77:6d:27:e2:ae:c5:6b:3e:
                    02:29:5f:b0:53:40:6b:63:dc:19:5a:4c:a6:e3:87:
                    44:29:08:01:de:5d:a0:30:5f:5f:72:ed:fe:17:53:
                    cc:b9:58:33:98:ad:63:44:e9:3e:c5:b7:e6:19:11:
                    13:f2:79:de:fc:12:aa:2a:16:6d:ed:94:6e:81:7b:
                    19:ac:bc:ee:93:65:2d:a1:3c:6c:68:f2:7d:76:2b:
                    65:e7:0b:76:da:41:e2:ef:28:47:e4:a0:7e:5a:ad:
                    d9:19:15:59:9d:ee:44:9e:5c:d2:53:64:9b:ac:8a:
                    f4:b9:a5:7d:36:2c:fe:5c:70:ba:e8:64:74:2c:67:
                    3f:35:1b:85:c8:02:b6:b5:86:aa:9d:7e:4d:82:67:
                    6d:58:36:be:1f:1b:eb:0f:16:69:c7:90:4b:76:51:
                    c4:ac:5a:7d:83:cd:aa:e1:a3:82:6f:4d:32:c9:38:
                    62:17:6c:b2:3d:db:bc:bf:99:7b:1c:00:38:bb:2c:
                    4e:db:05:9a:2f:be:52:fc:e4:99:b9:b8:26:f1:b8:
                    ec:fb:47:55:21:97:de:5d:9c:b0:ee:a8:d4:22:7e:
                    86:a5:ed:88:6c:e7:bf:ae:5b:76:ea:6e:3b:9c:88:
                    a6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B8:E5:E8:00:A4:D4:DE:54:AC:12:2E:A0:71:CF:7B:C2:70:69:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d691c19-49e6-3b58-ab16-ad08769d2236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b180::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f8:dd:4a:1c:80:90:c7:17:db:f7:cd:b8:b6:be:4c:a4:3f:
         4f:fe:fb:9a:5c:b0:d2:53:1b:d2:16:00:66:eb:2d:31:83:b6:
         d0:a0:26:10:83:56:cd:b8:24:62:6d:d1:9d:d3:e1:13:d7:60:
         52:7e:cd:ca:fa:9e:43:c6:e7:00:f6:56:07:60:07:27:0d:a2:
         06:a3:13:8c:47:bb:23:2d:19:d7:ea:b3:5c:93:b2:16:71:bf:
         15:fe:26:e5:de:92:e5:95:27:77:af:4b:59:6e:05:56:ef:8b:
         d7:ec:18:72:1d:e5:f3:ae:70:37:3b:7e:b6:0e:9d:0d:0c:24:
         f4:b1:7e:c6:a4:04:c0:fe:b7:3f:21:f5:cb:81:25:2c:6e:de:
         85:48:d9:ec:a5:66:de:e3:39:ca:b6:0d:c2:74:bc:ba:1f:3e:
         7f:60:57:1d:51:40:0c:2d:db:5e:06:2b:23:14:11:a4:90:01:
         c0:d5:e7:f6:29:f9:5f:58:31:1a:ae:1e:09:d4:11:bc:db:f5:
         5f:3f:f2:da:76:12:00:a7:93:51:48:c4:98:50:c5:c8:f9:bf:
         9a:69:91:9a:da:9a:39:3e:bd:ce:a6:33:48:e8:a7:de:27:ae:
         74:0c:65:0d:d2:13:83:73:21:34:ca:94:fb:c8:01:bb:f5:ce:
         c2:de:bd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:25 2024 by rpki-client on console-ams.rpki-client.org