Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a7f50429-f46c-3b05-b610-eed087d60d94.roa
File:                     a7f50429-f46c-3b05-b610-eed087d60d94.roa (raw, json)
Hash identifier:          4/ZHUFj1psxEDIxLV0MZSUY0Yp55SU3jQfAs+ToY3t4=
Subject key identifier:   B7:F3:83:CC:64:5B:2B:81:99:5C:F9:25:3A:A7:9E:E0:87:19:56:95
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBD9382B5F1FE821A15480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a7f50429-f46c-3b05-b610-eed087d60d94.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1011:9100::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:d9:38:2b:5f:1f:e8:21:a1:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=658d1dcd-4640-4ba8-85f2-7cf888d5ce6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:60:15:1a:37:72:7d:b2:ab:af:96:cc:c2:dc:
                    7d:f1:41:06:a5:af:00:34:0e:d5:6e:25:00:2e:51:
                    ce:5c:c2:83:a5:a0:93:49:4d:bc:1e:c9:95:1f:41:
                    79:66:05:b6:48:b2:39:75:bb:d6:e4:e2:33:37:34:
                    68:da:32:c9:28:7c:f1:4b:58:c0:fd:b2:55:e3:09:
                    13:97:90:de:f4:0b:91:f6:87:57:b0:a5:f5:a7:0e:
                    26:93:44:95:b5:2b:4a:42:52:58:ee:99:f1:1b:d2:
                    61:fd:38:d6:0b:76:ea:f5:ad:8b:2d:75:78:63:c6:
                    cd:05:63:81:a6:b6:fa:f7:f6:f4:e0:c7:16:ba:48:
                    8e:af:ff:3b:95:c4:56:9c:b7:5a:28:64:98:be:63:
                    d8:7d:28:3c:4c:39:de:84:72:53:e0:34:01:ea:42:
                    a5:77:f8:1c:a8:19:6c:11:f1:06:ee:4c:71:00:4d:
                    b6:a2:12:71:05:cc:f9:96:83:d4:04:d8:ad:89:37:
                    2f:4c:a9:37:29:c4:89:05:10:2b:bf:7d:18:60:0f:
                    ee:d2:ce:e1:89:0c:09:3d:ef:7b:1f:ad:99:91:fe:
                    c4:ab:4e:b6:6b:93:29:21:78:f1:2c:19:6a:25:3a:
                    77:7a:8f:27:9a:93:61:c2:33:e5:73:74:01:84:f7:
                    c7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F3:83:CC:64:5B:2B:81:99:5C:F9:25:3A:A7:9E:E0:87:19:56:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a7f50429-f46c-3b05-b610-eed087d60d94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:9100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:4a:a6:62:a0:e0:f1:07:31:b2:4d:c6:cb:1e:9d:67:b4:6c:
         08:00:a3:ab:45:a3:58:3a:84:e2:9f:8e:5f:5d:8c:07:ff:d9:
         18:5e:ab:18:f9:cc:13:16:02:43:70:42:b0:bc:d4:b0:62:c5:
         2d:94:ee:8b:ba:32:e0:0b:f6:2d:8e:8c:92:81:ea:93:02:32:
         82:64:6d:ab:ce:25:48:70:f5:a7:0a:cb:33:09:11:8d:62:e4:
         a0:39:36:40:7f:f1:35:12:9a:5f:49:6f:60:c7:39:66:44:27:
         50:90:14:5e:8c:8c:5d:a9:8e:b0:ee:bf:13:66:3f:cc:bc:2f:
         8a:27:3f:83:57:cd:ca:8a:36:14:62:63:9b:24:39:88:34:1a:
         f9:73:7c:07:42:38:77:99:2e:e0:29:19:68:c2:b5:28:4e:0a:
         df:dd:d4:6b:19:c6:b7:75:ec:4e:34:d1:f1:da:3e:a4:5f:93:
         85:23:c6:49:b3:6e:07:25:6d:db:9f:b7:7b:ae:94:f6:ba:36:
         bf:dd:b0:72:cb:ea:25:4c:aa:25:c0:de:ed:38:ae:98:fd:f9:
         cc:b8:a5:17:36:7f:75:dc:c9:dd:0f:fe:89:a8:90:ba:45:bb:
         11:c1:df:c1:60:b2:48:c7:10:70:50:41:27:c4:d8:ae:5f:a1:
         bf:86:55:b6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeJ69k4K18f6CGhVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAxNDEzMDA0N1oXDTI1MDExMjE0MDA0N1owLzEtMCsGA1UEAxMk
NjU4ZDFkY2QtNDY0MC00YmE4LTg1ZjItN2NmODg4ZDVjZTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2AVGjdyfbKrr5bMwtx98UEGpa8ANA7VbiUA
LlHOXMKDpaCTSU28HsmVH0F5ZgW2SLI5dbvW5OIzNzRo2jLJKHzxS1jA/bJV4wkT
l5De9AuR9odXsKX1pw4mk0SVtStKQlJY7pnxG9Jh/TjWC3bq9a2LLXV4Y8bNBWOB
prb69/b04McWukiOr/87lcRWnLdaKGSYvmPYfSg8TDnehHJT4DQB6kKld/gcqBls
EfEG7kxxAE22ohJxBcz5loPUBNitiTcvTKk3KcSJBRArv30YYA/u0s7hiQwJPe97
H62Zkf7Eq062a5MpIXjxLBlqJTp3eo8nmpNhwjPlc3QBhPfH+wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLfzg8xkWyuBmVz5JTqnnuCHGVaVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTdmNTA0MjktZjQ2Yy0z
YjA1LWI2MTAtZWVkMDg3ZDYwZDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQEZEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIhKpmKg4PEHMbJNxssenWe0bAgAo6tFo1g6hOKfjl9djAf/2Rhe
qxj5zBMWAkNwQrC81LBixS2U7ou6MuAL9i2OjJKB6pMCMoJkbavOJUhw9acKyzMJ
EY1i5KA5NkB/8TUSml9Jb2DHOWZEJ1CQFF6MjF2pjrDuvxNmP8y8L4onP4NXzcqK
NhRiY5skOYg0GvlzfAdCOHeZLuApGWjCtShOCt/d1GsZxrd17E400fHaPqRfk4Uj
xkmzbgclbduft3uulPa6Nr/dsHLL6iVMqiXA3u04rpj9+cy4pRc2f3Xcyd0P/omo
kLpFuxHB38FgskjHEHBQQSfE2K5fob+GVbY=
-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:10 2024 by rpki-client on console-fra.rpki-client.org