Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/818b5b2b-5b28-3677-8d12-1872475f49a8.roa
File:                     818b5b2b-5b28-3677-8d12-1872475f49a8.roa (raw, json)
Hash identifier:          RkbVBXjaMCuU6vBzOBUbBu4TcROCvYQ1v82EkGq+m94=
Subject key identifier:   05:DF:E8:2F:05:44:84:90:8B:0C:E6:44:15:A1:A6:A8:72:42:92:CB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846E3E1AA2041F4600FC2E083C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/818b5b2b-5b28-3677-8d12-1872475f49a8.roa
Signing time:             Fri 16 Aug 2024 01:36:12 +0000
ROA not before:           Fri 16 Aug 2024 01:36:12 +0000
ROA not after:            Thu 14 Nov 2024 02:36:12 +0000
asID:                     6167
IP address blocks:        2600:100b:b000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:e1:aa:20:41:f4:60:0f:c2:e0:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:36:12 2024 GMT
            Not After : Nov 14 02:36:12 2024 GMT
        Subject: CN=d6ceed6a-d5ea-4d33-94e3-96126822398b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6f:26:2d:fc:41:34:e2:d4:e3:a5:52:7e:49:
                    6b:51:a3:a8:ca:eb:0d:03:07:e6:ad:c6:f0:fb:f3:
                    ff:7f:7e:b2:f4:8a:1e:e6:90:dc:77:bb:0c:53:5e:
                    76:c4:6b:9e:c0:ce:62:31:00:2d:5b:1b:1e:d3:85:
                    21:2e:04:90:97:cc:29:bb:a8:40:97:5a:c0:be:3d:
                    ed:0d:97:b6:28:b5:29:cc:3a:30:ee:46:77:21:e6:
                    33:49:5d:8d:f0:6d:a0:30:29:6a:48:9f:b8:fa:f7:
                    00:7c:77:a7:32:1e:22:0f:e4:e4:7b:92:68:9b:00:
                    f5:08:b9:68:78:fe:b5:27:25:2d:af:ed:2a:0d:08:
                    f6:a4:23:89:ec:8f:08:1d:63:83:06:f2:e2:1e:9b:
                    41:b7:b6:8b:4c:31:60:74:92:f1:69:7f:f2:f2:44:
                    56:4d:7c:e5:d7:51:cb:94:d0:49:08:ae:a7:2f:50:
                    e6:ca:9a:37:1a:2b:95:e1:09:49:7c:2a:1a:d3:bf:
                    c5:1c:83:84:f9:af:d6:19:ae:4f:22:c2:b3:1f:7d:
                    81:7d:b0:c3:0c:df:10:fb:20:72:ef:75:cd:e9:81:
                    b1:67:da:7d:2a:9e:75:38:b7:79:90:9c:a1:68:b1:
                    e2:83:80:f9:76:8b:6c:e4:7b:28:33:49:7d:39:1f:
                    22:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DF:E8:2F:05:44:84:90:8B:0C:E6:44:15:A1:A6:A8:72:42:92:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/818b5b2b-5b28-3677-8d12-1872475f49a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:e5:6f:1f:de:ce:5a:70:b9:47:8a:2b:bb:6c:9f:94:4e:1d:
         ab:98:f0:2a:38:d7:31:09:58:0d:c8:e1:3a:38:bb:12:50:f2:
         17:93:33:f4:db:6a:7c:0b:d8:78:84:0f:9e:93:fc:fb:c4:76:
         10:cb:b2:0f:86:84:ff:e9:f1:fd:2a:eb:a8:64:67:33:62:28:
         34:a2:b0:5d:d1:c3:87:c8:28:96:83:ff:8f:d7:41:14:54:47:
         2d:70:54:b4:e7:34:9e:09:07:c3:20:0d:29:d4:f9:03:f8:32:
         e1:a9:e8:bc:bc:be:62:50:f2:34:46:f3:a1:de:db:54:00:53:
         6f:65:bd:c6:10:2c:dd:c8:9f:e3:12:e9:a9:be:8c:cf:9b:ef:
         c5:38:72:74:5e:0e:1a:b8:43:42:17:e7:6a:75:35:e0:47:be:
         6a:3d:4e:9d:ee:5b:19:a1:e9:b5:ad:0b:62:b7:5b:4f:32:af:
         1e:a3:ab:31:c6:0f:17:f3:5c:f7:6b:c2:00:8c:5c:c3:fb:0f:
         f4:da:84:bf:91:94:bd:82:c0:19:48:ec:41:ad:fd:d4:ce:52:
         46:86:36:da:96:e4:6c:3a:0d:8c:48:74:bd:fc:8e:9b:0b:b2:
         28:ff:bd:82:48:c6:38:fc:82:bd:78:79:03:33:d9:31:c8:65:
         67:00:f3:11
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEbj4aogQfRgD8Lgg8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDgxNjAxMzYxMloXDTI0MTExNDAyMzYxMlowLzEtMCsGA1UEAxMk
ZDZjZWVkNmEtZDVlYS00ZDMzLTk0ZTMtOTYxMjY4MjIzOThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW8mLfxBNOLU46VSfklrUaOoyusNAwfmrcbw
+/P/f36y9Ioe5pDcd7sMU152xGuewM5iMQAtWxse04UhLgSQl8wpu6hAl1rAvj3t
DZe2KLUpzDow7kZ3IeYzSV2N8G2gMClqSJ+4+vcAfHenMh4iD+Tke5JomwD1CLlo
eP61JyUtr+0qDQj2pCOJ7I8IHWODBvLiHptBt7aLTDFgdJLxaX/y8kRWTXzl11HL
lNBJCK6nL1Dmypo3GiuV4QlJfCoa07/FHIOE+a/WGa5PIsKzH32BfbDDDN8Q+yBy
73XN6YGxZ9p9Kp51OLd5kJyhaLHig4D5dots5HsoM0l9OR8iiwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAXf6C8FRISQiwzmRBWhpqhyQpLLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODE4YjViMmItNWIyOC0z
Njc3LThkMTItMTg3MjQ3NWY0OWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQC7AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJDlbx/ezlpwuUeKK7tsn5ROHauY8Co41zEJWA3I4To4uxJQ8heT
M/TbanwL2HiED56T/PvEdhDLsg+GhP/p8f0q66hkZzNiKDSisF3Rw4fIKJaD/4/X
QRRURy1wVLTnNJ4JB8MgDSnU+QP4MuGp6Ly8vmJQ8jRG86He21QAU29lvcYQLN3I
n+MS6am+jM+b78U4cnReDhq4Q0IX52p1NeBHvmo9Tp3uWxmh6bWtC2K3W08yrx6j
qzHGDxfzXPdrwgCMXMP7D/TahL+RlL2CwBlI7EGt/dTOUkaGNtqW5Gw6DYxIdL38
jpsLsij/vYJIxjj8gr14eQMz2THIZWcA8xE=
-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:42 2024 by rpki-client on console-ams.rpki-client.org