Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a414a711-0dfd-3eff-a9ae-62813658b1ee.roa
File:                     a414a711-0dfd-3eff-a9ae-62813658b1ee.roa (raw, json)
Hash identifier:          wawmrkZZEpZtWz3qsPKB+8I7F2n5gMv9H6mAF3HKH88=
Subject key identifier:   B9:AC:D9:5F:8D:54:EE:2A:67:CC:DD:64:5D:98:F3:B5:54:25:F4:8D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76A03F2410D535E649C8A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a414a711-0dfd-3eff-a9ae-62813658b1ee.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1004:b300::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:a0:3f:24:10:d5:35:e6:49:c8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=c3d3257f-bdb1-4e98-b271-df729d3c3050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c2:28:e0:2f:9f:6e:92:c1:8e:1d:a8:d8:69:
                    42:b5:00:92:a4:44:b5:6d:64:0a:f8:9c:27:07:29:
                    18:f4:2e:a8:0c:4d:8a:a9:57:c2:83:01:c7:27:ef:
                    0b:1e:26:de:82:3a:4b:6f:45:3e:e6:4d:aa:9d:e2:
                    8c:47:3c:e0:6a:1d:f4:78:fe:c1:f5:d5:35:38:8d:
                    b0:57:29:f5:e9:ca:23:91:60:d7:8d:44:43:4c:56:
                    95:d2:84:c1:49:d6:fd:bf:e9:a7:df:a2:d4:0e:e5:
                    bc:50:2b:c7:f9:4d:8d:64:0c:a0:17:3f:d1:7f:e7:
                    9d:12:5c:2b:98:43:9e:da:fa:68:32:54:20:18:8a:
                    a8:d5:a4:4f:ef:49:62:5a:23:be:48:fc:99:46:65:
                    b3:5a:57:0c:37:f8:51:0d:45:8f:d8:c1:4a:37:49:
                    22:d1:79:4f:10:26:3c:63:cf:37:15:74:9c:25:9c:
                    66:cb:0c:ca:79:93:d8:cd:a8:03:f4:f5:e3:a9:77:
                    a6:5c:83:76:f3:b1:82:df:e0:22:72:4c:a9:a4:c9:
                    87:e4:0a:1b:7f:ac:1a:80:78:c5:7a:3f:7d:5c:22:
                    37:16:13:f9:e0:39:ce:df:ce:5f:42:79:55:84:94:
                    84:51:16:45:39:49:80:01:66:0f:4b:ab:58:47:d2:
                    ba:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AC:D9:5F:8D:54:EE:2A:67:CC:DD:64:5D:98:F3:B5:54:25:F4:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a414a711-0dfd-3eff-a9ae-62813658b1ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:9b:f9:99:56:26:0d:d1:65:e3:7f:1b:04:12:17:c8:94:fa:
         d2:bc:38:12:00:41:f6:cf:f9:de:c1:47:44:9f:54:71:5f:7b:
         15:40:b8:5d:8e:0e:34:29:be:48:6a:9d:0a:67:48:5c:5f:5c:
         71:31:b8:67:75:20:1d:6a:f8:52:b5:63:7b:8f:57:3c:b7:e9:
         5d:d4:0c:da:6b:81:3f:4b:b3:b4:af:c7:43:93:9e:fe:aa:61:
         d8:a1:83:2b:92:dc:d6:ff:ea:9d:04:fc:81:3b:22:97:1c:45:
         83:39:a1:4f:af:66:c0:fc:0b:3e:fb:e8:a4:df:69:fe:75:68:
         10:66:35:3b:cc:3b:02:d7:fb:2a:19:80:75:08:da:6b:14:37:
         f7:41:da:6b:46:c9:fb:ab:98:b3:81:6d:26:0a:44:7f:bf:45:
         e1:c4:4a:df:56:a2:77:07:58:9a:03:bf:67:fb:b7:c7:f0:ba:
         79:11:29:06:f3:87:3a:de:27:ac:2e:22:e2:d3:08:13:71:89:
         81:dd:a4:ff:c3:5b:28:27:f2:de:86:1d:38:1e:78:c5:90:48:
         f9:9c:1f:ad:13:a1:2e:35:52:15:7d:fe:b8:0b:a3:7c:35:fe:
         72:fe:cd:52:20:c5:0e:ec:8b:8f:0b:8c:23:d7:c5:9f:58:e9:
         39:5b:0c:b7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeddqA/JBDVNeZJyKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
YzNkMzI1N2YtYmRiMS00ZTk4LWIyNzEtZGY3MjlkM2MzMDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8Io4C+fbpLBjh2o2GlCtQCSpES1bWQK+Jwn
BykY9C6oDE2KqVfCgwHHJ+8LHibegjpLb0U+5k2qneKMRzzgah30eP7B9dU1OI2w
Vyn16cojkWDXjURDTFaV0oTBSdb9v+mn36LUDuW8UCvH+U2NZAygFz/Rf+edElwr
mEOe2vpoMlQgGIqo1aRP70liWiO+SPyZRmWzWlcMN/hRDUWP2MFKN0ki0XlPECY8
Y883FXScJZxmywzKeZPYzagD9PXjqXemXIN287GC3+AickyppMmH5Aobf6wagHjF
ej99XCI3FhP54DnO385fQnlVhJSEURZFOUmAAWYPS6tYR9K6EwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLms2V+NVO4qZ8zdZF2Y87VUJfSNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTQxNGE3MTEtMGRmZC0z
ZWZmLWE5YWUtNjI4MTM2NThiMWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQBLMA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEmb+ZlWJg3RZeN/GwQSF8iU+tK8OBIAQfbP+d7BR0SfVHFfexVA
uF2ODjQpvkhqnQpnSFxfXHExuGd1IB1q+FK1Y3uPVzy36V3UDNprgT9Ls7Svx0OT
nv6qYdihgyuS3Nb/6p0E/IE7IpccRYM5oU+vZsD8Cz776KTfaf51aBBmNTvMOwLX
+yoZgHUI2msUN/dB2mtGyfurmLOBbSYKRH+/ReHESt9WoncHWJoDv2f7t8fwunkR
KQbzhzreJ6wuIuLTCBNxiYHdpP/DWygn8t6GHTgeeMWQSPmcH60ToS41UhV9/rgL
o3w1/nL+zVIgxQ7si48LjCPXxZ9Y6TlbDLc=
-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:52 2024 by rpki-client on console-ams.rpki-client.org