Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/729e04e9-be8d-3086-9a98-db1b2c6944c4.roa
File:                     729e04e9-be8d-3086-9a98-db1b2c6944c4.roa (raw, json)
Hash identifier:          8BzA1iSnDUXEOQTZ1KosQN6QOElmyCK17RimeK8d+c8=
Subject key identifier:   7D:F6:C2:BF:5C:B8:0F:ED:CD:6F:6A:CB:0B:4A:A3:4B:53:66:D9:DA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBDB01B2FC88DA1152C300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/729e04e9-be8d-3086-9a98-db1b2c6944c4.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1011:b110::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:db:01:b2:fc:88:da:11:52:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=0e6242e5-5491-47a4-9cbf-83f3b2ffed1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4b:a7:41:2f:df:e7:a4:ab:19:00:8f:6f:c8:
                    03:81:bd:8a:94:0e:9f:77:da:a9:5e:48:a1:2c:95:
                    ee:57:9e:30:35:1c:70:4c:66:bc:07:ad:99:dc:00:
                    bd:dd:e9:12:44:96:bd:2c:3f:b1:33:d8:6b:0c:8b:
                    a4:6b:aa:97:02:dc:c3:ee:78:a8:ab:3b:ae:9f:55:
                    13:f5:14:ac:e5:01:01:cf:75:61:8c:dc:ed:fe:aa:
                    3e:df:31:ac:a7:c4:78:29:52:0c:93:d7:68:3a:d7:
                    24:c7:e1:24:f3:05:a5:ba:de:0b:85:43:ef:f1:dd:
                    bb:14:7d:4d:30:a3:94:33:cd:fb:82:44:31:10:2b:
                    b1:1e:b8:2b:b8:b1:72:3a:96:9f:54:ca:72:97:9f:
                    df:02:67:a0:a7:c0:c6:1e:35:3c:c8:3d:82:bc:82:
                    a6:ab:40:ce:fb:2c:f8:73:59:bb:aa:ea:e9:5c:d0:
                    c3:bc:32:1b:64:5c:f9:88:e2:d0:0e:bb:06:30:5d:
                    bf:48:22:4f:0b:94:13:be:74:25:0e:67:2c:5e:b7:
                    5b:0a:c9:ba:00:fe:77:14:43:22:80:32:59:37:d2:
                    26:1c:f6:35:ea:ca:ed:0c:f0:56:55:e3:92:af:94:
                    89:52:54:d5:d9:38:bf:1c:14:77:23:bd:34:fd:9f:
                    8a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F6:C2:BF:5C:B8:0F:ED:CD:6F:6A:CB:0B:4A:A3:4B:53:66:D9:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/729e04e9-be8d-3086-9a98-db1b2c6944c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:37:4e:36:cf:86:01:c0:c0:03:cc:52:e0:27:1c:38:a7:46:
         ae:15:4a:66:e7:54:74:a2:13:fe:9a:e0:60:b3:51:6e:4c:6b:
         7e:03:d7:2b:4d:ae:2b:bf:0c:49:0f:29:10:76:9c:89:81:7d:
         9a:8d:56:a1:1b:2f:02:2c:53:55:79:2e:fd:1f:74:7b:ea:b0:
         e6:1f:eb:3e:c3:b9:b6:f0:a6:ef:ed:fb:d4:b5:ec:3b:42:78:
         f7:e2:13:f8:8c:7e:99:fa:80:20:db:7a:3d:6a:c0:e7:0c:48:
         9a:7b:e4:8f:da:4e:c2:ff:04:a1:00:d7:53:7e:c7:a2:7d:8e:
         37:6c:35:62:de:c7:0d:da:37:a1:23:b2:64:24:aa:b4:8f:c7:
         69:f3:31:a0:72:b9:d5:76:74:17:fe:cd:70:04:fc:72:cb:f6:
         53:7e:b1:2a:0b:bb:ef:e5:8a:5d:27:b8:c7:83:cb:7d:a5:b6:
         c5:9e:13:2e:1d:5b:80:b1:07:1a:25:15:78:23:3e:ac:36:ef:
         5e:42:bb:9e:97:4a:69:b4:88:51:6d:77:07:d2:c4:b9:c9:c1:
         64:79:8d:6a:f9:36:bb:16:65:05:66:76:f4:3b:3c:0d:52:23:
         4c:99:a1:f5:a8:20:75:4a:2e:1b:f4:75:1f:22:3c:bd:3a:7e:
         53:04:6c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:55 2024 by rpki-client on console-fra.rpki-client.org