Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a10fa91-9d0e-339a-bce0-cfbc0c93b0ec.roa
File:                     5a10fa91-9d0e-339a-bce0-cfbc0c93b0ec.roa (raw, json)
Hash identifier:          0l/dJiQXTUQ2VuMd5bI25GOe7CVyLhpBfXNkBjUeQvA=
Subject key identifier:   C1:90:5C:D3:EF:21:B7:F5:86:DB:2C:02:BD:45:7A:0C:48:D5:10:48
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D769B9E20804F9E6F7B8980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a10fa91-9d0e-339a-bce0-cfbc0c93b0ec.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1003:b870::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:9b:9e:20:80:4f:9e:6f:7b:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=3be495fe-a140-4de0-b608-3dd7a01f18ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:84:e9:4a:1b:5c:d6:1e:ae:a3:f4:6e:3a:37:
                    94:77:f5:c3:8c:78:36:da:78:09:96:9c:85:f0:ee:
                    4d:ca:e4:76:df:05:1b:96:59:4f:f2:a3:23:42:42:
                    8c:33:11:11:54:70:06:b2:7e:84:06:00:96:a6:c3:
                    66:87:00:67:4e:21:9c:6c:77:d6:38:00:e1:ca:da:
                    65:20:7d:87:1f:8d:19:b8:7e:69:51:40:e5:cb:d8:
                    dd:74:99:e1:84:41:5d:ce:9e:a1:ed:11:ee:62:c4:
                    cb:05:22:41:60:a0:3a:dd:e3:0b:58:12:e2:49:c5:
                    c0:10:fb:c9:6f:5b:7f:81:e9:a9:3c:ed:aa:86:79:
                    f9:e1:b0:13:5a:b1:81:92:30:0c:7d:da:77:00:7f:
                    a2:20:e2:80:a5:f7:e6:20:88:fa:2e:e5:a5:75:84:
                    8b:0d:d8:7f:5c:d6:b8:c4:9e:0e:3f:9e:db:12:2b:
                    72:44:d2:cb:e9:9d:11:90:1f:6f:c1:c7:a5:c5:b1:
                    cb:46:80:ff:87:fc:dc:da:ca:11:34:99:d0:ea:25:
                    46:4a:f1:16:28:d6:60:61:9d:f1:cf:fa:65:1c:44:
                    05:9c:f0:86:f0:f9:75:e0:6a:ea:19:38:49:29:44:
                    e1:bf:43:0b:56:a0:91:e6:c7:f8:b9:31:1d:8b:a6:
                    cf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:90:5C:D3:EF:21:B7:F5:86:DB:2C:02:BD:45:7A:0C:48:D5:10:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a10fa91-9d0e-339a-bce0-cfbc0c93b0ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b870::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:04:28:b0:43:41:c2:32:db:27:9b:67:b8:a6:f3:75:89:b2:
         1d:5a:df:a5:f9:ad:75:87:31:1a:1b:41:0d:95:4f:3d:74:a5:
         b5:ba:c8:53:5c:85:13:a1:0b:28:ac:40:2d:f0:68:15:a5:86:
         88:9b:0b:a7:ac:4a:08:16:6f:54:13:d6:9c:64:19:68:c3:d4:
         6c:db:74:03:06:ea:da:c4:64:e2:c5:29:c3:99:2f:cf:c5:e7:
         cc:46:25:3c:82:0c:ef:37:59:90:9a:cd:28:49:e2:48:94:87:
         27:2f:f6:0f:5f:5e:75:fc:f0:b9:a5:60:3c:f9:67:78:7e:dd:
         e7:ec:33:a2:4a:48:0c:e1:8c:67:4a:68:6e:08:16:f7:b7:55:
         d2:02:98:db:27:9d:9d:d2:83:d4:e5:cf:b2:67:1e:e8:21:76:
         1b:af:2e:88:a6:fe:6f:29:3f:f1:b2:d5:bf:39:3c:c4:43:00:
         c8:ba:3b:eb:74:82:26:e3:34:fa:4b:a9:25:38:1a:74:3b:2c:
         e3:0c:86:e2:c6:58:28:00:7c:03:a0:0b:63:82:70:43:28:51:
         6b:af:57:6b:ba:12:35:5b:cc:76:81:64:75:b0:3b:d2:b0:7d:
         4a:0b:9c:2b:55:ae:c6:a8:83:6f:12:36:99:9b:14:ac:48:6b:
         1a:fe:6a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:32 2024 by rpki-client on console-fra.rpki-client.org