Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87e6a210-6479-3be7-8f3a-08458adf00a6.roa
File:                     87e6a210-6479-3be7-8f3a-08458adf00a6.roa (raw, json)
Hash identifier:          Zj9/u9N0dNtf/DRTETRCvke/vENsV+vEKL22eSPed0E=
Subject key identifier:   6C:12:18:78:6B:91:92:9B:38:9C:88:8F:8D:7B:75:93:2D:A9:2A:35
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA107CB3C1DEFA5FC9C480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87e6a210-6479-3be7-8f3a-08458adf00a6.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100f:f100::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:10:7c:b3:c1:de:fa:5f:c9:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=0cfaa35d-8218-454e-8420-aa0fea422cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:12:bb:06:a7:bd:f8:6a:73:0f:34:a5:18:2a:
                    d4:e5:30:83:db:c3:fc:98:ab:77:01:f9:65:e3:69:
                    9b:d7:94:66:f5:49:71:b6:94:ce:dd:dd:11:38:79:
                    26:1e:11:9b:53:7f:48:e1:9f:f3:8b:45:45:e2:45:
                    4c:5b:a6:20:c5:12:a9:52:3c:e8:30:8b:65:b4:f2:
                    2b:2f:12:4b:98:63:a6:81:de:af:b6:7c:fb:9d:b0:
                    0f:e7:cd:3a:0d:e5:82:be:88:e6:2a:4c:c5:fa:81:
                    da:02:a2:43:d1:9c:e2:a0:ed:ae:de:2b:4c:69:42:
                    9f:4b:19:c3:9a:a9:f3:3e:af:c5:ae:2b:ec:b9:2e:
                    9e:50:23:fb:4d:25:1d:12:5a:10:03:dd:3e:07:7e:
                    c8:0d:89:f8:26:27:d1:eb:6c:98:be:97:44:f7:6b:
                    7d:88:44:31:dc:2c:27:61:57:19:83:c3:7e:5e:89:
                    29:98:6f:2f:f2:70:3b:63:ed:1e:66:9e:56:bc:10:
                    48:9f:4a:06:5c:d9:a0:29:d0:f0:bf:82:38:e4:95:
                    f0:87:5e:f1:e3:b3:d8:0d:7e:48:1a:a8:64:d9:9d:
                    90:0a:a8:1b:db:f1:53:c3:62:72:c2:58:31:aa:17:
                    b5:03:59:c1:e9:65:af:e8:79:bb:52:4b:ca:b1:87:
                    68:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:12:18:78:6B:91:92:9B:38:9C:88:8F:8D:7B:75:93:2D:A9:2A:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87e6a210-6479-3be7-8f3a-08458adf00a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:f100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ae:b8:2f:ac:9f:50:39:27:ab:e6:4d:dd:98:dd:49:a4:24:
         ad:a3:c0:3e:da:cb:5e:f1:41:ca:a6:73:54:db:ba:94:2f:0b:
         b7:33:8c:fc:d0:6d:f7:d4:83:cd:b7:06:bc:66:87:51:41:7d:
         e0:ee:72:23:68:bd:b6:6f:15:06:07:e9:a1:1d:fa:ae:9b:9f:
         e3:de:c9:45:ae:17:54:9a:5a:9e:98:9a:d5:a2:ce:0a:fe:93:
         07:3a:b9:9b:14:25:2c:fd:e6:70:f9:e9:7a:18:64:1e:a5:09:
         88:37:5c:4a:e6:de:9a:5c:79:6b:8c:0e:a8:6b:d3:25:1e:93:
         31:c8:b8:24:4a:1d:b5:5a:56:c5:bb:a7:52:fb:77:99:c6:3a:
         6d:b4:f0:15:47:6c:bc:d0:f1:c1:10:cf:67:d2:4c:ec:18:f4:
         95:c6:b7:e4:1a:46:9b:08:67:b7:db:0f:09:12:c0:ca:d2:00:
         52:3f:c0:00:5f:cf:be:ff:c7:45:56:89:97:95:4a:94:69:a7:
         e5:5a:b3:3f:e1:9b:a4:35:69:0c:bf:4a:de:34:25:39:d5:60:
         de:3a:7e:45:3b:de:7a:64:e0:9c:82:a2:05:bc:f2:6a:9d:4c:
         93:2c:5a:62:07:8b:5b:b0:5d:08:4c:da:31:de:6d:73:65:87:
         95:3f:cd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:41 2024 by rpki-client on console-fra.rpki-client.org