Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96fe9c9a-fc6d-3bc2-9231-00930382debc.roa
File:                     96fe9c9a-fc6d-3bc2-9231-00930382debc.roa (raw, json)
Hash identifier:          KYbRz+xhf7myFPVdQxFE2PsX8lScW8licXjusQT4jRI=
Subject key identifier:   69:0F:2D:B6:50:37:0B:EE:42:9E:35:A0:ED:BB:5B:5A:48:E3:A1:2C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBE1C26EFE6A09FC499800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96fe9c9a-fc6d-3bc2-9231-00930382debc.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1014:a021::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:e1:c2:6e:fe:6a:09:fc:49:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=0569a7db-4f84-4e3e-b91b-954f110b5e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:04:c5:67:ba:35:b7:78:4d:bc:11:11:40:7f:
                    f0:fc:67:4f:bb:29:6f:c9:7a:09:09:c2:62:e9:e0:
                    db:76:aa:a4:be:03:07:73:09:8b:d0:6f:c9:22:3e:
                    17:9a:be:e5:18:d8:b3:0d:c9:a8:33:2e:49:6c:be:
                    45:19:03:cf:fb:d3:bc:a6:c1:e5:05:ad:19:33:f6:
                    f2:79:e6:cf:e3:ce:41:08:e6:68:c7:b3:b7:98:bf:
                    17:cf:1e:71:49:6e:16:41:75:b9:5b:8f:43:d2:6b:
                    fe:fa:b7:ca:b2:bd:a1:21:70:d3:2e:01:fb:7f:d1:
                    17:27:b3:3b:2a:0a:f1:22:25:7e:5c:e1:e5:a4:18:
                    49:7d:83:08:be:22:bd:1e:04:6c:c3:cb:62:e8:ba:
                    c0:69:2f:ba:bc:d4:af:1e:cd:29:5e:0c:e6:3b:7a:
                    36:3a:a2:8b:71:d9:65:03:9a:c6:90:ca:44:ad:bb:
                    2c:9f:46:c4:1e:c6:04:18:88:b6:aa:c8:6e:d3:79:
                    7b:7c:81:a3:eb:41:8c:21:b6:0a:b2:69:88:df:f5:
                    78:c4:1b:93:28:b0:2d:03:fd:78:7e:a5:ed:fa:a1:
                    d8:d7:de:27:25:6f:ad:f3:bd:25:c9:52:9e:7e:c9:
                    8e:85:43:19:05:1e:09:83:58:d4:9a:d7:eb:c6:dd:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0F:2D:B6:50:37:0B:EE:42:9E:35:A0:ED:BB:5B:5A:48:E3:A1:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96fe9c9a-fc6d-3bc2-9231-00930382debc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:a021::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ec:fd:52:4f:8e:a8:4c:21:18:fa:24:02:ea:19:c6:95:31:
         4a:47:f3:77:75:fa:ba:5a:39:51:a7:92:37:7b:fb:40:b3:f3:
         93:f3:41:b7:84:51:45:38:74:9e:c9:1f:0e:7b:17:8c:44:67:
         11:1d:6c:90:24:f6:54:37:91:89:0e:1d:a8:6b:22:df:24:4f:
         2d:cb:7a:f6:ac:4e:3e:54:5f:d8:79:31:7d:be:bd:ba:e7:b7:
         e7:c6:e7:3c:8c:ce:01:e0:68:40:4d:00:f1:37:18:11:4b:69:
         5a:06:0e:45:d6:00:08:6a:c4:9d:30:00:8c:38:d5:f3:6f:c9:
         cf:5f:5e:d5:ae:19:94:8f:e3:db:10:da:c2:cd:c1:f2:03:c4:
         b6:fb:c7:0a:a7:47:d7:6a:b9:e1:7a:21:45:a9:cb:4f:f3:68:
         a1:d3:e2:d7:c9:1f:5b:85:4a:87:e8:67:ae:1c:fa:11:63:5c:
         82:1c:2b:cf:76:56:89:f9:f6:27:26:61:22:5c:60:ab:75:52:
         fa:cd:35:02:a9:43:bd:5f:c9:1c:76:79:7e:82:2f:83:a6:db:
         5f:54:64:33:d4:1a:0b:2f:a8:6a:77:db:47:1b:d5:97:99:49:
         58:bd:a3:9f:88:32:06:00:6a:ae:ac:15:bf:b2:57:03:19:b2:
         98:29:43:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:44 2024 by rpki-client on console-fra.rpki-client.org