Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d307f84-70f7-361c-a434-8241b7d51e5f.roa
File:                     5d307f84-70f7-361c-a434-8241b7d51e5f.roa (raw, json)
Hash identifier:          iyzA/88y0TVQKnTPVUNvoKxIkVvykgHHGsgb0pGQ4GQ=
Subject key identifier:   74:66:A7:59:13:51:C6:19:0C:5B:47:C3:C3:7C:42:50:CB:F0:2D:D4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76A6608DD25EF721BF4C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d307f84-70f7-361c-a434-8241b7d51e5f.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1006:b0c0::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:a6:60:8d:d2:5e:f7:21:bf:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=de536a3d-8f7b-4ba7-9670-3051468900d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ac:b7:ee:e3:f3:d0:59:cd:66:a1:7c:cb:3f:
                    f0:14:41:16:c7:d4:90:13:e3:ba:39:41:56:4c:a2:
                    f7:6b:04:a7:3a:36:84:05:02:25:4e:20:5c:6e:83:
                    0b:05:77:06:55:54:df:53:80:ab:bf:ee:53:d2:88:
                    07:a6:28:3b:8b:42:cc:b2:c7:6d:a9:39:f3:e3:b9:
                    2f:7d:be:dc:3d:03:e5:77:ed:57:75:21:13:26:9e:
                    6e:1c:19:31:3a:84:e4:a5:7d:f5:1c:a1:a8:27:f7:
                    bf:df:10:68:bb:f6:69:f9:82:cd:8a:19:a4:bf:45:
                    e0:83:03:53:61:77:b8:7f:d7:0c:40:be:2e:65:fb:
                    10:6f:d8:e1:f7:8e:67:54:c6:8d:05:cf:47:42:11:
                    5c:0a:ca:b2:c0:b2:1a:9e:ce:fa:5a:34:8e:eb:de:
                    4f:5e:19:1b:f9:3e:50:d1:2b:6a:ec:40:67:2e:24:
                    ed:81:a4:96:1e:a5:51:2e:83:08:64:cf:36:06:85:
                    7e:d7:06:ef:2d:3f:de:19:7c:90:73:a1:f4:20:2c:
                    08:6a:5d:43:fa:a6:ab:7d:04:2f:b8:9a:72:e1:28:
                    3f:04:5e:93:50:a9:41:7f:3d:62:01:3c:18:42:8a:
                    78:a1:e8:75:87:29:90:eb:5e:b6:f5:d3:9b:29:3f:
                    68:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:66:A7:59:13:51:C6:19:0C:5B:47:C3:C3:7C:42:50:CB:F0:2D:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d307f84-70f7-361c-a434-8241b7d51e5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:b0c0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:a9:be:f5:d4:8c:e9:7a:1a:11:68:c4:19:6a:c2:99:96:bc:
         1d:2d:5d:18:97:72:9f:57:ba:65:60:f9:45:aa:28:ab:af:ac:
         9b:74:34:48:57:0d:3b:6c:cf:a8:c5:cc:6b:a9:e3:4a:eb:45:
         54:19:29:d9:0b:5a:1f:8b:3e:2b:4e:d3:04:28:9d:1a:da:8f:
         af:60:66:b7:67:8c:5c:3a:de:9b:90:83:1a:36:b5:77:0d:5e:
         88:53:a2:43:11:59:2e:68:bb:9e:1a:78:8f:69:a0:c8:7f:c3:
         ff:10:fd:e4:24:1a:4e:68:d5:b8:bb:0d:8c:ab:2f:fa:cd:6a:
         dc:49:05:02:e5:99:9f:e5:68:01:30:28:80:06:dd:22:46:30:
         58:c8:47:20:cb:55:cd:da:60:16:89:bd:7d:a1:05:7b:61:27:
         48:3b:22:73:7f:74:39:90:0a:f3:f3:78:fa:ff:e8:31:3f:17:
         d7:04:44:34:07:25:15:ca:85:61:e1:d6:6c:5a:2a:b5:59:95:
         74:81:a1:45:94:9d:7a:ab:2a:85:27:a6:1a:9d:f3:35:c6:f0:
         dd:c0:dd:9e:db:18:88:74:3f:09:69:7f:64:85:c3:f6:a6:55:
         23:35:4b:4c:d8:a1:63:95:7b:2d:07:86:97:22:1c:ea:74:98:
         3a:d4:c5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:32 2024 by rpki-client on console-fra.rpki-client.org