Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9ae17918-3acb-3007-9523-67d2f61f53a7.roa
File:                     9ae17918-3acb-3007-9523-67d2f61f53a7.roa (raw, json)
Hash identifier:          n3UfPrG8yNL8LdUTeockV1H4ElTunbThhvvIa6UukYM=
Subject key identifier:   02:6A:E9:F4:CB:48:72:66:79:15:18:BA:7D:48:16:3B:AF:BC:08:7F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846E3E1937ED6718D434D69B3C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9ae17918-3acb-3007-9523-67d2f61f53a7.roa
Signing time:             Fri 16 Aug 2024 01:36:01 +0000
ROA not before:           Fri 16 Aug 2024 01:36:01 +0000
ROA not after:            Thu 14 Nov 2024 02:36:01 +0000
asID:                     6167
IP address blocks:        2600:1009:d020::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:e1:93:7e:d6:71:8d:43:4d:69:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:36:01 2024 GMT
            Not After : Nov 14 02:36:01 2024 GMT
        Subject: CN=91b19ac9-3e8a-4170-8c18-0ab6825d8317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5d:39:9c:e5:82:e4:e0:4c:aa:48:49:4c:6b:
                    7f:60:8f:eb:58:14:6c:c3:ab:22:2b:89:8c:0d:a6:
                    72:71:66:22:a8:85:44:ae:bc:be:22:3f:c5:b0:c8:
                    91:79:e0:4e:d6:6e:4b:75:06:75:9b:e9:60:d1:50:
                    2c:bd:ae:6f:85:09:57:56:96:da:26:da:63:cf:c3:
                    95:d8:29:12:ea:d8:d5:07:b1:aa:95:4b:84:09:79:
                    63:33:4e:6d:8a:ad:e7:4e:76:40:12:bd:fa:0a:d8:
                    53:e7:6d:72:18:7f:a9:cd:75:6b:55:17:5e:8c:f4:
                    2b:d7:88:c9:75:88:b4:69:fd:87:84:21:ef:4f:ea:
                    0e:c4:d7:82:be:ab:ce:ee:73:21:8a:b2:20:65:08:
                    f7:2b:c2:21:53:8a:94:8d:ed:ab:a7:5d:94:78:93:
                    96:67:83:35:39:88:ad:71:1d:f5:f5:13:c8:74:e2:
                    df:df:13:ba:a3:e9:97:8b:24:3a:8e:7a:f2:39:e7:
                    33:b3:2c:43:ab:3b:32:ac:b3:e2:82:ee:92:dc:63:
                    cb:ce:fe:42:5a:35:cd:fa:63:1f:8a:a3:1e:3d:02:
                    47:25:6c:9d:95:55:ca:8f:34:a3:ef:1a:00:05:e1:
                    7e:a8:07:07:ec:21:f4:da:fb:73:31:f8:21:40:55:
                    39:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6A:E9:F4:CB:48:72:66:79:15:18:BA:7D:48:16:3B:AF:BC:08:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9ae17918-3acb-3007-9523-67d2f61f53a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:d020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:a5:77:fb:93:44:ae:38:78:33:b0:c6:6e:64:8f:4f:20:2a:
         9a:c8:ea:5f:22:dc:1e:be:8e:e1:22:52:e4:48:b3:9e:c6:f0:
         63:38:f3:c3:6c:c4:ec:db:b6:2f:d0:c0:f7:ff:9b:e1:e0:66:
         d9:30:e0:49:cf:0c:fa:e1:c3:3c:db:da:74:14:a4:ec:90:9c:
         50:1a:ae:63:12:ad:44:2e:a6:f0:a0:5c:c0:a7:fd:16:ff:f9:
         8d:1a:b0:f0:d2:dc:56:60:7f:8c:31:e6:3e:01:dd:97:05:50:
         8f:d7:2a:3c:fd:dd:8e:82:fe:a1:f5:92:ff:67:87:de:75:f0:
         b4:83:83:94:18:02:ef:ef:29:56:ec:d3:31:4a:ba:22:41:ec:
         2e:05:02:7e:b5:29:3f:5c:41:8e:6f:52:e9:4f:49:92:a7:86:
         7a:49:a2:f7:6c:c4:af:c2:0e:22:d9:63:4e:bd:c6:44:1b:31:
         84:50:81:22:5b:6f:4a:85:c5:5d:88:7f:54:8a:0f:5d:43:2c:
         c1:39:a2:af:a5:24:e6:31:a3:4b:49:d2:b7:26:cc:06:61:e0:
         83:b8:05:7c:5c:77:69:ca:3e:ae:70:49:af:3b:93:90:43:69:
         46:4f:3d:e6:b7:66:ae:3b:c6:ff:55:44:f9:70:50:3f:a2:ec:
         2a:7e:21:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:07 2024 by rpki-client on console-fra.rpki-client.org