Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96f39174-b9e9-390d-8a8a-5fbe365bb75b.roa
File:                     96f39174-b9e9-390d-8a8a-5fbe365bb75b.roa (raw, json)
Hash identifier:          xzzxUqA+sLZzqcuvey8a/Su5Jg/Nz8qPbMNayTnVwAU=
Subject key identifier:   E8:4E:BB:C7:D8:B8:D1:95:7F:00:C4:74:54:40:9F:3E:69:D8:45:7A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA0570039755BF5424C000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96f39174-b9e9-390d-8a8a-5fbe365bb75b.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100d:b0ce::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:05:70:03:97:55:bf:54:24:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=526a5112-52ed-4908-aa50-47fd9262f0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c5:95:e3:24:68:ff:db:8c:28:e2:a5:42:a8:
                    75:03:50:43:14:ed:ed:b6:82:63:8e:f6:b9:9c:8c:
                    de:a1:c0:31:37:5f:fd:26:f4:50:7e:9d:dd:b0:aa:
                    cf:af:5f:7a:c4:3a:04:17:de:2d:1f:12:8f:1d:22:
                    38:1a:70:1a:c3:c3:60:22:ba:78:4a:8e:ac:54:4a:
                    e9:14:a9:b1:dc:2d:1d:02:7d:0e:31:de:d9:d5:ae:
                    7d:ff:67:47:ce:f5:c7:03:96:43:a5:55:c6:af:2f:
                    83:3b:8c:1d:0e:ae:b0:13:33:2f:14:dc:e6:e4:56:
                    b8:d7:9f:f6:56:a8:76:88:fc:85:bf:76:f0:a1:cd:
                    8d:64:10:3c:82:cd:c0:ff:65:c2:fe:8b:47:44:80:
                    5f:5b:5d:6f:9f:10:bd:75:d2:2e:d0:03:67:40:38:
                    86:6c:06:65:a3:0d:68:ae:1d:53:f7:e3:e1:20:c0:
                    b6:ff:31:b8:ad:73:91:90:92:a7:12:01:03:f6:b4:
                    a1:00:bd:c8:14:85:f3:e5:6e:4d:a8:c4:f6:57:0c:
                    86:8b:f3:b6:b4:1f:b8:7c:de:99:bf:35:53:6e:07:
                    18:3c:af:9c:0e:5e:fd:2c:49:46:df:b0:07:17:ef:
                    f5:92:0f:99:cd:45:fa:76:ba:c9:81:19:7e:85:ab:
                    a0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4E:BB:C7:D8:B8:D1:95:7F:00:C4:74:54:40:9F:3E:69:D8:45:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96f39174-b9e9-390d-8a8a-5fbe365bb75b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b0ce::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:56:38:c5:9c:b1:5f:a1:4a:41:91:40:98:ef:15:5f:3f:cc:
         83:33:bf:c4:f6:22:88:1a:26:3c:47:03:8b:7e:99:21:4b:e8:
         48:20:b4:ef:13:74:ff:2c:95:8c:2b:f8:7c:e7:38:18:db:f5:
         80:1e:a7:63:93:79:c6:90:c3:6e:dc:2c:75:6a:c1:fb:1e:e1:
         7c:95:05:f6:bd:da:0e:d5:76:1e:5e:80:11:02:e7:6c:f8:2c:
         57:88:7b:9a:60:16:07:0d:5b:62:b4:1f:b6:9a:25:4f:ab:11:
         85:0f:65:0a:9b:b1:16:a2:2a:39:5e:85:28:a3:9c:61:2b:5a:
         ea:ea:e4:7e:70:7d:45:ea:b9:ae:e2:3c:63:b0:5f:31:cd:53:
         5d:d4:64:b5:7b:da:70:5a:8b:ec:ad:4b:c3:33:42:36:7b:33:
         45:0a:12:87:93:4a:15:31:4e:da:37:38:15:86:2d:6e:81:88:
         81:6e:60:52:f7:64:bf:64:7c:3c:14:cb:fc:7c:9d:19:42:2b:
         54:64:5c:cb:78:fa:40:97:bc:ba:53:05:2c:b6:17:77:7f:2a:
         29:19:28:83:d9:6e:6b:fc:c6:9a:9f:10:bb:86:04:c3:1c:d0:
         4c:5c:3a:d5:c4:a4:25:ed:d7:e4:98:96:97:59:81:6f:00:ef:
         21:5d:21:48
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfEqgVwA5dVv1QkwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk
NTI2YTUxMTItNTJlZC00OTA4LWFhNTAtNDdmZDkyNjJmMGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcWV4yRo/9uMKOKlQqh1A1BDFO3ttoJjjva5
nIzeocAxN1/9JvRQfp3dsKrPr196xDoEF94tHxKPHSI4GnAaw8NgIrp4So6sVErp
FKmx3C0dAn0OMd7Z1a59/2dHzvXHA5ZDpVXGry+DO4wdDq6wEzMvFNzm5Fa415/2
Vqh2iPyFv3bwoc2NZBA8gs3A/2XC/otHRIBfW11vnxC9ddIu0ANnQDiGbAZlow1o
rh1T9+PhIMC2/zG4rXORkJKnEgED9rShAL3IFIXz5W5NqMT2VwyGi/O2tB+4fN6Z
vzVTbgcYPK+cDl79LElG37AHF+/1kg+ZzUX6drrJgRl+haugfQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOhOu8fYuNGVfwDEdFRAnz5p2EV6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTZmMzkxNzQtYjllOS0z
OTBkLThhOGEtNWZiZTM2NWJiNzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQDbDO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIdWOMWcsV+hSkGRQJjvFV8/zIMzv8T2IogaJjxHA4t+mSFL6Egg
tO8TdP8slYwr+HznOBjb9YAep2OTecaQw27cLHVqwfse4XyVBfa92g7Vdh5egBEC
52z4LFeIe5pgFgcNW2K0H7aaJU+rEYUPZQqbsRaiKjlehSijnGErWurq5H5wfUXq
ua7iPGOwXzHNU13UZLV72nBai+ytS8MzQjZ7M0UKEoeTShUxTto3OBWGLW6BiIFu
YFL3ZL9kfDwUy/x8nRlCK1RkXMt4+kCXvLpTBSy2F3d/KikZKIPZbmv8xpqfELuG
BMMc0ExcOtXEpCXt1+SYlpdZgW8A7yFdIUg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:44 2024 by rpki-client on console-fra.rpki-client.org