Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63c77d85-c2b9-33b1-ad98-f2b4861ef856.roa
File:                     63c77d85-c2b9-33b1-ad98-f2b4861ef856.roa (raw, json)
Hash identifier:          9d4VnrO/oHoQeaZ+h+CAv2MgqdBoutONMdFkZFHkq90=
Subject key identifier:   76:84:B2:FE:76:48:4B:86:CE:AB:6E:A5:6D:09:A7:66:21:5F:89:C7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA0F5DE80DA754980D97C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63c77d85-c2b9-33b1-ad98-f2b4861ef856.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100f:b0e0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:0f:5d:e8:0d:a7:54:98:0d:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=99b691d8-f1c5-4dfa-ad24-0014a0ecab18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b8:12:82:a4:5d:fa:5f:1c:a0:47:4f:68:a8:
                    ff:ca:1b:51:1e:4f:ad:d4:4d:5d:aa:d7:36:9c:3d:
                    b0:40:3a:d9:bf:18:2f:07:b5:ae:5b:99:ad:81:07:
                    8e:02:d8:6d:8a:5f:20:0c:78:34:12:dc:9e:20:66:
                    cc:c2:e8:5b:e1:35:b0:fc:7a:c6:b1:a4:7d:bd:14:
                    8a:ea:28:bd:9c:19:e7:24:5a:7c:28:44:71:c7:c4:
                    0e:21:27:44:d9:82:ca:ad:0c:c5:37:2f:be:38:99:
                    63:a2:23:cc:b5:69:19:12:a5:d0:b9:67:f6:41:2c:
                    da:e5:6f:bc:ee:56:52:3d:cf:6d:fd:0f:3e:81:f2:
                    b1:3d:7f:e1:26:c5:13:e5:2a:30:79:36:49:de:19:
                    b2:dc:a3:a7:ea:82:94:5f:cf:ea:e4:95:83:aa:0e:
                    61:dc:d8:5e:40:ee:66:b4:ea:7a:97:c2:aa:e2:be:
                    da:85:b9:d2:75:e3:7d:26:ff:fe:2a:94:a5:78:c1:
                    8b:d1:01:c9:1a:a5:cf:99:41:7e:5e:65:e7:28:9b:
                    55:b2:e1:8b:b9:fc:05:ef:a2:a0:1f:eb:79:0d:7b:
                    ba:34:1e:52:90:2c:a1:e7:ec:5c:ff:92:ec:09:3e:
                    3b:07:a1:00:9c:d9:44:d7:c9:a4:24:b3:b6:d0:25:
                    29:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:84:B2:FE:76:48:4B:86:CE:AB:6E:A5:6D:09:A7:66:21:5F:89:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63c77d85-c2b9-33b1-ad98-f2b4861ef856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b0e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:19:6b:f4:45:33:7f:bd:a2:e6:20:b5:86:c7:cd:85:d0:f8:
         77:c8:4c:ae:76:ff:cb:1e:f8:3b:ae:f7:b5:69:2b:59:73:9a:
         92:58:75:d7:de:86:3c:5a:25:6f:ad:74:26:3a:91:c3:87:ca:
         22:f6:00:ac:3b:83:7a:07:1e:1a:93:fa:fd:dd:07:c6:d2:ae:
         7d:cb:5a:ae:e6:2e:7c:95:a8:e3:e4:53:5a:a8:d9:48:e0:b1:
         33:44:64:15:c2:f6:c1:75:f1:01:0c:a0:10:65:d5:7f:3f:30:
         05:93:b9:f0:3f:7d:2a:bc:7e:59:d7:44:d0:9f:ff:51:6d:c4:
         78:7a:e0:ac:85:bb:c7:47:a9:63:2b:5b:02:98:c0:ca:4e:62:
         07:b5:65:7b:ee:5d:a7:b7:9f:16:7c:ed:76:45:0f:af:e2:10:
         84:d1:2a:72:c5:52:fd:3f:22:3c:a3:6e:a8:cb:4e:d4:3b:63:
         60:37:e9:e4:e0:2d:a1:26:f7:c9:a7:17:59:59:99:d7:98:b8:
         78:47:aa:9c:85:91:a7:b6:a5:d9:ff:2d:28:a7:8b:5d:62:05:
         d6:be:a7:07:38:05:79:1d:7a:a6:ec:9f:81:19:1d:c7:00:e2:
         33:15:6c:97:65:d0:7e:6b:14:74:53:af:ca:e1:93:26:66:a7:
         30:1d:74:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:30 2024 by rpki-client on console-ams.rpki-client.org