Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60a81c8b-8af9-30d5-9aa3-3fb7b5689c1b.roa
File:                     60a81c8b-8af9-30d5-9aa3-3fb7b5689c1b.roa (raw, json)
Hash identifier:          0pufke0W6StfX1XltyIM8X7XGD/yKJuKTiKXZbfHKY8=
Subject key identifier:   20:CC:89:19:1B:80:16:0D:63:AB:E0:E8:8E:6D:66:74:AE:57:B9:06
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4A9F4F2AD1180DBDDB14F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60a81c8b-8af9-30d5-9aa3-3fb7b5689c1b.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:1004:b230::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:a9:f4:f2:ad:11:80:db:dd:b1:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=bcab9aa2-183e-40b8-adf3-f08e56fe312b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:43:66:be:9f:9a:69:bb:c1:7b:4c:71:73:10:
                    e4:11:70:ee:4c:03:1b:bb:c9:38:2a:23:a9:6a:62:
                    c2:1a:2d:7e:15:da:15:03:13:9b:bd:29:bb:0b:bf:
                    4e:d3:f1:57:97:1b:44:8a:ac:b6:49:43:7b:17:ae:
                    8c:c6:89:08:8b:3e:85:25:5f:50:a4:1d:30:69:de:
                    e5:dc:73:6b:05:f1:c7:73:53:db:05:ef:60:ca:f3:
                    a0:9a:97:30:04:54:39:50:a7:c4:2e:e7:0c:5c:34:
                    1b:06:7d:b3:4d:b8:c0:10:be:71:10:30:92:99:4d:
                    17:4b:5a:6f:b3:1c:10:7b:6b:a1:7d:13:17:6c:c6:
                    a7:96:47:36:c9:04:0f:89:7d:cd:c2:0f:4a:8b:6c:
                    11:0c:af:16:45:4a:b0:0a:a6:c1:88:e4:c7:53:79:
                    39:72:55:ab:bc:9e:5c:85:be:82:ad:5a:46:a2:47:
                    58:ed:5a:19:17:53:cf:54:44:27:51:18:7f:ff:da:
                    ed:02:d4:5f:84:fe:fb:d5:f4:9a:9a:d0:45:21:44:
                    00:b6:d4:dc:0c:5c:7f:bf:58:e9:66:4d:72:5e:d3:
                    c6:04:6a:21:87:f2:70:b6:97:79:d8:73:d0:3f:89:
                    79:ca:82:45:68:2c:97:16:5c:52:9c:7b:be:0b:77:
                    04:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CC:89:19:1B:80:16:0D:63:AB:E0:E8:8E:6D:66:74:AE:57:B9:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60a81c8b-8af9-30d5-9aa3-3fb7b5689c1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b230::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:87:39:21:15:3b:33:a4:ca:c9:3a:db:a2:0a:b9:7c:d8:ff:
         db:35:71:28:8a:8d:e3:38:5b:24:04:38:db:b2:b2:a1:2f:8a:
         1b:8c:4c:a9:b0:03:b6:b8:00:84:e2:f9:3d:4f:7e:82:fa:2f:
         f4:c7:d6:79:93:81:11:28:94:27:e1:b3:6a:d3:f5:a8:32:cd:
         ff:2e:21:15:ab:6e:bf:8c:07:07:e7:ee:a4:78:d8:70:33:3c:
         f0:95:70:63:96:1a:ca:24:fc:4e:72:f5:24:75:f2:dc:14:be:
         6d:cb:7a:b4:0b:11:34:cf:17:c8:a6:59:90:59:b6:37:1a:eb:
         6c:91:bb:68:7c:8c:9d:c8:a9:17:cc:91:3b:3d:f0:23:be:6d:
         97:42:dd:56:52:2a:23:71:57:ce:8b:71:b7:76:f4:f3:45:fc:
         12:f8:2e:e6:20:7a:6a:59:e4:4d:b5:6d:db:8f:2b:f8:52:67:
         6f:f4:ac:a9:55:b2:ac:46:7d:85:55:fd:ff:79:11:bc:68:ed:
         92:e3:45:4b:ee:2f:55:d3:84:5b:8b:1d:17:5a:ac:69:4b:7c:
         72:a4:3a:3c:c4:0c:65:47:b2:d9:e7:1b:88:94:d6:d4:a5:0a:
         48:35:1d:b1:fd:04:9f:23:1e:5f:9f:0e:8f:6c:f0:d5:e5:57:
         bc:c9:b6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:29 2024 by rpki-client on console-ams.rpki-client.org