Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9393132b-deb1-3968-b5d3-cdf5c6bae4e0.roa
File:                     9393132b-deb1-3968-b5d3-cdf5c6bae4e0.roa (raw, json)
Hash identifier:          3IP1O2TMX+YD527f2qEo50+hTM2QLCfztb6EObdcI+w=
Subject key identifier:   09:F9:C1:CB:18:C7:1B:CB:4E:64:D2:5B:A2:28:12:E1:B8:61:14:75
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBDCD8BE3CDA2176E44420
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9393132b-deb1-3968-b5d3-cdf5c6bae4e0.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1012:9000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:dc:d8:be:3c:da:21:76:e4:44:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=0975c82c-788c-4e5c-9966-ad2aefcd5324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ad:7e:1d:6c:32:a7:4e:65:2b:ca:4d:fd:2b:
                    6d:4e:52:6e:49:bf:8b:e4:ec:98:e3:d9:6e:8e:04:
                    e7:44:5a:08:8d:e3:7b:e2:ea:6d:d8:95:7f:fc:2d:
                    c5:df:75:7f:8c:02:85:14:4d:1b:6d:c3:90:b7:5a:
                    43:2c:62:a1:01:7d:6b:db:2a:29:a1:03:13:b3:28:
                    d5:9e:87:ba:e1:06:d8:0d:51:af:dc:14:ef:d9:cf:
                    94:92:62:c0:fd:02:d6:6e:fb:7d:a5:4c:3f:89:a6:
                    cf:27:61:b4:30:b3:ca:cd:8d:a1:c4:fe:19:05:49:
                    0e:ec:33:a2:99:3e:39:e5:fc:99:7c:71:55:69:cb:
                    7e:36:8b:26:b9:cb:ff:ae:72:40:fd:14:f4:f3:83:
                    51:5d:ff:4e:e9:40:dc:4e:b6:bc:67:16:f9:03:9e:
                    67:20:65:c0:91:bd:60:e3:89:3a:5e:39:a6:2d:33:
                    4e:4a:b1:55:53:97:e9:eb:17:02:1d:59:62:f4:4f:
                    f8:1d:72:8b:4d:fa:96:ab:96:2d:39:33:40:8e:ca:
                    73:06:ba:11:6c:fd:4e:55:54:33:72:91:19:ec:fc:
                    7f:16:b7:80:53:e3:07:f7:e5:25:6f:3d:0c:04:a7:
                    5d:f9:10:7e:1a:58:78:ed:f6:17:79:ea:d9:cb:79:
                    5b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F9:C1:CB:18:C7:1B:CB:4E:64:D2:5B:A2:28:12:E1:B8:61:14:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9393132b-deb1-3968-b5d3-cdf5c6bae4e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:4b:94:00:71:a4:5d:d1:59:7b:9c:51:a2:4b:67:11:a1:9c:
         39:3a:21:b4:3d:1b:b6:85:af:4a:d3:45:87:01:ca:13:f1:f3:
         82:3e:63:5a:ce:f6:2e:1d:74:e1:3f:d4:e5:da:78:b1:c5:bb:
         00:c5:db:7f:43:ac:38:35:99:bd:06:c0:5a:9f:cd:e5:ce:03:
         62:2b:f0:f5:87:73:6e:fd:0c:58:51:f6:9e:2c:42:72:ec:88:
         a3:da:ed:31:26:27:fe:88:53:e5:9c:89:4d:84:f0:19:e6:67:
         aa:5b:2f:ec:52:96:59:48:13:0f:7c:04:32:1d:24:a3:8c:43:
         13:23:9b:88:a2:fd:9b:61:ec:e5:95:fd:f1:e5:3b:18:f7:78:
         5c:c4:8a:2b:77:3f:42:88:56:d0:c9:51:43:48:67:f7:30:57:
         17:c9:38:3e:a3:20:c2:1d:de:49:80:33:c8:4a:61:e3:8a:ff:
         51:a4:5f:d5:f9:7f:4c:41:19:82:c6:82:6b:fd:5d:b9:81:a8:
         2d:30:4e:d6:2d:c8:e5:56:fa:68:e8:54:ee:61:d9:ed:fe:90:
         3d:65:22:53:e6:4b:8b:ab:80:01:f8:f8:1d:36:f6:8a:16:f6:
         c7:0e:cc:f4:c3:e7:61:8a:8b:54:6e:52:cf:83:0d:a5:d9:42:
         a1:83:0a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:05 2024 by rpki-client on console-fra.rpki-client.org