Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/901e0d5d-e04a-30fc-85b7-2ba80ac0222e.roa
File:                     901e0d5d-e04a-30fc-85b7-2ba80ac0222e.roa (raw, json)
Hash identifier:          VPFuUSxh1IwLvQ+OQX6Xp4fJaN7AgeL3axHRXBFYz3E=
Subject key identifier:   4C:82:87:64:AE:34:B2:4B:D5:FB:8E:37:62:B0:56:C4:55:D5:78:4D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBDC7C0ED465A6564C3A40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/901e0d5d-e04a-30fc-85b7-2ba80ac0222e.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1011:b340::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:dc:7c:0e:d4:65:a6:56:4c:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=1e63edaf-3f72-4a49-8ef5-442f2f2bbf68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:1d:9a:a3:76:dc:c2:8c:27:15:14:2b:9e:
                    cc:60:d4:cf:bd:d1:90:9f:9c:12:ac:c7:20:59:d6:
                    d0:68:51:e8:92:bb:ea:28:03:54:93:e8:6f:47:23:
                    15:d7:58:90:39:77:16:fb:7a:ec:76:54:3f:c7:ca:
                    90:94:db:4d:65:a6:c6:6e:7f:7c:c6:bb:9f:89:6c:
                    a1:53:88:53:c0:f3:9c:74:d5:3d:ea:2e:f2:ff:e1:
                    1b:1a:d9:96:99:8c:2a:d4:70:94:71:95:20:2b:48:
                    b7:43:d9:cc:ef:b1:40:c1:2f:c7:70:4f:58:67:60:
                    e7:59:be:e2:6f:14:86:c9:4d:28:ce:b8:02:df:83:
                    56:b2:a2:44:4d:0e:55:96:44:7e:77:81:df:16:b4:
                    8f:a1:24:3d:b0:a2:42:b0:3f:fc:bf:54:37:4c:07:
                    50:47:9e:cb:b3:a2:0f:0b:90:00:16:a7:54:20:00:
                    f2:95:c3:68:dd:d4:ed:9a:5b:f4:ae:4c:60:cf:5a:
                    a5:47:9f:a9:37:17:f9:12:79:80:38:8e:7a:7a:82:
                    f7:6b:cf:04:55:c1:5c:3d:b7:a3:c4:b5:0f:c8:a8:
                    b8:c7:29:04:5a:ed:7c:44:9e:bb:62:84:19:fb:db:
                    5c:1a:30:6f:83:c8:bc:9d:41:6a:b2:eb:89:08:fa:
                    00:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:82:87:64:AE:34:B2:4B:D5:FB:8E:37:62:B0:56:C4:55:D5:78:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/901e0d5d-e04a-30fc-85b7-2ba80ac0222e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b340::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:f0:64:c3:2a:d6:13:44:a1:5f:8f:eb:7b:bb:ef:e6:7d:91:
         1b:7f:8e:1c:7e:d9:02:4a:cd:8a:8f:a7:91:55:7c:de:c7:ed:
         62:95:10:b5:1f:a4:51:8f:6a:6c:ad:0f:92:c1:fe:88:87:91:
         76:00:b0:31:8e:11:43:c7:22:e3:ed:31:3b:63:68:d8:7f:ac:
         9f:48:31:8e:c9:1f:ef:1a:19:b8:68:bc:cf:f5:0c:bf:ab:e5:
         2e:9d:eb:92:c7:60:c3:9d:16:8d:87:69:4d:9e:16:5c:9f:7d:
         56:ac:b4:8e:83:f2:fb:28:91:31:03:46:f8:33:f5:69:2d:af:
         30:a0:37:17:c7:8a:77:24:63:32:c2:72:94:b5:0e:da:6e:1f:
         91:85:90:50:71:39:92:78:e5:9e:45:21:87:99:3f:45:26:62:
         04:18:8b:24:ea:67:0c:83:80:8d:15:bc:27:17:09:9f:12:e8:
         ef:a2:57:07:dc:44:ec:ea:c1:6d:14:3a:67:1f:9e:56:c3:c2:
         02:f8:a8:8c:04:47:6a:d7:bb:1c:e5:c4:f9:19:c8:d8:fc:4e:
         82:0f:34:90:e6:25:54:08:fa:56:3d:b2:1e:51:7c:0d:0e:3d:
         1c:4a:cb:e6:59:81:25:33:0f:d8:30:64:eb:87:1a:2b:69:b9:
         2e:25:a6:53
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeJ69x8DtRlplZMOkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAxNDEzMDA0N1oXDTI1MDExMjE0MDA0N1owLzEtMCsGA1UEAxMk
MWU2M2VkYWYtM2Y3Mi00YTQ5LThlZjUtNDQyZjJmMmJiZjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTkdmqN23MKMJxUUK57MYNTPvdGQn5wSrMcg
WdbQaFHokrvqKANUk+hvRyMV11iQOXcW+3rsdlQ/x8qQlNtNZabGbn98xrufiWyh
U4hTwPOcdNU96i7y/+EbGtmWmYwq1HCUcZUgK0i3Q9nM77FAwS/HcE9YZ2DnWb7i
bxSGyU0ozrgC34NWsqJETQ5VlkR+d4HfFrSPoSQ9sKJCsD/8v1Q3TAdQR57Ls6IP
C5AAFqdUIADylcNo3dTtmlv0rkxgz1qlR5+pNxf5EnmAOI56eoL3a88EVcFcPbej
xLUPyKi4xykEWu18RJ67YoQZ+9tcGjBvg8i8nUFqsuuJCPoAAQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEyCh2SuNLJL1fuON2KwVsRV1XhNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTAxZTBkNWQtZTA0YS0z
MGZjLTg1YjctMmJhODBhYzAyMjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQEbNA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKPwZMMq1hNEoV+P63u77+Z9kRt/jhx+2QJKzYqPp5FVfN7H7WKV
ELUfpFGPamytD5LB/oiHkXYAsDGOEUPHIuPtMTtjaNh/rJ9IMY7JH+8aGbhovM/1
DL+r5S6d65LHYMOdFo2HaU2eFlyffVastI6D8vsokTEDRvgz9WktrzCgNxfHinck
YzLCcpS1DtpuH5GFkFBxOZJ45Z5FIYeZP0UmYgQYiyTqZwyDgI0VvCcXCZ8S6O+i
VwfcROzqwW0UOmcfnlbDwgL4qIwER2rXuxzlxPkZyNj8ToIPNJDmJVQI+lY9sh5R
fA0OPRxKy+ZZgSUzD9gwZOuHGitpuS4lplM=
-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:46 2024 by rpki-client on console-ams.rpki-client.org