Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72e2eb2c-a0bd-30fa-8fbb-521180fa348a.roa
File:                     72e2eb2c-a0bd-30fa-8fbb-521180fa348a.roa (raw, json)
Hash identifier:          wBw63uQGMAywbQFoUjih+tzpb92mHBsCLZUqgv1cPmo=
Subject key identifier:   83:32:C8:73:92:76:71:7A:CE:1B:DC:11:D1:ED:5A:5E:CF:4B:D2:7B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA0C8071049897ED120DC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72e2eb2c-a0bd-30fa-8fbb-521180fa348a.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100e:b310::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:0c:80:71:04:98:97:ed:12:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=cc4dfef5-0819-4567-b019-9a08b0b947e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:a6:d0:57:2c:ce:7b:55:7b:15:15:38:be:
                    17:a2:a4:e8:d0:ff:29:18:a1:02:4e:17:51:fa:6e:
                    7e:85:65:bc:7a:80:b5:08:3a:05:c5:70:89:46:bd:
                    62:d6:be:a3:fa:33:45:de:ca:a7:19:53:f3:ca:4a:
                    4b:43:95:ca:59:02:cd:bd:3f:44:ba:df:01:67:4b:
                    e1:b4:f0:6f:91:ee:d6:4f:5a:dc:34:c7:f0:18:d3:
                    70:4c:88:6e:a0:d7:8d:1d:02:67:71:f7:a1:bd:69:
                    dc:40:8e:74:24:d8:04:fb:33:e8:5b:8b:84:56:1d:
                    48:01:82:23:a1:f8:ee:19:62:54:a9:0c:60:47:52:
                    3a:ec:86:ec:91:84:f2:b1:70:a7:94:2d:30:c0:8d:
                    e0:57:3f:12:23:0a:48:84:b3:c8:a0:fe:c1:8f:57:
                    93:94:3b:c5:3a:6d:2c:a8:72:71:bd:8e:f7:8e:5b:
                    37:ed:03:76:4a:c6:77:6f:59:ad:f2:02:fb:21:d7:
                    62:31:e8:12:22:46:2c:68:19:de:a9:66:2c:cf:87:
                    22:b5:27:42:da:ea:2d:95:fa:21:63:58:da:df:67:
                    5c:70:64:d9:d5:09:95:70:2c:d7:7c:7f:bc:4f:f2:
                    c3:4f:6e:22:8b:56:21:b8:bd:e8:28:69:05:e9:c2:
                    32:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:32:C8:73:92:76:71:7A:CE:1B:DC:11:D1:ED:5A:5E:CF:4B:D2:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72e2eb2c-a0bd-30fa-8fbb-521180fa348a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b310::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:6c:ec:5c:0a:d8:65:00:60:8a:61:e7:f2:78:c7:56:33:c9:
         93:ab:2b:c2:66:8d:96:61:0f:37:0c:b2:ac:32:b0:22:f0:87:
         37:a2:77:21:9a:4d:c0:44:9c:37:43:e8:11:5e:d2:5b:96:92:
         2e:8b:12:d3:9a:1a:8a:fb:3e:d7:3f:3e:2a:bf:4f:95:0b:f6:
         d8:6d:5d:f1:7b:84:1c:61:be:12:69:7d:af:b8:93:7b:8c:ba:
         57:d8:8b:08:60:43:2a:f2:89:8c:65:39:ba:5d:dc:68:8d:28:
         24:45:b3:14:f5:1e:21:62:ed:5f:be:20:46:4f:ab:c1:7b:19:
         9d:52:ff:51:b7:27:7b:a5:26:ac:ac:d3:dd:dc:18:ad:92:ab:
         43:64:3e:7e:1e:45:bc:a1:9a:9a:07:13:00:d7:68:66:0c:da:
         6b:e4:9e:51:c6:2d:69:04:11:89:25:7b:64:57:cc:c0:7e:bc:
         ef:92:1c:0b:f1:0a:b8:d3:ff:1e:37:06:20:8d:2e:cf:c2:f3:
         8b:ea:ff:87:f3:03:bd:a3:d4:40:0c:99:6a:8b:06:14:ac:2e:
         9a:d2:44:eb:9b:3b:f5:1b:a4:5d:9b:84:06:85:ba:01:d7:f8:
         c9:d7:51:83:6c:a2:3c:e9:b3:a5:00:d9:9b:1a:b4:36:f0:0d:
         32:b5:a3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:37 2024 by rpki-client on console-fra.rpki-client.org