Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67264fc2-6e84-376c-ad3b-785b39970b6f.roa
File:                     67264fc2-6e84-376c-ad3b-785b39970b6f.roa (raw, json)
Hash identifier:          7DckiBV1oHDYCu6v9orPuaNbrgFvBUH9uCTKSVvttUI=
Subject key identifier:   BC:4B:27:25:1B:D6:5A:51:38:8D:A2:A2:AD:E6:93:D8:14:AF:24:3B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA00C6D547A312286DEA40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67264fc2-6e84-376c-ad3b-785b39970b6f.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100c:b0b0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:00:c6:d5:47:a3:12:28:6d:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=af4e1fcd-618d-464f-a003-23bfa99631cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:12:7a:1e:32:39:d8:b8:20:6e:6c:db:b8:e5:
                    69:1b:b2:81:48:cc:f9:b5:40:c3:2b:12:b0:c6:73:
                    5d:7d:7e:45:fc:3b:9d:f5:36:43:6c:02:94:b2:bf:
                    d4:59:16:66:94:31:dc:d7:7d:1b:29:57:f1:5e:32:
                    41:7f:37:2c:61:0a:ec:93:a0:87:d2:29:04:ae:93:
                    69:45:77:cc:fe:36:e3:71:77:68:17:a6:fb:51:34:
                    60:42:3e:1a:3e:5b:08:02:b3:e9:39:da:5f:3c:f6:
                    b7:be:ea:a8:76:65:e4:21:6d:f7:31:9d:a0:49:1b:
                    0f:87:fb:29:b8:ca:76:2c:c7:93:e5:dd:42:ca:0a:
                    83:13:46:9b:26:cb:6f:9c:2b:0a:75:59:bf:54:e7:
                    92:7e:4e:ae:53:8d:4d:53:80:c9:52:5b:5e:3d:64:
                    a3:da:53:ce:6d:36:c3:44:d1:36:a9:2c:ef:89:97:
                    6e:80:4d:41:37:8c:7e:b9:02:a3:49:a1:51:f8:19:
                    75:a6:a1:cc:2a:44:a8:b5:38:1e:f8:38:a4:96:de:
                    76:56:d1:3b:59:ec:01:14:c2:1e:22:5e:d9:1a:3b:
                    f2:ec:90:a4:1d:be:a8:dd:35:31:d2:53:cd:c3:ef:
                    1b:04:d4:96:27:9e:fa:fb:bd:c4:e5:69:60:ba:40:
                    93:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4B:27:25:1B:D6:5A:51:38:8D:A2:A2:AD:E6:93:D8:14:AF:24:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67264fc2-6e84-376c-ad3b-785b39970b6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b0b0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:63:c2:1e:b9:23:38:6e:34:ad:cd:a8:3d:77:1b:f5:c5:81:
         51:76:56:4e:29:b8:52:5f:f5:b4:63:81:9d:b3:54:a5:45:ad:
         6b:e4:f3:63:cc:bb:69:56:fa:24:3f:bb:0d:a2:ae:19:de:24:
         30:1e:d8:43:c5:f7:8a:b7:a2:35:8b:05:c6:71:02:44:92:ca:
         22:14:86:3c:b8:bc:05:fd:03:bf:31:f8:6a:b5:2b:fc:e1:df:
         32:0a:a8:d3:a9:65:6c:d1:d1:8d:73:e6:48:77:49:75:a7:a5:
         cc:01:85:c6:56:87:35:cc:82:75:c2:5d:6e:d8:a8:b3:a2:2d:
         e5:69:87:bc:9e:01:a8:fa:ea:02:c4:35:00:65:80:a0:35:39:
         ab:f7:7b:27:15:cb:b1:96:59:a5:84:ab:1d:67:8e:60:80:85:
         1e:ca:81:ab:b6:4f:a0:b4:c9:5a:ed:3e:46:ba:c1:fe:16:51:
         7f:67:bd:d7:fc:82:7e:6b:d2:97:9b:a1:13:82:af:ad:65:02:
         09:bf:f3:69:90:2c:b0:a7:d2:fb:f4:56:b9:86:06:da:3e:59:
         51:29:f8:5e:b7:a8:b2:80:2a:f1:b0:fb:72:bd:8c:df:0f:2b:
         84:90:b4:cb:e7:d1:70:bd:a5:d9:f7:a0:7f:8a:da:c4:e0:97:
         55:33:77:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:35 2024 by rpki-client on console-fra.rpki-client.org