Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2086c90-a19e-34c2-9f70-84be6d8812f7.roa
File:                     a2086c90-a19e-34c2-9f70-84be6d8812f7.roa (raw, json)
Hash identifier:          Oe4LPLW1DuOdKXjQUDT0BWIuKZ1pRmgpxBDGog6XIHw=
Subject key identifier:   04:FE:D1:14:A5:2D:28:10:97:27:CC:97:B5:BA:60:94:A4:57:2F:6F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4A9FC6BBC1E10390C19B3C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2086c90-a19e-34c2-9f70-84be6d8812f7.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100a:b1c0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:a9:fc:6b:bc:1e:10:39:0c:19:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=ef52927e-30f4-4844-a656-d366f671c346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:af:94:f4:75:d7:d3:5d:7c:74:32:47:4d:e0:
                    7e:b4:bf:69:85:94:7c:30:1e:5e:d1:2f:fa:42:d1:
                    c0:bb:74:0f:3c:67:ae:2f:33:9c:fc:77:48:06:41:
                    57:c1:05:a8:42:74:8a:01:e8:b0:34:4e:3b:da:4d:
                    4c:19:1d:20:14:27:25:3a:ed:59:3e:2f:e0:d9:ca:
                    8f:30:31:67:6d:40:ea:1f:d0:d4:3c:e4:7c:24:d6:
                    f6:da:98:64:93:85:09:f6:7f:a1:90:38:9a:09:08:
                    46:8c:b8:71:df:10:94:cb:78:45:db:73:78:e8:80:
                    7d:18:f4:3e:87:3f:e0:9b:c0:71:7a:3e:bd:82:90:
                    30:51:82:0f:1b:00:ad:eb:da:f0:bd:ad:25:95:d2:
                    67:b8:87:1e:78:bf:fd:56:81:28:9c:85:83:04:8a:
                    b1:d1:ac:2f:b2:7f:a3:11:59:57:22:f5:d2:57:9e:
                    ca:64:09:93:7a:3d:91:4a:d2:78:a8:c3:25:d4:f6:
                    da:b9:bf:80:5d:92:e7:36:fc:91:ed:1c:ed:98:80:
                    ff:2b:6b:7a:01:72:f0:e8:43:6a:ab:7e:d3:f0:4a:
                    40:a0:3e:a7:d7:44:85:b0:58:b9:5c:b4:de:1d:ea:
                    71:09:23:06:a7:88:c5:bd:06:80:d9:16:3c:19:e1:
                    33:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FE:D1:14:A5:2D:28:10:97:27:CC:97:B5:BA:60:94:A4:57:2F:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2086c90-a19e-34c2-9f70-84be6d8812f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:b1c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:bf:22:ae:78:7e:a0:92:eb:11:ba:ad:65:42:d1:fd:8c:ee:
         ac:7e:5f:27:59:d5:57:c4:3b:6e:7f:c1:cf:f6:fb:86:56:f6:
         82:2a:9f:9a:84:0d:39:e1:f9:d4:ec:33:77:f4:21:30:5c:61:
         36:f9:64:50:3f:ba:8f:4c:bf:0f:88:fb:4c:99:3c:d6:a0:9b:
         ad:75:a7:61:0a:13:f8:ef:cd:4f:e3:e5:dd:46:da:ae:6e:6e:
         28:f3:1d:78:39:d2:e4:14:30:22:35:6a:68:a7:17:c6:14:1b:
         36:70:1c:3a:a0:96:6b:35:b5:c5:e3:9b:38:89:9b:b4:e7:bd:
         7d:6a:01:f2:47:b4:3f:81:f5:cc:cd:6d:7a:11:b8:aa:9d:47:
         d9:54:24:12:28:1a:a3:ed:f6:1c:d4:b5:05:7e:fc:4c:4b:30:
         de:fd:5f:f1:ca:c0:cf:01:70:86:25:ba:eb:d9:6e:1e:b2:18:
         ec:56:d9:3d:ab:f3:46:d8:f5:06:c7:fe:bc:60:2e:d7:1f:9f:
         6e:fb:2f:c6:67:6b:f5:66:ae:eb:12:a4:9f:f3:ee:c0:a2:a0:
         e7:10:ab:8e:a9:6f:ab:b2:63:7e:d2:ce:e3:c6:df:a0:b8:b2:
         c9:1c:7a:66:20:12:67:0e:23:5f:d9:76:b6:60:30:6b:52:23:
         0c:78:c5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:41 2024 by rpki-client on console-ams.rpki-client.org