Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7cfadcd9-d53d-3692-ac05-fe5e5d9a6471.roa
File:                     7cfadcd9-d53d-3692-ac05-fe5e5d9a6471.roa (raw, json)
Hash identifier:          tqzjIvAMnw4hRdq9VjmbVo+qoFSQjOtkPf/PDbG1OD8=
Subject key identifier:   E6:3A:1F:05:86:CF:0D:B1:4E:86:39:33:2D:C3:56:65:8F:0A:FD:8B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4A9FD0155F28CB52CE4F130
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7cfadcd9-d53d-3692-ac05-fe5e5d9a6471.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100a:f100::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:a9:fd:01:55:f2:8c:b5:2c:e4:f1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=973a8680-2e9e-4ce4-a966-1967a6c104f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:94:d4:9d:00:a6:e9:e4:bc:a5:da:d2:dd:9f:
                    c4:88:e8:7e:ab:9b:1a:ae:94:c8:7a:7d:9f:e5:d2:
                    b2:d9:bc:4e:c9:ff:c7:2b:de:47:e4:a8:2d:e1:09:
                    96:d1:0e:7b:78:bc:e2:dd:36:46:33:76:d3:f2:8e:
                    5c:29:90:5d:e1:60:c0:4b:f4:27:17:c5:d7:98:35:
                    7d:4f:79:b4:fa:67:3f:bc:07:4d:ab:90:ce:d2:7f:
                    47:14:5d:cc:94:b8:14:b0:60:c6:6b:38:21:a0:02:
                    55:33:d9:c8:bf:c0:7a:c9:3a:af:de:b4:ef:fe:87:
                    16:de:76:a1:db:50:35:3d:94:bb:11:b1:e0:bd:d4:
                    49:90:a5:da:f3:25:d4:d9:9d:b5:18:9d:45:5d:3e:
                    a0:ec:3d:cd:52:b5:ad:84:3f:09:8a:6f:0f:91:21:
                    be:21:6e:91:00:86:54:29:bc:78:2d:69:af:8b:44:
                    a7:95:17:64:29:81:ef:30:51:48:53:38:85:4e:43:
                    e5:b8:70:ba:db:d8:45:d1:da:92:fc:db:7c:33:58:
                    12:36:63:d1:d8:9c:67:c8:41:dc:e0:4b:bf:ef:cb:
                    38:12:43:47:c6:85:ec:01:28:ea:12:f1:5b:77:b5:
                    5b:38:31:00:1b:29:e3:09:49:b5:7f:08:45:e8:48:
                    a4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3A:1F:05:86:CF:0D:B1:4E:86:39:33:2D:C3:56:65:8F:0A:FD:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7cfadcd9-d53d-3692-ac05-fe5e5d9a6471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:f100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:eb:a4:3a:25:b9:b5:37:8b:fd:b7:de:62:f6:77:31:46:c9:
         85:d5:7a:1a:45:34:7c:65:da:5a:18:07:d8:78:ed:34:fb:cc:
         ed:2d:38:4c:d8:6d:64:f8:1d:c9:69:db:fa:cc:40:f3:75:f6:
         ca:93:a2:92:bd:ca:09:be:aa:3a:f6:5e:52:c3:e0:17:73:b7:
         27:6c:bb:c6:ed:62:49:72:e5:96:61:35:78:77:3e:0c:91:df:
         e3:72:7e:4f:2c:2c:b4:f0:7d:28:69:79:99:57:ec:b0:e8:18:
         f6:76:b8:aa:65:f5:7e:56:0b:3f:ad:bf:c2:85:05:0e:53:24:
         94:f5:ca:6f:c6:91:d2:f0:44:79:b0:17:69:1a:c6:37:f2:0f:
         6f:db:83:62:74:14:66:30:18:3b:60:83:b2:f2:ee:31:b2:1c:
         db:da:af:e5:86:28:69:fb:64:bf:a4:05:32:6a:f2:f7:49:25:
         9e:1f:81:2e:02:0d:20:70:51:f0:50:ea:18:f3:4a:cf:66:04:
         31:8a:fe:b1:ca:9e:0f:3b:ec:83:a1:30:13:39:08:ab:35:41:
         fd:18:85:05:9a:44:0f:29:3f:d7:cc:4f:d9:dc:c8:c4:20:1e:
         5b:c4:8c:7c:87:3c:a8:ae:e0:a3:ab:5d:f8:62:8c:55:46:1b:
         bb:e1:18:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:39 2024 by rpki-client on console-fra.rpki-client.org