Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9690822e-db99-3a95-ab76-2e56585d9295.roa
File:                     9690822e-db99-3a95-ab76-2e56585d9295.roa (raw, json)
Hash identifier:          fOMQskrkVASqfB2QLyBmZXLA8KOgBOzD6CrFUrgIF1s=
Subject key identifier:   12:7B:26:13:57:9E:2A:2E:BD:73:0D:9F:4A:39:CF:A9:AA:CE:2C:03
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76A8F8A3CA9CD44802C400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9690822e-db99-3a95-ab76-2e56585d9295.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1007:b010::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:a8:f8:a3:ca:9c:d4:48:02:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=6ffc251d-cfac-475d-b7a6-117c2805b39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:43:16:98:1e:07:d0:b8:7e:b4:91:06:69:46:
                    c0:93:15:1b:f7:40:8c:8c:79:33:f9:f9:7c:62:5d:
                    b0:2f:34:e0:4a:bd:ed:2f:27:81:2f:d3:6b:d0:71:
                    ab:b3:5f:85:a6:03:10:4f:4e:4d:3f:9e:0c:c9:e0:
                    3c:94:c6:45:79:e1:6c:83:cd:00:1e:ac:b9:6f:70:
                    36:b2:2a:99:8c:af:29:ee:bf:9f:2c:4c:00:a4:f1:
                    19:d7:a4:8c:33:e5:76:c0:be:24:17:32:74:58:0e:
                    97:b1:62:c8:63:de:c5:35:2a:72:b4:f6:4b:9b:dd:
                    a4:a9:92:37:c5:6b:75:fd:fa:bc:bc:05:8e:a7:80:
                    a8:cc:3e:c4:9b:f1:e8:54:64:44:b3:f1:b6:85:3a:
                    69:59:eb:7d:a5:cb:11:3d:20:66:b6:fd:0a:5d:aa:
                    15:ed:f9:75:e4:61:b4:98:71:30:aa:63:97:86:52:
                    3a:be:ba:9c:4e:46:d1:50:19:fb:f8:17:29:06:a5:
                    f5:8e:16:5b:47:2e:f3:b2:65:00:3d:9b:62:d8:9c:
                    58:8a:23:52:13:b3:a3:e1:52:b7:26:8f:6a:a8:33:
                    0e:1f:f5:fb:cd:b9:f5:d0:4a:76:49:60:df:3f:90:
                    46:42:83:fb:6d:d2:a2:48:f5:09:52:a4:b3:76:e9:
                    37:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7B:26:13:57:9E:2A:2E:BD:73:0D:9F:4A:39:CF:A9:AA:CE:2C:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9690822e-db99-3a95-ab76-2e56585d9295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:b010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:75:44:ab:31:3a:49:6f:7c:06:65:1d:66:e2:55:ea:5b:fd:
         8f:8f:9a:b0:a3:a5:f1:b1:38:2a:e5:43:c5:47:a3:f2:35:05:
         a8:bf:dc:e0:f3:80:0b:67:95:15:4a:88:47:e6:bc:d6:70:71:
         70:7c:eb:bc:3a:a8:c7:26:9c:00:9b:b2:f4:d5:e3:a3:fa:3f:
         fa:cc:68:c5:a9:72:e0:c9:32:c3:7b:3b:49:cf:05:a7:78:43:
         a7:b7:dd:10:7e:ca:08:ef:aa:53:c1:42:48:1a:57:c7:f3:ea:
         58:68:3a:14:60:f7:8f:39:af:3b:0f:8b:44:57:6c:cd:ba:bc:
         cc:b6:d3:fd:d0:da:e2:c7:56:d5:64:e0:37:eb:7f:b0:ba:99:
         8b:6e:bf:a9:20:ea:b1:da:e5:d2:4a:40:02:7c:7e:83:72:37:
         cf:a0:8d:1c:90:9a:e3:33:58:87:2a:f8:fe:74:3b:a6:69:60:
         1a:f5:90:98:e2:06:01:89:15:92:84:49:63:12:cd:8d:dc:37:
         55:77:a0:f8:3e:82:3b:d0:a5:5b:3e:8e:f2:27:64:88:f4:2f:
         ce:da:2d:31:ee:b6:53:0f:4b:38:97:ff:7a:3c:3d:34:3f:38:
         bb:c0:52:0b:46:2a:5d:9b:3e:a9:67:5f:a1:21:a2:6b:dd:68:
         9b:16:00:20
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeddqj4o8qc1EgCxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
NmZmYzI1MWQtY2ZhYy00NzVkLWI3YTYtMTE3YzI4MDViMzlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0MWmB4H0Lh+tJEGaUbAkxUb90CMjHkz+fl8
Yl2wLzTgSr3tLyeBL9Nr0HGrs1+FpgMQT05NP54MyeA8lMZFeeFsg80AHqy5b3A2
siqZjK8p7r+fLEwApPEZ16SMM+V2wL4kFzJ0WA6XsWLIY97FNSpytPZLm92kqZI3
xWt1/fq8vAWOp4CozD7Em/HoVGREs/G2hTppWet9pcsRPSBmtv0KXaoV7fl15GG0
mHEwqmOXhlI6vrqcTkbRUBn7+BcpBqX1jhZbRy7zsmUAPZti2JxYiiNSE7Oj4VK3
Jo9qqDMOH/X7zbn10Ep2SWDfP5BGQoP7bdKiSPUJUqSzduk3XwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBJ7JhNXniouvXMNn0o5z6mqziwDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTY5MDgyMmUtZGI5OS0z
YTk1LWFiNzYtMmU1NjU4NWQ5Mjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQB7AQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHx1RKsxOklvfAZlHWbiVepb/Y+PmrCjpfGxOCrlQ8VHo/I1Bai/
3ODzgAtnlRVKiEfmvNZwcXB867w6qMcmnACbsvTV46P6P/rMaMWpcuDJMsN7O0nP
Bad4Q6e33RB+ygjvqlPBQkgaV8fz6lhoOhRg9485rzsPi0RXbM26vMy20/3Q2uLH
VtVk4Dfrf7C6mYtuv6kg6rHa5dJKQAJ8foNyN8+gjRyQmuMzWIcq+P50O6ZpYBr1
kJjiBgGJFZKESWMSzY3cN1V3oPg+gjvQpVs+jvInZIj0L87aLTHutlMPSziX/3o8
PTQ/OLvAUgtGKl2bPqlnX6EhomvdaJsWACA=
-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:48 2024 by rpki-client on console-ams.rpki-client.org