Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d4e98be-7064-3fb1-b3a1-8bf72d51630c.roa
File:                     9d4e98be-7064-3fb1-b3a1-8bf72d51630c.roa (raw, json)
Hash identifier:          aOsAnhF0Au4Vg/VdbAdwGrAvKY4hRzTE4DEtOE7XHYA=
Subject key identifier:   05:4F:E5:87:F0:08:5F:BE:B9:DD:CF:2A:4A:68:42:3D:4A:37:61:78
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D769A525924326522BD6680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d4e98be-7064-3fb1-b3a1-8bf72d51630c.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1003:b100::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:9a:52:59:24:32:65:22:bd:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=20d72ae5-7b85-4f03-9721-8527514d5a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:ee:1d:f0:c3:da:bd:b5:1b:be:30:d6:92:
                    46:6f:6a:9b:0e:c5:63:11:d5:94:9f:4b:64:da:fc:
                    64:47:0d:72:57:d6:60:63:d1:d5:f7:0f:8a:6a:71:
                    64:c4:d5:0a:79:56:aa:d4:0b:01:68:9d:b7:b7:95:
                    fd:9a:67:43:6c:3d:ef:d0:7a:7b:cd:2d:c9:14:cd:
                    97:9a:da:85:bc:23:7a:98:6e:ad:2a:53:5d:85:e7:
                    58:0e:e8:a3:7c:3f:4b:45:4a:cc:67:c8:e8:cf:11:
                    6d:51:cb:85:eb:35:57:73:ee:0d:31:85:8d:82:cc:
                    ca:35:49:34:e5:f2:08:6d:d5:b5:fb:9e:58:7f:57:
                    3a:f8:f0:ea:d5:ce:36:9b:6a:17:ed:f4:b6:cc:f1:
                    92:75:dd:09:cd:91:6c:05:8a:74:56:89:2a:7b:23:
                    e9:25:c6:3d:cd:9a:6a:ca:7f:de:cd:eb:34:8c:80:
                    62:f3:26:55:6c:41:19:7d:d3:63:a5:27:c0:90:53:
                    1e:15:dd:0d:7f:4a:b6:e7:a7:88:94:14:12:16:58:
                    79:c8:d2:65:9c:67:4c:eb:84:0c:e1:e9:25:94:92:
                    be:e6:b0:86:19:04:76:2d:ab:36:db:76:53:8b:b1:
                    df:8c:22:96:42:31:4e:b3:dc:21:07:24:5b:81:b4:
                    29:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4F:E5:87:F0:08:5F:BE:B9:DD:CF:2A:4A:68:42:3D:4A:37:61:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d4e98be-7064-3fb1-b3a1-8bf72d51630c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a3:aa:b9:1a:4f:12:cc:75:59:9e:13:3d:ee:78:9d:6f:22:
         36:d0:fe:cc:18:e6:e1:8f:89:bf:14:f5:25:39:2f:b8:dd:4a:
         7e:ea:f5:76:47:b1:a4:91:f5:df:dc:20:0a:6c:53:66:50:75:
         07:6c:ef:0d:7a:2b:b7:60:45:e2:d0:f2:77:f3:0e:04:26:c1:
         e8:27:06:2f:18:eb:63:0a:68:52:9f:8c:b2:80:d3:fc:ff:41:
         b5:19:89:fc:f9:19:ed:62:b5:de:0a:47:89:75:3e:98:10:c7:
         ff:ef:d6:7c:92:61:26:ad:46:fa:44:29:39:ca:5c:77:5c:bd:
         4c:98:50:40:d5:12:87:96:ff:5e:19:8b:1a:e9:68:40:4f:99:
         33:12:25:c4:93:a8:55:ab:8b:30:97:df:e6:3d:14:86:d2:57:
         06:64:28:32:31:6b:ea:ab:b5:95:39:b2:da:cf:7b:14:23:27:
         c2:4d:0b:68:8b:68:c3:d5:fd:62:02:77:c3:66:05:8b:c7:ab:
         5d:9c:1d:2f:f4:fe:50:6d:5e:37:2c:9f:90:b9:91:4a:57:d7:
         64:ce:ba:de:8d:c6:9c:52:2b:7d:a5:06:c5:3b:70:b9:28:e8:
         d7:5a:47:ef:2f:cc:34:8b:9a:12:25:ce:04:25:bb:fc:1f:ae:
         fc:65:7b:09
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeddppSWSQyZSK9ZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
MjBkNzJhZTUtN2I4NS00ZjAzLTk3MjEtODUyNzUxNGQ1YTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkfuHfDD2r21G74w1pJGb2qbDsVjEdWUn0tk
2vxkRw1yV9ZgY9HV9w+KanFkxNUKeVaq1AsBaJ23t5X9mmdDbD3v0Hp7zS3JFM2X
mtqFvCN6mG6tKlNdhedYDuijfD9LRUrMZ8jozxFtUcuF6zVXc+4NMYWNgszKNUk0
5fIIbdW1+55Yf1c6+PDq1c42m2oX7fS2zPGSdd0JzZFsBYp0VokqeyPpJcY9zZpq
yn/ezes0jIBi8yZVbEEZfdNjpSfAkFMeFd0Nf0q256eIlBQSFlh5yNJlnGdM64QM
4ekllJK+5rCGGQR2Las223ZTi7HfjCKWQjFOs9whByRbgbQpjQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAVP5YfwCF++ud3PKkpoQj1KN2F4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWQ0ZTk4YmUtNzA2NC0z
ZmIxLWIzYTEtOGJmNzJkNTE2MzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQA7EA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGSjqrkaTxLMdVmeEz3ueJ1vIjbQ/swY5uGPib8U9SU5L7jdSn7q
9XZHsaSR9d/cIApsU2ZQdQds7w16K7dgReLQ8nfzDgQmwegnBi8Y62MKaFKfjLKA
0/z/QbUZifz5Ge1itd4KR4l1PpgQx//v1nySYSatRvpEKTnKXHdcvUyYUEDVEoeW
/14ZixrpaEBPmTMSJcSTqFWrizCX3+Y9FIbSVwZkKDIxa+qrtZU5strPexQjJ8JN
C2iLaMPV/WICd8NmBYvHq12cHS/0/lBtXjcsn5C5kUpX12TOut6NxpxSK32lBsU7
cLko6NdaR+8vzDSLmhIlzgQlu/wfrvxlewk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:45 2024 by rpki-client on console-fra.rpki-client.org