Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87ba6412-b3c4-3451-a5b2-562baa008eb3.roa
File:                     87ba6412-b3c4-3451-a5b2-562baa008eb3.roa (raw, json)
Hash identifier:          Tdxasmago+XW0/XIXPzd7TsMxBvqDtYXMi+OJCGkgD4=
Subject key identifier:   0D:6D:4A:B7:E5:EB:77:DB:82:53:92:64:33:5F:5C:3C:3E:4A:5C:FA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBD15080B2805C23F86000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87ba6412-b3c4-3451-a5b2-562baa008eb3.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1010:9000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:d1:50:80:b2:80:5c:23:f8:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=8605af8b-3ea3-4ed8-b672-dd88e28f5130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:04:97:9b:c5:df:e1:1f:f1:b1:24:8a:38:da:
                    dc:f4:94:25:42:d3:59:39:c7:92:5a:da:38:44:e0:
                    bf:e2:3a:5f:f1:01:d5:b4:e5:51:5c:4b:30:a6:3f:
                    8a:d9:6f:c5:a9:92:38:63:a2:a7:23:cc:11:09:be:
                    91:1f:06:f0:b5:26:5c:f1:e0:18:c8:4a:c9:70:a3:
                    d7:59:22:ce:39:53:a2:3d:4c:08:c8:da:b1:99:73:
                    e2:43:fe:a0:02:19:9d:18:4e:e3:9e:31:01:cf:30:
                    96:ae:d4:10:a6:77:7b:9f:56:ce:85:8f:c8:fb:be:
                    e5:a9:ff:51:50:fc:7b:7f:81:5e:33:57:9d:30:88:
                    f9:f9:b1:13:08:71:bd:5c:21:8b:49:ee:33:b8:2b:
                    da:d0:1f:a8:de:4b:61:6a:51:fc:2e:6f:9f:a2:9b:
                    eb:6b:7e:77:ed:79:7a:59:3c:e0:f2:c2:b8:46:92:
                    45:3e:56:82:53:3b:97:d6:30:05:04:45:20:f7:78:
                    29:9b:8f:15:5a:02:2e:21:63:b8:ae:b6:97:a5:9d:
                    36:ac:1c:bb:b2:81:9f:19:7e:95:38:76:af:72:5e:
                    68:cb:b6:18:a4:57:58:ae:65:ac:3b:86:2b:c5:f7:
                    54:38:bf:72:4b:e2:6a:58:0e:1d:2d:a9:d7:96:36:
                    74:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6D:4A:B7:E5:EB:77:DB:82:53:92:64:33:5F:5C:3C:3E:4A:5C:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87ba6412-b3c4-3451-a5b2-562baa008eb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:bb:74:99:63:1c:74:1d:4b:1d:69:25:c3:cc:64:b7:a6:b6:
         35:d7:e5:95:3e:e7:a2:cd:b9:d1:e0:f8:bd:fa:23:25:29:40:
         ca:42:a5:a4:90:9d:69:a7:0a:4b:97:99:4a:58:d3:c5:60:e9:
         07:43:ba:ac:a7:04:25:60:c9:ee:59:3c:01:df:cd:f7:8b:79:
         25:55:ce:64:dd:54:92:06:8d:97:86:56:be:f6:2b:f0:3a:66:
         82:76:d3:fa:75:9d:f6:ce:79:54:2c:31:24:7d:08:65:50:9d:
         bb:3c:9f:a3:7f:af:9a:8b:63:19:96:fd:85:41:1c:11:41:51:
         98:14:34:4c:9a:8d:ea:c1:74:d4:c5:f4:ce:8c:7d:f8:6b:80:
         cf:aa:f2:ba:3c:3b:b7:93:e3:2f:76:bf:a1:ae:99:2e:1b:57:
         a9:f4:24:bb:71:fa:72:56:51:a1:b1:54:29:4e:c4:3c:6f:a4:
         8a:74:35:49:11:03:fc:50:ae:29:88:f9:a3:98:2c:71:55:c6:
         db:1c:07:f0:96:28:d9:38:c6:f5:5d:ba:3f:ba:28:97:4f:ed:
         c6:a1:75:cb:6f:f6:8d:e1:e3:36:a5:96:fb:a2:42:f3:5e:87:
         1a:60:a0:e4:45:ec:a5:28:52:bc:96:4d:74:f8:22:b3:ce:5c:
         f0:78:12:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:37 2024 by rpki-client on console-ams.rpki-client.org