Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2665f7f-fb4d-3daa-8d8a-1016e0d07c68.roa
File:                     a2665f7f-fb4d-3daa-8d8a-1016e0d07c68.roa (raw, json)
Hash identifier:          vyCLHyJcGa2+kZSajV9gUl3pSEfhfApaNgY7s6w8ItY=
Subject key identifier:   18:C4:EF:88:83:CA:87:39:70:62:C1:D1:C0:1F:B8:8F:44:1E:42:CB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBED4662C072C098B83680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2665f7f-fb4d-3daa-8d8a-1016e0d07c68.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1017:d010::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:ed:46:62:c0:72:c0:98:b8:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=9741a162-e8ee-43ef-a65d-2a93d2a4b831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:81:f0:42:69:fc:65:c2:e2:7e:30:7c:38:6e:
                    81:38:59:1d:f4:78:dc:63:cb:16:86:74:f6:3e:6e:
                    8b:a7:65:04:e3:be:32:15:6e:e8:81:b5:8b:28:6c:
                    f0:e9:d5:0f:d9:af:cc:3f:06:f7:1a:36:91:09:30:
                    95:d1:bd:6d:c6:f2:ca:28:b0:fc:c8:22:5f:3a:ca:
                    1c:d1:24:94:42:b8:c2:90:ac:88:15:78:9b:df:4f:
                    01:25:f6:0f:dc:1d:0f:35:da:dc:2d:65:ce:50:74:
                    8c:d1:87:0f:17:88:a6:fc:f9:8a:f4:6b:ed:28:b4:
                    c9:d7:4b:37:15:1c:76:e1:12:0f:f2:72:7d:c1:0c:
                    d2:49:a4:89:85:39:2c:26:6d:ce:89:09:70:e0:b1:
                    54:15:2c:74:6d:c0:0d:58:f0:ad:7d:9a:13:4b:01:
                    8f:da:9f:bc:5d:a8:8b:36:93:7a:f9:6c:33:98:e9:
                    1d:4b:56:36:f5:dd:ea:dd:f4:8b:17:ab:f1:21:16:
                    e7:2c:aa:4a:80:d2:42:ad:c5:ef:91:07:05:79:b0:
                    d1:d2:d9:4f:e8:f8:14:e3:0b:95:38:8e:60:24:9c:
                    35:87:85:df:01:1f:d3:a4:b4:89:69:7f:96:80:5b:
                    87:10:35:6d:0d:48:ec:fa:1a:e2:8c:57:c5:0e:b9:
                    4d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C4:EF:88:83:CA:87:39:70:62:C1:D1:C0:1F:B8:8F:44:1E:42:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2665f7f-fb4d-3daa-8d8a-1016e0d07c68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:d010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:7a:90:58:94:c9:e8:e5:c6:19:60:0a:2d:a9:9a:82:9f:b4:
         4d:80:97:57:65:86:0d:e4:24:24:5e:32:95:68:fd:5a:3e:55:
         15:95:39:f3:d0:dc:dd:a1:99:c9:1a:cf:72:68:41:c5:01:7c:
         e2:c1:7b:be:d4:b6:dc:72:ea:33:ed:b3:5e:92:76:55:f8:ee:
         7b:33:61:46:6c:81:5f:9d:21:c9:b6:4d:b1:da:c8:ee:0f:73:
         15:c2:91:14:64:15:00:40:7c:05:40:17:c4:44:30:25:80:b6:
         0b:e9:d9:13:d2:0e:a5:c6:09:17:59:d1:a2:3a:56:5f:bf:c2:
         8b:8f:96:b2:be:0c:40:e5:e0:37:d4:99:ef:23:0e:03:d8:7d:
         e6:dd:da:8c:11:71:b9:56:0c:bd:59:fd:31:ec:18:ef:df:c9:
         69:d6:b4:13:81:9c:cb:a0:66:43:a3:73:66:44:b6:b4:bb:10:
         bb:33:f2:56:70:15:7a:3e:ef:bd:b3:b1:a9:62:5e:d6:c7:34:
         0e:b3:48:58:0e:3c:ac:b4:f2:30:57:bc:3c:71:22:7a:22:b2:
         e1:6d:e4:1a:e9:4f:0f:02:bd:16:7d:68:18:b6:ba:f1:61:0c:
         f6:4b:a3:83:08:9d:c0:de:80:40:a2:fa:2c:b0:d7:61:b9:06:
         e1:62:17:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:09 2024 by rpki-client on console-fra.rpki-client.org