Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e076eb4-9464-32a6-88f6-1048f2a99c0b.roa
File:                     5e076eb4-9464-32a6-88f6-1048f2a99c0b.roa (raw, json)
Hash identifier:          Wh3PzSV2sbEN5WvTqNOosO5XQyxbDGKS2f+pxoL0xYo=
Subject key identifier:   C1:E2:B9:81:69:DD:28:E4:71:AF:B4:75:30:D2:60:4D:17:0D:6D:60
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA0078C8199F8B7CB5D3C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e076eb4-9464-32a6-88f6-1048f2a99c0b.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100c:b060::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:00:78:c8:19:9f:8b:7c:b5:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=1dee7ac7-476e-4f8d-ba8c-eb4943eb70cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:da:2e:ee:b6:dc:fa:7f:fc:db:59:6c:62:7f:
                    1f:6c:4c:eb:45:ee:51:0e:92:0f:b4:d1:21:f2:2b:
                    91:53:1e:cd:75:a6:10:87:4b:5b:ed:dc:84:4a:37:
                    fb:7f:73:2e:b3:ea:b4:36:4c:13:1c:6b:bb:0b:12:
                    f6:38:a9:04:e5:60:29:fa:5f:18:99:5a:56:8c:4a:
                    20:45:00:3a:e0:5b:be:11:d1:1e:d6:dd:c5:cc:4a:
                    4a:c1:04:f2:07:af:0e:ec:42:c4:a4:58:e3:af:90:
                    d9:ce:a0:e7:b7:e0:0f:b2:48:d0:da:94:f6:e9:f1:
                    6d:76:d4:da:c8:83:70:60:d1:c3:11:83:72:b6:ac:
                    70:2f:b3:2e:20:00:a8:1e:a4:7b:9d:b6:1a:db:5d:
                    d1:0f:1e:b8:ec:d3:67:79:18:8a:02:99:6e:6f:c9:
                    32:f3:6a:7f:34:38:d5:bd:ec:d5:b3:39:14:a0:a5:
                    5f:23:0b:e2:71:1e:a8:5c:4c:7d:ec:c7:e3:29:ff:
                    47:23:79:0d:ab:88:8f:33:62:85:25:2b:f6:b7:46:
                    0e:a0:60:ed:80:6a:1b:1f:2b:11:84:2b:27:51:68:
                    dc:e9:cc:52:91:13:1b:09:23:d2:5c:19:05:20:e2:
                    de:08:97:da:4f:59:e4:70:8e:46:c4:79:c3:bb:ec:
                    ba:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E2:B9:81:69:DD:28:E4:71:AF:B4:75:30:D2:60:4D:17:0D:6D:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e076eb4-9464-32a6-88f6-1048f2a99c0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b060::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:12:be:29:e9:b6:4e:7e:ed:7b:51:d6:a7:91:e7:77:ed:d9:
         d4:89:98:5f:e6:5e:f4:2f:76:08:bb:f0:3c:db:ff:01:a0:a1:
         17:5f:a8:66:2f:23:26:f8:a4:39:83:59:e9:23:57:59:60:e0:
         6d:32:d0:69:b0:1b:6a:f2:7d:67:84:38:bd:87:04:b8:11:cb:
         09:43:ca:76:f1:52:ec:92:8f:35:0a:6f:18:16:cb:1e:f9:90:
         49:fc:f3:d7:18:b6:74:e5:c5:7c:1f:e4:15:b8:2e:65:01:b6:
         0a:be:54:ab:3e:9e:60:11:b1:e4:09:df:57:e3:96:78:06:94:
         b4:29:76:73:80:8f:e7:13:56:9b:1d:31:5f:fd:8d:56:db:b3:
         88:30:6c:ad:4e:3a:22:ea:1b:13:cb:fd:7d:22:38:50:de:55:
         f5:ba:5f:77:95:bc:01:49:6b:20:cc:58:27:ca:94:da:f0:18:
         73:25:28:f4:a8:ce:a8:86:dc:9e:ca:33:ce:54:6c:a2:a1:75:
         0d:6a:f7:c7:9a:f1:ba:92:b7:04:7c:d8:e3:f1:9a:13:f3:b7:
         34:65:9f:44:98:6b:e8:20:7a:5c:00:37:53:25:55:ec:1a:0c:
         bd:af:be:1d:35:ac:71:1c:8a:72:cb:d3:6a:13:94:9c:f2:58:
         a1:64:cc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:32 2024 by rpki-client on console-fra.rpki-client.org