Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d93f896-5c5d-3f5b-a144-d8abaa086a96.roa
File:                     8d93f896-5c5d-3f5b-a144-d8abaa086a96.roa (raw, json)
Hash identifier:          ltKyMO2qn2vHNl2sAACHkX4GDstF8WcUEypqiHS6KhA=
Subject key identifier:   13:42:79:43:1F:84:C6:99:DA:3D:B5:58:BE:CA:8A:C9:D1:C9:93:57
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA0FE08FA3CEF7F830B600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d93f896-5c5d-3f5b-a144-d8abaa086a96.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100f:b1c0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:0f:e0:8f:a3:ce:f7:f8:30:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=dde25d50-90ff-48f7-89b0-b308dcc3339b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:67:46:e9:6c:65:a9:81:a1:6e:4f:d6:18:fe:
                    7c:1e:d5:96:63:34:91:4c:50:cf:ae:82:4d:68:00:
                    d2:1b:9a:3d:6b:8f:3a:38:45:fc:78:bf:17:da:da:
                    6b:87:c1:7a:57:04:1b:d5:d0:76:9b:d8:fe:01:5a:
                    1f:0f:f9:c7:36:af:99:53:3f:1d:fe:b1:43:fd:0a:
                    4d:a4:96:ed:7e:ac:09:1b:63:5e:e1:90:57:01:ab:
                    a2:98:27:94:db:10:a1:ee:e9:cb:b7:f8:ba:46:84:
                    e0:a9:e1:74:22:0a:17:85:43:c8:da:14:a3:bf:0a:
                    f1:a4:23:25:0b:b3:b7:a0:63:00:1c:f4:a1:30:6f:
                    35:2b:1f:27:7c:58:6f:1c:22:1b:2f:17:d6:50:ca:
                    7f:d8:b9:c9:0a:b5:dd:d2:e7:1d:30:ff:4f:35:63:
                    4c:d7:63:b1:84:e2:39:85:84:a8:e6:2c:16:97:63:
                    5c:c7:5a:7e:fb:fe:c8:b6:5f:06:1d:fd:a4:92:74:
                    a6:8f:14:29:72:62:3a:d4:4f:27:da:6a:26:be:0e:
                    8e:1f:e0:1c:97:3c:cc:1e:88:c5:01:9a:6a:db:a8:
                    a8:94:74:c8:91:d1:b2:6e:53:c9:74:f3:e0:79:e3:
                    b2:b1:44:48:ca:55:f9:4b:06:b5:f3:e3:17:3f:d3:
                    af:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:42:79:43:1F:84:C6:99:DA:3D:B5:58:BE:CA:8A:C9:D1:C9:93:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d93f896-5c5d-3f5b-a144-d8abaa086a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b1c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:88:51:fd:d2:e8:42:81:9f:24:0f:3e:c5:3c:66:48:14:e6:
         3b:36:40:f5:72:ef:01:50:21:a4:66:23:25:2c:30:55:e4:bb:
         7c:a1:f7:74:6e:ba:2b:b6:59:4a:ad:4a:9d:c4:6d:95:d6:12:
         b9:e5:74:3e:e5:79:e9:3b:ba:c8:23:98:f1:07:b3:41:1a:68:
         7d:19:38:b6:19:42:5c:d2:2a:00:93:5a:69:52:70:88:ac:d8:
         16:39:53:9f:ab:35:81:a6:bc:2f:ab:74:ac:26:1e:0f:32:bd:
         f6:98:61:c7:61:f6:50:6e:5a:f9:c1:03:3d:44:7b:7c:b3:16:
         f8:85:a0:5b:98:b6:47:0d:4a:72:3a:b9:83:7f:78:3a:17:8c:
         35:45:ce:70:d2:70:a8:ab:1d:7b:9e:83:1e:8b:6d:5a:f2:e8:
         bc:19:37:b1:ea:b7:96:ba:40:51:74:b0:33:3c:4c:b3:ff:71:
         04:02:78:12:ca:64:a5:f3:3d:a7:03:80:e5:bd:6a:3d:33:11:
         94:b4:54:d8:ab:1d:ad:a1:48:fe:e4:f0:d6:f9:9b:32:f4:70:
         5f:c2:a6:a5:1a:88:72:2a:1f:b6:fc:dd:77:ae:83:20:ee:fa:
         c0:b1:fb:6b:92:ed:2d:e9:10:37:50:97:83:64:9c:a3:3c:cb:
         e5:e6:4c:92
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfEqg/gj6PO9/gwtgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk
ZGRlMjVkNTAtOTBmZi00OGY3LTg5YjAtYjMwOGRjYzMzMzliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWdG6WxlqYGhbk/WGP58HtWWYzSRTFDProJN
aADSG5o9a486OEX8eL8X2tprh8F6VwQb1dB2m9j+AVofD/nHNq+ZUz8d/rFD/QpN
pJbtfqwJG2Ne4ZBXAauimCeU2xCh7unLt/i6RoTgqeF0IgoXhUPI2hSjvwrxpCMl
C7O3oGMAHPShMG81Kx8nfFhvHCIbLxfWUMp/2LnJCrXd0ucdMP9PNWNM12OxhOI5
hYSo5iwWl2Ncx1p++/7Itl8GHf2kknSmjxQpcmI61E8n2momvg6OH+AclzzMHojF
AZpq26iolHTIkdGyblPJdPPgeeOysURIylX5Swa18+MXP9OvuQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBNCeUMfhMaZ2j21WL7KisnRyZNXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGQ5M2Y4OTYtNWM1ZC0z
ZjViLWExNDQtZDhhYmFhMDg2YTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQD7HA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJGIUf3S6EKBnyQPPsU8ZkgU5js2QPVy7wFQIaRmIyUsMFXku3yh
93Ruuiu2WUqtSp3EbZXWErnldD7leek7usgjmPEHs0EaaH0ZOLYZQlzSKgCTWmlS
cIis2BY5U5+rNYGmvC+rdKwmHg8yvfaYYcdh9lBuWvnBAz1Ee3yzFviFoFuYtkcN
SnI6uYN/eDoXjDVFznDScKirHXuegx6LbVry6LwZN7Hqt5a6QFF0sDM8TLP/cQQC
eBLKZKXzPacDgOW9aj0zEZS0VNirHa2hSP7k8Nb5mzL0cF/CpqUaiHIqH7b83Xeu
gyDu+sCx+2uS7S3pEDdQl4NknKM8y+XmTJI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:42 2024 by rpki-client on console-fra.rpki-client.org