Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6066873d-ccac-314e-aca6-f2749423a71c.roa
File:                     6066873d-ccac-314e-aca6-f2749423a71c.roa (raw, json)
Hash identifier:          IByi65CfHxFjLLsPOvUe/2fyRfsAb9l7b2gC0PFoAf0=
Subject key identifier:   9C:98:F4:B3:0F:34:2A:DF:65:FF:5D:35:85:2E:17:A9:1D:99:33:E8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76A51A347D57BAD6776800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6066873d-ccac-314e-aca6-f2749423a71c.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1006:a020::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:a5:1a:34:7d:57:ba:d6:77:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=2558d44e-1fbd-4d8f-9dd1-986a4bf52a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:10:08:28:85:dd:fa:e7:08:8f:18:a4:49:84:
                    7f:d1:76:0e:de:2f:d6:ff:14:b0:16:e0:b2:89:2f:
                    a1:57:07:b5:8d:b2:49:cf:9f:e9:bd:b0:9d:c6:02:
                    de:bd:38:19:9e:56:ae:a3:53:dd:48:33:95:72:5a:
                    99:2e:f8:1a:a3:73:da:ee:8c:f1:a0:84:1c:07:f8:
                    7f:e0:8c:fc:f3:c5:d4:79:ca:58:cf:3f:43:c9:4f:
                    f2:b6:c0:03:5b:43:4d:ca:c3:aa:24:6c:43:9c:d5:
                    7f:4a:e9:fa:e8:8a:da:e4:1c:26:2a:1f:ef:9c:aa:
                    b1:ea:43:c3:34:a9:63:84:ee:a1:47:06:6c:6d:30:
                    bc:a8:a4:eb:4b:53:78:9b:29:50:0f:02:7f:85:2f:
                    a2:cb:91:76:fd:e5:7a:a4:d6:90:21:da:ab:b5:bf:
                    03:3c:2c:e0:f2:4c:35:d7:78:8e:5d:6a:d5:17:62:
                    8c:90:07:f8:a9:69:57:3b:82:9f:5d:f8:f9:48:52:
                    78:94:fb:75:9c:1f:d5:3d:d4:e5:2e:c3:f5:27:b7:
                    7a:9f:f6:19:8c:e4:a9:b4:91:c3:ef:6f:45:7a:18:
                    5b:08:2a:7a:37:af:48:e1:7e:5a:f2:fe:c8:aa:72:
                    ca:96:62:fe:bb:bb:13:ef:5b:e8:36:2e:7c:e3:1f:
                    18:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:98:F4:B3:0F:34:2A:DF:65:FF:5D:35:85:2E:17:A9:1D:99:33:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6066873d-ccac-314e-aca6-f2749423a71c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:a020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:11:ac:10:59:09:78:ac:fe:2d:44:79:83:8c:2f:81:98:bb:
         c9:2d:8a:53:04:fe:2d:db:cd:6b:6b:98:85:aa:18:a4:b7:77:
         48:fc:75:0e:c5:67:02:83:e8:1c:84:a3:ac:25:13:bc:d0:6d:
         72:16:59:e4:57:5d:69:37:70:04:d2:38:c0:b1:3c:c1:b3:b9:
         eb:03:4d:06:88:2e:12:d7:8f:66:7c:d7:5a:07:3b:ff:5e:ac:
         7f:00:50:f6:29:07:b6:3f:8f:ed:7f:34:3c:89:c7:aa:5a:c4:
         1e:1f:d9:63:bb:8e:f9:4f:37:31:14:4c:97:c4:39:c3:d1:80:
         7e:0f:db:2c:fc:a0:3e:ba:cc:a8:5d:8e:37:cd:06:73:6d:ee:
         8c:ff:e2:e3:5b:98:1a:74:de:6e:b9:9e:7b:f3:26:01:03:8f:
         97:c1:41:c3:b9:81:25:3e:e7:b1:c6:bf:ae:cc:f0:68:80:53:
         98:99:59:52:3c:53:14:2a:fc:cb:6c:c1:6b:8b:c4:fa:27:ea:
         96:52:b4:de:84:47:b7:da:0b:ac:06:8e:61:26:8c:b3:52:2f:
         e0:2b:43:8c:4e:bd:be:85:ad:54:b8:85:29:68:c6:c7:82:88:
         1f:d2:12:46:d1:50:81:1d:f2:4d:54:bb:c0:6d:55:7d:48:f0:
         ed:00:fe:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:50 2024 by rpki-client on console-fra.rpki-client.org