Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e1dd15f-5ab7-3035-a011-8b284ec8c9b8.roa
File:                     9e1dd15f-5ab7-3035-a011-8b284ec8c9b8.roa (raw, json)
Hash identifier:          TfVL3dNgaq+/bfDavxFEsyn4EJL38Gd8gpcpAWEzGmw=
Subject key identifier:   4F:35:27:A0:9F:8C:C9:86:0D:45:83:96:FE:A8:69:36:56:6E:1B:13
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA0BF38680BB1AE965C600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e1dd15f-5ab7-3035-a011-8b284ec8c9b8.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100e:b1ec::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:0b:f3:86:80:bb:1a:e9:65:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=1c49e99d-ea62-4183-ab26-2cbc894d3158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f0:e5:d9:c0:16:db:6b:13:d3:57:cb:72:84:
                    48:87:6d:b7:79:d6:29:a9:67:8f:32:21:96:40:32:
                    ee:4b:ff:43:06:dc:97:59:93:c5:31:39:7b:b1:c2:
                    04:07:e4:16:d5:f7:00:e2:1e:d6:b6:e9:16:31:7d:
                    f8:ad:e1:b1:d7:5a:bf:e7:0c:95:03:5b:05:d0:99:
                    05:d4:71:df:62:8d:9c:12:82:79:cc:00:0c:96:19:
                    93:68:19:d6:0a:a5:ff:4e:9b:05:15:44:75:de:d4:
                    b5:71:82:e7:60:c6:72:3d:e0:c1:be:5c:d1:dd:0a:
                    f9:ab:9e:98:17:5a:ae:a9:8b:ae:17:0e:3f:5d:8d:
                    55:b8:95:af:47:32:23:50:24:c5:d0:ec:3f:79:08:
                    8c:8e:d9:9c:60:aa:c4:28:55:14:c9:10:ab:28:a2:
                    d0:d6:8a:13:79:23:98:37:c5:78:1d:49:d0:f8:b3:
                    22:1e:d1:c1:5b:95:57:82:a7:2c:0a:18:6c:ba:31:
                    3e:5d:95:8e:d0:a1:8d:e6:a5:eb:28:e7:a0:cf:2c:
                    4e:8f:94:4d:e6:27:c2:26:e1:1d:d0:c7:62:c2:33:
                    43:4b:46:16:c2:d1:59:07:06:a0:57:3e:3f:35:86:
                    05:b7:57:76:4f:b8:90:e0:8a:2a:86:0f:22:f8:b5:
                    5f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:35:27:A0:9F:8C:C9:86:0D:45:83:96:FE:A8:69:36:56:6E:1B:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e1dd15f-5ab7-3035-a011-8b284ec8c9b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b1ec::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:8a:a0:4b:00:c9:d6:00:e5:cf:9f:d6:ac:c6:a6:ff:fb:fb:
         4c:f2:1c:7b:a2:01:22:bf:c6:53:3d:d0:38:7c:8b:32:85:bb:
         29:51:b3:da:fe:27:5b:94:c0:3d:ac:7f:ee:8d:4b:34:e7:08:
         ee:dd:f1:9b:0d:b2:45:73:72:12:ce:ce:d5:46:f8:67:2c:ec:
         27:50:41:32:b0:f3:86:0a:9f:5a:b4:0c:ed:fe:39:c0:ae:6b:
         3a:f2:ef:c7:70:b9:b9:be:cf:9e:83:5a:9e:e6:07:c7:89:37:
         44:de:76:0c:32:7f:5a:04:74:e2:41:43:41:59:68:c0:74:9f:
         01:47:3f:be:7d:1a:81:a5:4b:4c:ce:74:60:59:44:a7:4a:a9:
         46:a4:1f:c3:72:e0:d2:5c:8a:ce:a9:b0:2f:e3:74:cc:91:b1:
         da:45:bc:b5:4b:30:fa:a4:74:a2:0f:55:62:81:2f:65:dc:4d:
         78:12:b7:3f:6c:5a:ed:45:62:f3:ad:c8:6a:c9:13:3f:68:57:
         4b:61:c2:fa:f4:77:8b:7b:e5:58:b2:5b:b1:3f:7f:17:a8:fd:
         f1:4c:90:ce:e9:f6:cb:c4:89:59:d5:c6:ca:90:8c:ba:b4:c1:
         03:d6:01:e9:d1:40:26:0d:b1:65:08:a1:91:28:20:f6:a8:16:
         87:ea:eb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:41 2024 by rpki-client on console-ams.rpki-client.org