Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78a0895d-0320-3191-b0cd-abbde4b48a56.roa
File:                     78a0895d-0320-3191-b0cd-abbde4b48a56.roa (raw, json)
Hash identifier:          2vjpxZ+pVLcslT7TGPKKiclStN9O+GRaU5tsGvFnaHY=
Subject key identifier:   64:88:DC:A5:D3:81:C8:B6:89:63:D1:D4:A2:24:A5:21:81:08:30:00
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76ADFCD938B503DCE72140
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78a0895d-0320-3191-b0cd-abbde4b48a56.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1008:b1d0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:ad:fc:d9:38:b5:03:dc:e7:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=27ca5fd4-f667-4438-af19-a82ed6d2d501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2e:cd:e1:15:b8:68:27:88:ab:07:0a:68:49:
                    c4:20:2e:66:58:7f:e6:f8:37:16:ae:e5:d7:1e:35:
                    a9:65:41:c1:2d:ab:3c:a9:ec:61:80:8b:6e:7f:77:
                    ed:70:2f:63:9d:00:55:0c:f8:e2:64:06:f3:c9:fc:
                    58:f0:c0:4a:82:6c:84:9a:85:09:97:b0:c4:be:75:
                    b9:a7:64:1d:8c:89:31:9f:70:2e:37:5f:2e:ec:f9:
                    16:42:85:28:82:73:85:2f:b5:ef:20:a2:63:67:c1:
                    f1:d8:52:08:17:d7:82:4b:15:46:45:52:7d:5e:61:
                    ba:a6:b0:e3:fe:45:c7:c5:01:36:e4:8f:8c:7f:f0:
                    a6:e2:33:26:5a:00:b3:a4:b3:61:5b:c3:c1:b2:f2:
                    42:bc:4d:70:10:d0:09:0a:16:d7:7f:85:36:7c:51:
                    28:17:0f:c0:7b:12:7b:7c:09:a9:58:db:62:35:4b:
                    50:96:22:22:b6:21:f6:d4:d9:b7:9d:ad:27:a8:4f:
                    dd:b2:ee:29:c9:93:bb:93:27:9c:db:26:fe:08:dc:
                    df:f4:b4:78:74:18:93:2b:cb:7a:f2:99:3f:e2:22:
                    d7:54:1a:58:13:97:1b:9b:e9:07:3c:11:36:af:47:
                    9b:cb:e8:02:f6:45:27:bd:88:13:6c:fa:1c:58:c8:
                    46:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:88:DC:A5:D3:81:C8:B6:89:63:D1:D4:A2:24:A5:21:81:08:30:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78a0895d-0320-3191-b0cd-abbde4b48a56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:b1d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:e5:ed:a2:80:c4:fb:a3:a0:7e:26:57:fb:5e:fb:a8:53:c1:
         6d:32:90:24:05:14:bb:0f:12:65:02:2e:fc:be:67:43:1f:e3:
         9c:50:44:94:0b:d8:32:c2:37:0d:d8:92:bf:42:d5:a4:0c:8d:
         0e:31:a2:a7:e4:6d:14:3c:42:be:ff:94:7d:41:ae:02:e9:c4:
         bb:34:3f:06:ad:f5:53:4a:00:b6:59:0e:c2:d0:aa:e0:cb:ac:
         09:7b:42:a1:a5:95:a6:e9:20:f3:be:10:39:85:60:51:d0:0d:
         95:ca:56:9d:85:bc:02:14:2a:cd:ca:a0:2e:5f:44:23:29:01:
         f6:61:a0:c9:e2:47:4b:06:a8:4a:27:a6:54:95:01:a8:32:78:
         63:d4:c0:4b:61:6b:e2:2d:c9:d7:0b:94:9f:43:93:1d:3b:f1:
         3d:7d:49:06:d3:37:11:24:2a:a6:87:44:6d:d9:cf:84:c4:b8:
         68:d6:06:1b:d1:3d:b5:31:fb:ef:a9:97:93:d5:c0:d5:84:71:
         62:6e:5a:be:9e:cb:ee:a1:a2:f2:ca:0c:60:35:ad:c2:1e:70:
         04:ec:af:3d:35:21:53:3a:61:b9:17:85:b2:f2:c5:93:a5:3a:
         8b:70:dc:27:f1:cb:c4:10:3a:fb:0d:e3:fd:43:bd:a7:4a:a6:
         18:4f:2d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:58 2024 by rpki-client on console-fra.rpki-client.org