Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0e8011e-a937-3a15-a809-b062a8d11497.roa
File:                     a0e8011e-a937-3a15-a809-b062a8d11497.roa (raw, json)
Hash identifier:          tJ/2EE6U9G0TJUxgThZo8CCo18OYRnaYY2qgTiLPQ7s=
Subject key identifier:   69:D8:4A:01:95:1A:C3:91:F9:76:FD:AE:7F:8E:3A:31:6A:12:EB:34
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4A9FD53317A02FB88499A88
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0e8011e-a937-3a15-a809-b062a8d11497.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100b:a010::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:a9:fd:53:31:7a:02:fb:88:49:9a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=1bc4b6d1-dc4e-4c24-a311-697b141f8185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8a:33:ae:ea:a5:64:23:ae:f6:c4:07:ee:37:
                    71:c3:fa:25:b0:75:df:a9:92:64:2a:c2:39:2d:4a:
                    af:df:46:61:c5:f2:db:20:c0:6b:1c:32:1d:ac:a5:
                    79:4b:8a:63:eb:64:de:d5:2f:17:64:e5:4a:74:2d:
                    c0:4c:c3:46:67:39:6b:60:b0:00:4a:6d:7b:50:4f:
                    bc:75:86:12:8c:d0:af:d2:11:e1:d8:b9:fd:05:da:
                    1a:30:d2:c5:5e:c6:15:c3:27:a7:3b:3c:5e:58:2e:
                    14:7c:de:9e:59:36:4d:76:33:c3:5f:99:6c:2e:11:
                    2e:65:d9:87:b7:08:81:ea:cb:c8:6c:68:5a:8c:db:
                    be:2a:b1:03:56:56:2b:0a:d5:d3:2c:87:e8:a5:3b:
                    23:e3:7b:6b:43:bb:cb:8e:c0:79:d6:6b:36:eb:4e:
                    3e:43:57:d3:64:9f:c3:9a:7e:d6:0c:98:96:08:39:
                    1f:34:5b:b5:a3:cd:8d:84:fc:bb:c6:8b:b9:4b:e8:
                    0c:ab:ca:64:d2:81:dc:60:97:7f:98:ad:a2:f0:12:
                    57:cf:29:bb:9a:e1:c1:31:39:9d:dd:7f:83:3c:fa:
                    66:6f:a5:63:9b:3b:c8:ea:4e:b8:a3:90:50:0a:85:
                    a5:74:7d:37:3b:69:5a:ac:20:e1:61:7a:f6:dd:f6:
                    f2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D8:4A:01:95:1A:C3:91:F9:76:FD:AE:7F:8E:3A:31:6A:12:EB:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0e8011e-a937-3a15-a809-b062a8d11497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:a010::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:60:0f:7b:24:f4:49:e2:ce:f9:7e:38:9c:8d:53:ec:d2:23:
         a8:f7:7c:a0:fe:cc:84:a2:41:46:8a:5e:21:37:1b:02:8b:b8:
         c3:d1:9c:f2:03:e1:9b:b5:1b:be:b0:65:fc:71:9c:b3:cc:41:
         86:85:34:d3:04:b4:71:7f:e4:0d:1c:e4:f9:77:0e:89:db:8b:
         73:3f:ff:34:3e:42:f7:6a:3d:1a:34:a5:40:1d:1d:33:03:3f:
         42:42:71:0a:17:d4:6c:9a:38:7f:c9:9f:ca:01:f6:59:5c:41:
         83:28:6f:d3:e1:73:bf:0d:5a:21:21:7c:89:cd:23:27:d0:3a:
         28:6a:f8:97:ac:64:86:d9:9e:a1:bf:27:f9:62:c0:6d:09:b5:
         5d:c0:82:c6:67:54:8a:6c:68:c6:9b:a3:6e:23:92:48:fc:ad:
         01:eb:cb:ab:20:1d:8f:b7:fa:0c:b7:77:e9:90:58:e8:3e:3d:
         c5:d8:0a:df:a9:14:d4:3a:1c:c3:95:f6:83:82:51:0f:e8:42:
         5b:70:cc:a7:e9:d5:e8:36:d3:3f:f5:b0:f1:77:59:54:fb:09:
         cb:88:f3:29:59:44:da:2b:a9:c2:26:51:8f:e0:e8:fe:42:35:
         b7:e7:d0:8c:2c:3b:36:d4:80:a8:0e:1f:5b:e3:9e:a5:4e:dd:
         76:ad:15:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:45 2024 by rpki-client on console-fra.rpki-client.org