Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78616c78-08df-3de2-92c2-15fb98ca7189.roa
File:                     78616c78-08df-3de2-92c2-15fb98ca7189.roa (raw, json)
Hash identifier:          kpCd4QeJ9nBW0HLQklyLb4On/2/hkdkUlcijVXt/h74=
Subject key identifier:   24:54:61:87:75:CF:B1:ED:B6:97:38:B3:14:13:D2:0A:2A:B9:5E:1B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBEB8F446F9C152B275880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78616c78-08df-3de2-92c2-15fb98ca7189.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1017:b100::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:eb:8f:44:6f:9c:15:2b:27:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=a3d53874-cb85-490f-a444-e43a2b18a5cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c9:9a:c0:37:8a:ae:b4:66:4d:4f:c9:f8:c8:
                    b9:d9:63:87:6c:3e:f9:ac:c6:e7:23:f8:06:92:89:
                    be:71:7c:29:13:f5:6e:74:b8:42:8e:8c:c1:94:bd:
                    b4:15:07:23:c3:4e:49:48:3d:55:02:79:da:60:71:
                    fc:a1:f9:af:62:04:90:ef:d6:f9:8b:a6:6f:31:ec:
                    47:d8:79:9a:40:bd:27:1f:81:c0:05:f4:25:1a:da:
                    c5:86:99:82:ba:82:11:7a:00:5b:be:a0:80:9a:28:
                    03:fc:5d:85:0d:95:f9:88:bc:3d:bf:98:b5:b4:68:
                    77:29:f4:f6:a8:a4:0f:57:97:b4:39:af:02:0f:57:
                    50:95:e8:ba:dd:89:b9:e9:06:d8:8d:5f:38:ee:1f:
                    d8:27:9a:67:59:fa:78:02:82:07:8c:4d:99:72:33:
                    97:b4:9a:ff:29:31:4d:b2:fd:f6:ce:dc:88:73:f5:
                    69:20:bf:1b:eb:5d:7a:a0:7c:b9:6b:09:8e:d1:ff:
                    cc:6b:04:d7:ef:87:ae:b5:bf:78:bd:9b:d8:fd:10:
                    2a:b9:03:f9:73:61:b3:30:39:78:ae:3f:56:f7:b6:
                    85:02:ca:ce:28:fc:7d:29:d4:6d:5d:75:7a:6d:15:
                    c6:1a:b5:71:ab:d5:a5:6e:79:9a:6a:29:a6:11:2f:
                    07:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:54:61:87:75:CF:B1:ED:B6:97:38:B3:14:13:D2:0A:2A:B9:5E:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78616c78-08df-3de2-92c2-15fb98ca7189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:b100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:df:60:5f:c4:b5:2f:af:bf:bb:ee:af:02:1f:99:36:ea:67:
         46:1d:e3:1b:1c:d7:95:9d:af:e7:ed:cd:c6:38:88:28:46:b0:
         4c:74:33:80:2e:d1:39:73:19:35:e9:45:3f:ce:0f:4a:d7:49:
         7d:81:47:d8:55:a3:f3:fe:be:20:09:5b:4f:38:dd:62:fa:7e:
         e0:c7:f5:b5:ba:e8:34:1a:ed:d8:94:dd:f4:14:a6:e6:91:1d:
         07:0f:92:56:20:da:7c:d2:27:08:98:31:a4:25:94:81:4b:f2:
         b1:68:1a:73:dd:73:95:2e:b7:65:f9:4c:30:74:31:f5:79:29:
         f2:1d:60:31:01:79:60:d4:d4:11:24:3d:46:c2:75:e6:e9:a5:
         fd:b7:4a:e1:09:d0:09:3c:df:53:86:73:ed:26:64:7a:14:ed:
         50:e1:f1:c6:c2:46:ef:52:52:76:e8:65:75:db:91:8f:7a:83:
         e5:dd:5c:0e:c0:51:9c:66:8c:f9:a3:18:1f:95:be:26:98:34:
         b3:7d:32:4d:2f:2d:9e:b6:7f:30:2c:a7:86:6b:eb:ca:4c:2f:
         ba:b6:36:78:1c:59:a5:22:6e:f7:23:05:99:f5:9f:5f:5d:d4:
         9c:05:80:2a:bc:55:2e:3c:37:af:5b:52:5e:6a:5d:be:a7:51:
         b6:d1:87:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:38 2024 by rpki-client on console-ams.rpki-client.org