Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70ce2b0c-45eb-32df-9492-73b866519972.roa
File:                     70ce2b0c-45eb-32df-9492-73b866519972.roa (raw, json)
Hash identifier:          kQI6+YEnAzC1FVkiuiWQQ1Jfo4DKyfwPzzGMzUyajII=
Subject key identifier:   E0:C9:35:C3:34:58:AC:01:62:65:1E:D5:E8:BB:BD:AC:0C:F0:AA:89
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBE81DD079D81FB64AB1C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70ce2b0c-45eb-32df-9492-73b866519972.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1015:f000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:e8:1d:d0:79:d8:1f:b6:4a:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=85d92f91-ddc2-40be-bd71-ef911ae9b906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:be:4b:af:b7:a0:c1:27:02:5b:e2:a3:76:24:
                    0f:7c:56:9e:8d:3c:53:c5:ac:13:2f:ea:eb:55:c2:
                    8c:cf:65:61:70:9d:57:1d:71:cd:9f:fe:45:71:30:
                    da:88:9f:16:af:ef:92:ac:7a:91:89:25:84:fc:c5:
                    ef:d5:a8:95:7d:ba:5b:eb:b8:20:d7:74:57:10:10:
                    82:06:f3:1a:9f:2c:bd:54:93:07:55:25:4d:46:f8:
                    87:8f:7d:ab:37:a6:11:a3:0a:ea:26:64:11:e2:8d:
                    a1:4e:1a:35:ff:ca:16:8a:62:77:86:44:37:1c:49:
                    a9:2a:4e:44:9a:4b:4c:a9:32:41:39:d4:e2:8a:31:
                    fe:b8:82:cc:11:9b:f3:5c:4a:1a:39:5e:32:40:0d:
                    ec:04:42:23:00:26:c3:ca:ee:c7:b9:9e:1c:e2:08:
                    59:c9:c3:0e:de:5c:35:5c:74:12:e4:a6:88:8f:2d:
                    38:5e:40:a6:8b:d5:a2:25:4b:1d:a7:18:5e:5a:f7:
                    73:ad:dc:9c:39:c3:ce:fb:59:41:eb:d6:bd:d3:92:
                    e6:4e:7c:bc:d5:00:41:a7:c2:ef:eb:b5:e3:34:18:
                    24:b7:7a:2f:12:9b:27:53:9f:24:88:ca:18:9f:d5:
                    74:d6:df:d1:bb:9f:3b:8e:8f:8c:d1:2d:47:09:9d:
                    8a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C9:35:C3:34:58:AC:01:62:65:1E:D5:E8:BB:BD:AC:0C:F0:AA:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70ce2b0c-45eb-32df-9492-73b866519972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:72:77:7b:d3:3c:c4:87:bc:69:76:34:4d:29:9a:d4:fb:a7:
         c4:99:a5:2b:86:38:3e:14:63:16:ed:cb:78:02:24:3c:71:9d:
         29:ec:03:be:6a:84:b8:ce:e6:3d:b1:c5:d7:e2:81:b0:92:96:
         ff:aa:b3:d7:98:a7:93:99:85:1b:c4:23:0b:88:5e:35:5f:b6:
         bf:68:1b:47:4a:6a:a5:54:3d:fc:03:c2:a4:ea:bf:de:80:da:
         a5:dc:00:0c:78:98:92:df:47:61:cb:ba:ec:a5:82:64:72:79:
         3b:b9:cb:eb:1c:ca:1c:75:3e:55:37:91:7f:49:c8:61:28:8c:
         3c:c0:53:f8:49:61:0a:b3:8d:ef:99:83:7e:37:00:41:97:e6:
         0e:3d:66:2c:c6:82:09:4e:2b:98:1f:1e:d1:ce:6f:1b:69:55:
         f9:6e:64:07:8a:18:40:e9:c1:96:a3:ce:4c:d6:04:68:97:8f:
         87:f5:34:00:18:43:c8:f6:48:3b:15:35:52:32:a5:32:f4:43:
         84:31:d6:4d:b5:19:26:27:f0:b5:86:4c:ac:22:c5:ca:de:ef:
         78:fb:51:ee:f1:14:c9:91:49:98:96:4c:c8:15:20:42:e1:da:
         f1:f2:f9:03:06:c4:f0:2b:54:a3:a2:48:e3:7a:a6:4e:54:09:
         98:e4:90:52
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeJ6+gd0HnYH7ZKscAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAxNDEzMDA0N1oXDTI1MDExMjE0MDA0N1owLzEtMCsGA1UEAxMk
ODVkOTJmOTEtZGRjMi00MGJlLWJkNzEtZWY5MTFhZTliOTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgb5Lr7egwScCW+KjdiQPfFaejTxTxawTL+rr
VcKMz2VhcJ1XHXHNn/5FcTDaiJ8Wr++SrHqRiSWE/MXv1aiVfbpb67gg13RXEBCC
BvManyy9VJMHVSVNRviHj32rN6YRowrqJmQR4o2hTho1/8oWimJ3hkQ3HEmpKk5E
mktMqTJBOdTiijH+uILMEZvzXEoaOV4yQA3sBEIjACbDyu7HuZ4c4ghZycMO3lw1
XHQS5KaIjy04XkCmi9WiJUsdpxheWvdzrdycOcPO+1lB69a905LmTny81QBBp8Lv
67XjNBgkt3ovEpsnU58kiMoYn9V01t/Ru587jo+M0S1HCZ2KfwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFODJNcM0WKwBYmUe1ei7vawM8KqJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzBjZTJiMGMtNDVlYi0z
MmRmLTk0OTItNzNiODY2NTE5OTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQFfAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHtyd3vTPMSHvGl2NE0pmtT7p8SZpSuGOD4UYxbty3gCJDxxnSns
A75qhLjO5j2xxdfigbCSlv+qs9eYp5OZhRvEIwuIXjVftr9oG0dKaqVUPfwDwqTq
v96A2qXcAAx4mJLfR2HLuuylgmRyeTu5y+scyhx1PlU3kX9JyGEojDzAU/hJYQqz
je+Zg343AEGX5g49ZizGgglOK5gfHtHObxtpVfluZAeKGEDpwZajzkzWBGiXj4f1
NAAYQ8j2SDsVNVIypTL0Q4Qx1k21GSYn8LWGTKwixcre73j7Ue7xFMmRSZiWTMgV
IELh2vHy+QMGxPArVKOiSON6pk5UCZjkkFI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:36 2024 by rpki-client on console-fra.rpki-client.org