Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa1837c1-d762-3efd-9e89-b6c15d4a460d.roa
File:                     aa1837c1-d762-3efd-9e89-b6c15d4a460d.roa (raw, json)
Hash identifier:          yaeEoSz37VFsn48N4tQy98MlAiFJZWrTT2xXWcM+mA4=
Subject key identifier:   F3:BB:6B:80:A8:D6:7B:18:73:91:B6:5D:0F:04:6E:69:F2:16:A5:6D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846E3E1EBF85AAA21D7716C0880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa1837c1-d762-3efd-9e89-b6c15d4a460d.roa
Signing time:             Fri 16 Aug 2024 01:36:43 +0000
ROA not before:           Fri 16 Aug 2024 01:36:43 +0000
ROA not after:            Thu 14 Nov 2024 02:36:43 +0000
asID:                     6167
IP address blocks:        2600:100d:b1d0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:e1:eb:f8:5a:aa:21:d7:71:6c:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:36:43 2024 GMT
            Not After : Nov 14 02:36:43 2024 GMT
        Subject: CN=4cea16e5-a550-40fe-b8f7-4fbf3f4c7cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a1:31:5d:94:42:b1:1e:a2:21:d5:71:87:5d:
                    0e:c0:1d:55:68:b0:88:e5:fd:8e:1b:a6:91:f2:51:
                    f0:5d:94:eb:5a:32:5f:06:93:bf:85:46:7b:a9:25:
                    15:8b:c1:f4:7f:01:62:63:0e:77:b7:6e:ec:36:17:
                    c1:eb:57:16:25:b7:5e:ff:6b:73:97:d3:46:2e:31:
                    a8:b0:51:90:89:fd:d9:96:68:7b:2f:7f:93:97:d8:
                    ea:41:32:ed:b5:ec:64:03:5b:73:16:19:7a:96:e1:
                    11:6b:ab:70:71:4f:7a:77:8a:4f:f8:b2:a1:8c:da:
                    ab:c6:e9:c0:58:1a:0b:58:bc:ae:96:61:c7:04:60:
                    33:1c:39:9a:e1:dd:78:0d:76:94:ec:63:50:36:6a:
                    79:ac:f7:ea:cb:fb:b7:2a:de:05:17:9c:9a:6b:92:
                    c1:60:5e:51:8d:b8:02:d9:83:94:7a:dd:2f:c3:17:
                    c5:3f:50:bc:ca:cf:19:0d:ae:fd:1b:90:b0:1c:a9:
                    b0:a5:ff:af:4c:e1:70:60:24:51:1e:ed:7d:05:ab:
                    30:fa:aa:fb:1a:01:77:50:39:91:ff:40:5e:69:cb:
                    54:48:03:ea:28:66:73:03:e5:67:d9:35:29:6e:da:
                    14:51:1b:85:2c:8d:31:c9:4f:23:74:6e:cf:29:b2:
                    a5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BB:6B:80:A8:D6:7B:18:73:91:B6:5D:0F:04:6E:69:F2:16:A5:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa1837c1-d762-3efd-9e89-b6c15d4a460d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b1d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:b7:a2:c5:b6:05:4e:9f:f2:45:48:2c:41:28:09:d9:95:45:
         ae:1c:67:b6:87:7d:c0:17:79:09:67:39:78:45:56:01:c1:b9:
         18:3b:e7:be:ae:0c:ed:20:83:c5:b9:fc:a8:51:48:49:e5:77:
         86:ba:8e:f0:5e:27:41:e2:0c:95:fe:3a:ab:96:50:1d:47:42:
         58:33:bf:1e:a5:d2:f6:b8:8a:60:92:1c:43:30:f9:58:88:15:
         28:df:7b:32:6d:bc:90:b9:df:e6:69:0f:fd:7a:f4:85:72:42:
         82:0c:85:66:9d:8e:06:51:c9:32:df:85:52:b1:23:3e:94:37:
         23:3b:0c:da:ce:92:46:fd:be:d2:21:6a:02:d6:db:54:81:61:
         23:4a:9d:30:7d:66:5b:5a:6d:81:ba:13:87:79:29:18:15:b0:
         15:4f:e5:c7:cf:7a:b7:71:35:dd:76:f4:07:29:6c:15:9e:4b:
         94:05:eb:4e:04:ba:1d:01:df:10:21:7c:e2:2e:1a:b8:5b:1c:
         85:72:a0:02:b7:37:a0:68:8b:13:5b:4f:ed:92:92:ed:fe:59:
         98:15:23:67:28:9d:42:14:f0:06:8c:e4:72:6a:fc:8e:52:1f:
         eb:7c:27:e5:9d:6e:8f:f9:12:2a:c1:76:bc:51:d6:e9:7e:15:
         18:ba:31:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:54 2024 by rpki-client on console-ams.rpki-client.org