Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/674f7f79-a2ad-305e-8db5-9253b2f8cce1.roa
File:                     674f7f79-a2ad-305e-8db5-9253b2f8cce1.roa (raw, json)
Hash identifier:          lv7lq69BgcPOJgEFfsBfYqctqmNFDd9z9kq/azY2gIg=
Subject key identifier:   39:44:8C:A6:CD:5B:FA:D2:66:BC:89:A4:3D:BC:D2:EE:E6:5C:D5:34
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA063F9C20BD28A5F87D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/674f7f79-a2ad-305e-8db5-9253b2f8cce1.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100d:b180::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:06:3f:9c:20:bd:28:a5:f8:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=64528b20-9481-4450-839f-29b889429795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:51:85:06:7f:61:cc:36:cc:52:f1:da:a7:34:
                    a5:6d:47:aa:d6:d7:98:43:8a:39:5d:20:03:a2:0d:
                    19:13:b4:ce:7b:7c:0f:54:be:b4:5c:cc:da:e4:78:
                    1c:95:e8:41:cb:22:a5:2c:a2:d8:d5:9e:38:e6:ef:
                    0d:ec:27:49:e0:35:2d:a7:2e:62:89:80:77:73:a4:
                    07:e1:9c:a5:97:2f:ce:e9:80:d3:cf:7d:c0:1a:7d:
                    ce:a7:7c:4a:2d:da:15:da:c6:59:10:de:41:48:a6:
                    b9:ec:53:c9:9b:8f:85:96:ea:d9:d2:68:19:a5:98:
                    99:7c:97:5f:a7:ca:c2:ad:fd:a8:59:87:3e:8b:67:
                    95:c2:ab:c3:30:b8:65:de:ee:bc:4f:d9:1f:4c:94:
                    c6:7c:4e:63:3a:fe:93:d9:a5:f0:b4:0f:dd:bf:46:
                    dc:fd:01:a1:5f:08:e2:27:61:6c:ab:0a:95:67:bc:
                    95:b3:f2:e4:be:a3:0d:dd:67:71:78:86:7e:4c:a0:
                    0c:8c:37:15:3d:26:ca:8b:c9:71:65:db:7b:93:87:
                    74:1a:6e:42:24:d3:61:b2:97:5c:27:b9:50:65:43:
                    b9:08:c3:f7:94:64:a0:f9:eb:b3:0a:84:aa:2b:0b:
                    e1:6d:3b:c9:13:0c:9f:e9:85:20:7d:cf:52:fd:9e:
                    26:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:44:8C:A6:CD:5B:FA:D2:66:BC:89:A4:3D:BC:D2:EE:E6:5C:D5:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/674f7f79-a2ad-305e-8db5-9253b2f8cce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b180::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:bd:1e:50:a4:8a:7e:c7:89:92:76:2e:96:70:e3:25:e8:7e:
         37:a1:59:bc:ac:f0:67:04:be:32:63:5c:18:cb:77:68:a8:b3:
         d7:36:42:98:36:9c:02:b1:31:0d:0a:56:f3:ff:b8:fd:32:e8:
         cf:3e:32:44:63:f6:6c:0b:d9:b0:39:7e:08:b4:37:2b:9a:0d:
         82:f9:b2:6d:82:1f:ed:8a:97:d4:f4:52:89:3a:8b:92:8b:76:
         84:58:e2:df:b5:85:42:f6:82:55:20:e1:aa:fc:5b:a8:e7:2f:
         e9:8e:0c:3c:5d:47:7e:08:5a:90:b2:72:d5:37:12:75:3b:e5:
         ba:98:4a:be:9e:5d:5a:8d:86:4b:1f:ef:b9:2f:d8:28:1a:c3:
         7b:2c:63:ee:01:b3:70:93:55:15:b8:49:0d:a4:e5:e6:af:7e:
         d0:7f:00:e0:4d:b5:4a:7d:0f:08:c6:24:49:38:bc:9d:48:95:
         ee:2a:42:4b:71:47:f4:af:a0:9f:90:42:96:f4:eb:0e:cb:2d:
         94:18:68:77:3a:83:10:0a:0d:e0:f6:6c:46:b9:02:6a:a3:e1:
         0f:03:ad:0f:18:23:d9:10:6e:82:60:ea:47:46:a3:46:10:12:
         a1:f2:8b:86:af:85:52:25:7e:ea:ad:72:c7:20:32:a3:46:22:
         42:d9:2b:b4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfEqgY/nCC9KKX4fQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk
NjQ1MjhiMjAtOTQ4MS00NDUwLTgzOWYtMjliODg5NDI5Nzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolGFBn9hzDbMUvHapzSlbUeq1teYQ4o5XSAD
og0ZE7TOe3wPVL60XMza5HgclehByyKlLKLY1Z445u8N7CdJ4DUtpy5iiYB3c6QH
4Zylly/O6YDTz33AGn3Op3xKLdoV2sZZEN5BSKa57FPJm4+FlurZ0mgZpZiZfJdf
p8rCrf2oWYc+i2eVwqvDMLhl3u68T9kfTJTGfE5jOv6T2aXwtA/dv0bc/QGhXwji
J2FsqwqVZ7yVs/LkvqMN3WdxeIZ+TKAMjDcVPSbKi8lxZdt7k4d0Gm5CJNNhspdc
J7lQZUO5CMP3lGSg+euzCoSqKwvhbTvJEwyf6YUgfc9S/Z4mswIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDlEjKbNW/rSZryJpD280u7mXNU0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjc0ZjdmNzktYTJhZC0z
MDVlLThkYjUtOTI1M2IyZjhjY2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDbGA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEy9HlCkin7HiZJ2LpZw4yXofjehWbys8GcEvjJjXBjLd2ios9c2
Qpg2nAKxMQ0KVvP/uP0y6M8+MkRj9mwL2bA5fgi0NyuaDYL5sm2CH+2Kl9T0Uok6
i5KLdoRY4t+1hUL2glUg4ar8W6jnL+mODDxdR34IWpCyctU3EnU75bqYSr6eXVqN
hksf77kv2Cgaw3ssY+4Bs3CTVRW4SQ2k5eavftB/AOBNtUp9DwjGJEk4vJ1Ile4q
QktxR/SvoJ+QQpb06w7LLZQYaHc6gxAKDeD2bEa5Amqj4Q8DrQ8YI9kQboJg6kdG
o0YQEqHyi4avhVIlfuqtcscgMqNGIkLZK7Q=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:30 2024 by rpki-client on console-ams.rpki-client.org