Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8611aab0-bb32-3277-b710-0e48115a9d54.roa
File:                     8611aab0-bb32-3277-b710-0e48115a9d54.roa (raw, json)
Hash identifier:          23XWyBDNFjxfgnA1IXjEKnAHunNYtCu9wGdyZFh51c0=
Subject key identifier:   2A:6F:A4:C6:DD:60:C5:AD:CE:4C:18:D3:F6:88:0C:22:95:B3:BF:C1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA0EC7C12896C0E9F72480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8611aab0-bb32-3277-b710-0e48115a9d54.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100f:b030::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:0e:c7:c1:28:96:c0:e9:f7:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=6ab19c31-387a-43be-95cb-6ce380d5b7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:98:73:ca:38:b6:c0:03:4e:f6:31:5d:bf:9e:
                    ab:e7:1c:7a:af:21:81:b2:ef:dd:d5:24:56:83:84:
                    ca:f2:ad:a1:5f:ba:57:9a:3f:52:3e:55:c3:25:84:
                    a2:23:b3:14:e7:a4:4e:3e:cb:98:78:77:c6:84:56:
                    eb:d0:62:8a:64:2a:c1:e5:d0:2c:8e:58:9b:e9:bb:
                    c5:2a:89:5e:c2:4d:4d:f2:9d:c3:8b:1f:79:1c:bf:
                    08:6e:f3:01:86:b2:b2:db:bf:f7:b8:90:b5:1c:d3:
                    d9:51:2c:76:ab:aa:dc:ec:71:57:58:42:aa:8d:fb:
                    d2:ca:dc:b4:2b:ef:4c:bf:34:26:b8:ff:49:0e:c8:
                    b1:33:28:ef:ce:9d:48:0a:3b:a1:2f:16:80:5f:32:
                    82:b3:05:49:0e:17:a0:72:42:4c:39:b7:78:b0:ff:
                    f8:3a:96:2b:e0:df:14:fa:10:e2:30:de:87:11:6c:
                    7a:1d:50:85:3e:3a:b7:a8:95:38:d1:24:6d:67:bb:
                    2c:5d:29:d9:f9:be:6d:70:bc:7e:e9:de:ff:97:00:
                    ba:0e:57:e7:85:a3:f4:34:7b:e9:2f:6b:b2:3d:a4:
                    91:2d:1f:8f:82:46:f4:a7:3b:79:99:7f:26:17:83:
                    39:b3:87:a4:4d:d3:0b:0f:ed:7d:61:a3:5f:e1:ef:
                    bb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6F:A4:C6:DD:60:C5:AD:CE:4C:18:D3:F6:88:0C:22:95:B3:BF:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8611aab0-bb32-3277-b710-0e48115a9d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:e6:56:99:98:46:57:76:31:c2:a1:ac:07:b2:c0:12:1f:ef:
         b8:70:54:cb:c2:72:6c:1f:d0:0b:d8:29:24:43:1d:6b:05:b8:
         42:79:03:97:03:b1:92:f2:56:1c:6a:af:7a:22:88:71:0f:c2:
         e3:e7:ce:86:bd:73:13:c4:de:0f:e8:9c:13:85:cd:4b:b1:25:
         d2:bb:0c:31:ef:c2:e0:a1:c2:33:8f:1e:d3:c0:8f:67:b2:2c:
         26:ba:51:63:9a:06:de:06:6a:ed:7f:8e:18:06:49:cc:c1:25:
         5a:3b:ab:a6:b9:44:c8:a5:58:f1:5d:63:6d:fb:3a:ea:b1:98:
         8e:34:27:fa:1d:db:a8:aa:66:9d:94:01:eb:f4:97:a4:9e:92:
         be:b7:3a:98:22:0e:f3:62:7b:ab:2c:04:9b:92:b2:cd:c9:26:
         c0:81:8c:6a:00:a4:64:35:57:21:53:ea:bb:ea:bb:82:08:5e:
         c7:e1:64:98:00:f5:a8:ee:1c:9c:f1:6f:40:a5:c3:d4:cf:22:
         f5:af:9e:f7:97:76:9f:09:6c:69:47:55:39:b1:06:5c:10:a0:
         97:b7:ed:39:bf:0f:91:e6:e8:16:28:fd:53:b6:26:30:5c:bc:
         78:85:aa:d5:22:73:56:87:6a:a9:7a:85:69:2d:5a:10:84:b1:
         14:55:8c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:40 2024 by rpki-client on console-fra.rpki-client.org