Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e960e85-1abd-344d-89f3-a74eaa12b893.roa
File:                     5e960e85-1abd-344d-89f3-a74eaa12b893.roa (raw, json)
Hash identifier:          jP3Bhvs/CHDhqpM5tqMVE+haghSZ6C0GNAK8uDXeceI=
Subject key identifier:   38:E4:33:70:BA:FB:0A:D5:E2:4E:0F:52:02:3E:E7:EB:CE:72:F4:6F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846E3E1EA59AE006B87A8170800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e960e85-1abd-344d-89f3-a74eaa12b893.roa
Signing time:             Fri 16 Aug 2024 01:36:42 +0000
ROA not before:           Fri 16 Aug 2024 01:36:42 +0000
ROA not after:            Thu 14 Nov 2024 02:36:42 +0000
asID:                     6167
IP address blocks:        2600:100d:b1c0::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:e1:ea:59:ae:00:6b:87:a8:17:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:36:42 2024 GMT
            Not After : Nov 14 02:36:42 2024 GMT
        Subject: CN=bc8276b7-0c50-4f41-9bca-ca60c00014d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:89:d8:46:31:5b:6a:4b:57:62:74:5a:49:16:
                    2c:56:41:38:e2:a1:c9:2f:9d:11:e9:b7:6a:d6:7d:
                    f1:cc:b3:d6:65:a9:39:37:2e:35:5c:ca:42:98:cb:
                    b4:f7:4d:2d:58:29:c7:6a:c8:53:73:b6:e2:49:7f:
                    65:7c:31:d2:f4:ab:cd:f4:0d:75:61:63:3d:6d:36:
                    88:ff:b3:c0:1f:c9:ff:da:7a:8c:8d:4b:82:c7:13:
                    36:5d:98:d8:1f:30:23:a8:aa:53:0e:a8:6c:6c:7b:
                    ab:55:94:96:ab:2d:a1:2b:fd:47:a7:a5:f6:bb:87:
                    dc:3b:a7:35:f0:71:5c:81:79:08:0c:4a:80:c2:a6:
                    8a:62:e7:4d:67:7d:65:f3:95:bf:a7:f1:7f:78:e0:
                    65:88:9c:b7:28:88:ad:b8:ce:99:be:08:fb:24:2d:
                    00:33:21:d8:e2:b7:8e:49:a0:67:3e:2c:84:44:b8:
                    49:6d:a1:1b:77:f7:2d:cf:97:ce:6f:79:94:33:89:
                    06:0a:be:0c:52:37:fe:39:ea:a7:af:b6:06:3e:50:
                    40:8a:33:1a:eb:0e:29:59:d9:af:de:58:2b:6a:06:
                    c6:9f:36:24:06:38:e4:96:56:97:11:3a:36:a8:af:
                    a0:91:39:c3:6c:f6:c7:0b:d3:92:9d:4d:1e:81:d6:
                    58:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E4:33:70:BA:FB:0A:D5:E2:4E:0F:52:02:3E:E7:EB:CE:72:F4:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e960e85-1abd-344d-89f3-a74eaa12b893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b1c0::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:da:5e:41:9b:8d:03:6a:24:ef:a6:34:5b:d8:6f:fe:4f:fa:
         fe:23:50:d1:3a:e5:23:47:38:b0:18:80:ba:1a:f5:f4:e2:d6:
         e7:f3:5f:9c:ca:84:6d:47:fa:38:1c:9a:14:b6:52:c7:86:8e:
         ce:02:2f:31:85:04:8f:65:75:c0:08:38:e8:bc:9d:a7:3b:85:
         35:a3:81:ce:5e:b9:9a:bb:db:1d:cb:dc:d2:ec:59:ad:ba:dc:
         6f:2c:4f:20:9a:36:e3:7f:2f:59:6c:4a:e7:f1:24:a2:af:95:
         d4:72:d8:42:68:20:bc:55:e4:7b:4b:75:19:5e:ca:a5:a9:dd:
         47:c3:77:0c:83:59:1a:07:c2:a9:bb:19:fa:d6:ee:3d:77:47:
         20:74:41:fc:e4:a2:bf:40:7e:00:10:24:26:63:34:6b:a7:b7:
         66:d5:5b:1e:d0:b5:4c:0d:93:f6:02:71:86:a4:6d:b8:ce:c1:
         e8:d1:8f:54:85:ff:0d:a0:49:bd:35:92:bd:13:99:83:80:e0:
         5d:30:1b:de:0f:6e:f3:8c:08:28:ae:d9:63:6e:7e:c2:76:c4:
         d3:ca:a1:84:3e:a2:de:f4:99:cd:c1:f5:5a:6f:07:44:85:1e:
         78:96:d4:29:12:ad:97:e1:ad:a1:bb:78:69:49:44:14:32:24:
         02:42:91:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:30 2024 by rpki-client on console-ams.rpki-client.org