Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70ac277b-4a0e-3f37-946b-ea41efe416ae.roa
File:                     70ac277b-4a0e-3f37-946b-ea41efe416ae.roa (raw, json)
Hash identifier:          Zdnofzk5zgPBwwbimAluqXUNqJKSqcOMvJEyNKX2VHA=
Subject key identifier:   85:24:1E:79:EC:B7:72:77:5E:1E:C1:22:32:09:56:E0:3B:D0:ED:9F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA08E65201FF9B6DBDE468
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70ac277b-4a0e-3f37-946b-ea41efe416ae.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100e:a000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:08:e6:52:01:ff:9b:6d:bd:e4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=73acbd96-d5a3-4bcf-a431-a59dd5a82938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:14:3c:90:09:76:74:38:71:b9:62:8f:b0:93:
                    61:7e:d7:6a:c8:2e:8b:d0:46:81:30:05:81:26:f4:
                    b5:57:f7:bb:00:9b:e2:31:f2:87:77:95:3f:31:f9:
                    1d:7f:e4:84:a6:33:18:0b:f5:51:79:2a:9d:8f:0d:
                    b8:d3:0d:cd:4b:49:24:21:fb:58:4f:a7:8b:5d:f2:
                    71:c1:88:d4:a9:58:a9:81:17:42:7a:53:69:87:8d:
                    16:2c:9c:e0:41:06:d8:85:ff:9a:b1:e6:55:99:ff:
                    f8:a2:62:bb:96:70:0f:73:39:e4:30:ec:51:a0:71:
                    d1:02:df:58:a8:82:fc:ef:e6:73:a8:3d:69:86:39:
                    c1:e6:3e:82:17:ee:74:34:06:5d:78:a4:0e:1e:7d:
                    09:eb:8c:20:eb:08:ae:5f:ed:82:44:5e:f1:f0:e3:
                    a3:88:5c:75:65:44:e3:6e:ea:5d:fb:87:28:82:0a:
                    b1:47:c0:e1:b5:06:15:e7:19:6c:e7:ed:01:b1:20:
                    50:4e:e2:74:86:0a:4d:6a:9d:64:bb:ca:8b:3f:07:
                    92:71:04:1c:e3:6d:ce:b8:7b:45:bb:3e:27:76:41:
                    c6:81:ad:75:3e:38:23:9f:4b:20:c0:10:07:4c:0f:
                    06:c8:9e:c6:5b:1f:d5:fe:36:32:74:d3:cd:57:ba:
                    17:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:24:1E:79:EC:B7:72:77:5E:1E:C1:22:32:09:56:E0:3B:D0:ED:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70ac277b-4a0e-3f37-946b-ea41efe416ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:d7:1d:e1:66:36:65:92:3e:87:cf:6e:f8:97:90:e2:03:d9:
         9a:7f:61:45:b7:66:28:3d:e9:5c:67:df:f0:cf:d8:56:7e:00:
         9e:d9:01:27:b1:9b:e1:7c:25:93:86:6e:4b:65:41:09:2a:81:
         c0:8d:65:68:47:c5:3e:7a:75:88:82:f8:56:d0:83:4f:a9:6a:
         74:18:3f:87:7d:15:7c:03:7a:42:f3:aa:50:9b:67:cd:b2:c0:
         ff:2e:8e:e7:18:be:ca:0d:2f:f5:13:b1:04:a2:de:80:4b:f6:
         3f:2d:48:4a:d2:b7:91:fa:19:e7:cc:a5:4d:d9:0c:16:55:9f:
         8f:f8:f5:a5:92:4a:91:fc:8b:05:77:e8:08:ea:06:62:ce:59:
         f3:ec:f6:a8:20:12:b2:18:7e:7f:48:c5:13:10:50:c5:08:ca:
         96:66:ef:e0:7f:de:e6:42:48:36:58:7e:59:8c:3d:62:51:a0:
         96:05:01:01:7e:31:93:55:58:b9:90:80:c6:5f:0b:18:a3:ff:
         2b:21:35:b6:b3:d7:4f:74:c4:f5:13:82:91:ce:6e:77:cc:8d:
         c4:5a:1c:83:90:7c:23:84:c8:ee:ca:ba:77:8c:c3:fb:d7:12:
         35:d3:89:41:60:81:fe:af:b0:32:7f:07:91:f5:9a:8c:44:01:
         f7:2e:09:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:34 2024 by rpki-client on console-ams.rpki-client.org