Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3218909-271a-3032-8db1-682a4ce33303.roa
File:                     a3218909-271a-3032-8db1-682a4ce33303.roa (raw, json)
Hash identifier:          1bdqhNW8kop2jecYjIkw6MSlcV7afUjFqBC0hT0JuKQ=
Subject key identifier:   60:62:4D:84:13:48:B1:5A:8B:64:EF:9A:AF:17:28:C4:67:E2:5F:D9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBD1381AA7C78825606C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3218909-271a-3032-8db1-682a4ce33303.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1010:6000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:d1:38:1a:a7:c7:88:25:60:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=77f77238-4367-4e46-9d06-3f1f29183f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:6b:22:93:77:46:85:ef:50:9b:b9:cb:eb:
                    b0:e1:f9:76:0b:f8:18:00:23:fb:b1:3f:35:75:f4:
                    8e:d6:50:85:0f:c7:82:85:f6:be:56:32:89:9e:ab:
                    ea:86:f4:6c:42:c7:b3:02:6f:61:3a:c4:1d:ae:2a:
                    97:fb:39:1e:f8:03:ac:37:4d:08:10:0f:a2:4f:0b:
                    12:63:5f:82:9c:f9:81:06:5d:54:9a:73:70:39:c7:
                    84:77:6a:7e:b0:8e:ea:e0:96:5a:e6:9c:ef:9b:59:
                    aa:0e:8e:ad:cc:d0:c5:1a:75:c7:f9:b3:fd:13:d9:
                    e8:b6:70:f1:dc:5e:65:3d:eb:f6:43:e2:24:13:be:
                    33:e4:c0:68:2f:83:6f:5c:15:dc:33:40:8a:3c:66:
                    20:6d:2a:a0:ce:59:60:db:bf:73:68:83:0e:c1:fa:
                    57:1b:20:a0:43:22:05:ca:42:21:94:cd:be:fb:63:
                    8b:8c:07:57:f1:e5:ea:80:ef:68:32:a3:1c:c3:51:
                    b4:94:87:64:77:6b:7e:a7:98:cc:5e:2b:fd:fd:7b:
                    25:e3:f4:d9:a1:50:8f:a4:33:00:37:e9:a4:be:f1:
                    a2:0b:e3:e5:6e:c3:af:b2:ac:2a:c9:d7:39:6a:57:
                    eb:94:13:c4:a3:16:f6:4f:6c:a4:35:e5:76:66:af:
                    25:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:62:4D:84:13:48:B1:5A:8B:64:EF:9A:AF:17:28:C4:67:E2:5F:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3218909-271a-3032-8db1-682a4ce33303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:7f:23:23:cd:93:6c:48:bd:d1:5b:b8:5c:e0:76:ed:ee:b7:
         40:90:76:a8:ea:cb:59:cb:e8:d4:37:5e:74:d0:0a:06:08:8c:
         85:9e:4c:55:0a:15:9e:a6:15:a2:73:8c:b6:e8:f1:6c:b1:8e:
         c4:80:11:98:07:fc:85:8a:71:42:23:00:c9:3a:1b:19:7e:87:
         48:19:bd:83:ed:74:b5:3b:c0:01:ae:b7:df:36:e1:ff:31:1a:
         fb:db:34:ee:0c:92:2a:05:b4:74:7b:0e:b6:fb:80:4e:6d:e5:
         e2:b1:76:e4:b9:7f:9f:d5:f6:ff:0e:8e:2c:0f:14:72:ca:d8:
         c5:50:a4:a1:8f:10:09:57:83:91:3c:2f:0e:30:12:a5:ff:5c:
         79:00:51:0d:2b:d8:7d:a7:f7:51:d1:8d:d2:dd:d1:b6:dc:91:
         ee:56:d3:94:1d:3e:18:5d:0c:6b:bf:ea:a8:91:73:28:ca:43:
         a3:b1:91:50:b0:14:41:1d:3c:a3:c4:81:42:91:87:f0:3c:af:
         4c:f1:de:f5:c9:4e:07:c6:34:99:7d:27:e7:31:92:b3:86:dd:
         29:7c:cc:04:15:fc:d0:e8:68:59:3b:ef:ff:4a:4b:b8:5d:6e:
         cb:be:ac:43:ef:b3:6f:a2:e4:cd:f4:92:60:7d:6a:2a:5e:47:
         0c:45:c5:96
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeJ69E4GqfHiCVgbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAxNDEzMDA0N1oXDTI1MDExMjE0MDA0N1owLzEtMCsGA1UEAxMk
NzdmNzcyMzgtNDM2Ny00ZTQ2LTlkMDYtM2YxZjI5MTgzZjBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDprIpN3RoXvUJu5y+uw4fl2C/gYACP7sT81
dfSO1lCFD8eChfa+VjKJnqvqhvRsQsezAm9hOsQdriqX+zke+AOsN00IEA+iTwsS
Y1+CnPmBBl1UmnNwOceEd2p+sI7q4JZa5pzvm1mqDo6tzNDFGnXH+bP9E9notnDx
3F5lPev2Q+IkE74z5MBoL4NvXBXcM0CKPGYgbSqgzllg279zaIMOwfpXGyCgQyIF
ykIhlM2++2OLjAdX8eXqgO9oMqMcw1G0lIdkd2t+p5jMXiv9/Xsl4/TZoVCPpDMA
N+mkvvGiC+PlbsOvsqwqydc5alfrlBPEoxb2T2ykNeV2Zq8lZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGBiTYQTSLFai2Tvmq8XKMRn4l/ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTMyMTg5MDktMjcxYS0z
MDMyLThkYjEtNjgyYTRjZTMzMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQEGAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB5/IyPNk2xIvdFbuFzgdu3ut0CQdqjqy1nL6NQ3XnTQCgYIjIWe
TFUKFZ6mFaJzjLbo8WyxjsSAEZgH/IWKcUIjAMk6Gxl+h0gZvYPtdLU7wAGut982
4f8xGvvbNO4MkioFtHR7Drb7gE5t5eKxduS5f5/V9v8OjiwPFHLK2MVQpKGPEAlX
g5E8Lw4wEqX/XHkAUQ0r2H2n91HRjdLd0bbcke5W05QdPhhdDGu/6qiRcyjKQ6Ox
kVCwFEEdPKPEgUKRh/A8r0zx3vXJTgfGNJl9J+cxkrOG3Sl8zAQV/NDoaFk77/9K
S7hdbsu+rEPvs2+i5M30kmB9aipeRwxFxZY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:46 2024 by rpki-client on console-fra.rpki-client.org