Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad4be411-309e-39c3-8886-ccee81c8dedc.roa
File:                     ad4be411-309e-39c3-8886-ccee81c8dedc.roa (raw, json)
Hash identifier:          RYtp+jdz+gf3jPu4Eax+SPU8A79E/ZrU4BNN8Ck/Zv0=
Subject key identifier:   18:64:46:61:60:F0:6D:3B:97:5A:8D:8D:72:08:5E:F3:CD:B2:6D:D1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBD22F4F385539AFBA7600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad4be411-309e-39c3-8886-ccee81c8dedc.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1010:a120::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:d2:2f:4f:38:55:39:af:ba:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=f4fa0943-2be6-4169-a855-aa6fe40e6f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:b8:be:e2:3b:59:f3:92:54:49:98:9c:41:
                    c1:c0:1c:00:91:5c:5a:81:12:17:83:73:f1:89:4b:
                    41:98:c5:be:9f:0c:c1:15:52:d4:81:77:5b:8a:6d:
                    a4:ca:7f:9f:39:b0:c4:fb:a0:9e:8e:47:f4:f1:f4:
                    74:3b:14:40:69:97:45:f3:bb:b7:c5:9a:96:4f:ff:
                    66:12:0b:f9:77:c4:d6:05:5c:54:c8:ad:fb:0c:fe:
                    40:92:d3:a9:a7:22:08:df:73:22:83:fe:d7:ec:e8:
                    ed:57:1f:52:32:be:be:11:0c:32:0e:90:fa:96:00:
                    64:00:9a:60:4f:8e:58:72:0d:91:ef:cb:84:b0:56:
                    9d:6f:88:7f:32:0c:c9:4a:65:d4:5c:73:be:99:02:
                    93:c0:cc:59:d8:f7:9b:b9:80:73:c9:69:c0:2a:d8:
                    1e:cc:ae:85:38:ae:6d:f4:c0:07:04:e7:c0:38:9b:
                    63:8b:1d:b6:e8:66:5a:f9:00:fd:76:f1:d2:36:19:
                    92:eb:1f:38:34:5c:9b:c6:e6:2e:5b:d2:73:3c:00:
                    1a:2a:fb:98:36:75:0c:e8:d6:70:ee:35:30:ed:20:
                    ec:91:4f:2a:ed:7b:e0:52:e0:6c:90:d7:ee:72:6e:
                    89:69:98:9f:7f:46:bf:c8:18:48:99:1e:bd:13:25:
                    8f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:64:46:61:60:F0:6D:3B:97:5A:8D:8D:72:08:5E:F3:CD:B2:6D:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad4be411-309e-39c3-8886-ccee81c8dedc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:a120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:20:9b:2d:1c:b0:ad:e6:9a:d4:35:4f:5c:4d:e2:41:23:27:
         b8:8e:be:27:af:ce:e0:5f:63:ad:52:f7:57:9c:ff:5a:08:a7:
         3e:2c:3b:91:43:a8:c9:6b:01:cd:50:3f:b9:42:7d:de:8e:73:
         06:6b:39:30:fc:e5:62:cb:57:6c:18:0b:05:4d:5f:dc:39:9c:
         c8:d2:5b:94:b8:e0:b3:26:be:77:b0:f5:92:b9:a8:e5:6a:65:
         db:0e:58:c1:75:42:c2:3c:97:2b:2f:03:95:35:16:0b:73:82:
         77:01:f9:cf:9e:bd:b7:75:36:f3:9a:b1:99:91:da:0f:58:9b:
         a8:3c:18:d3:06:a9:30:ac:e4:fa:69:39:79:4e:d1:a2:f8:d9:
         a3:92:95:7b:3a:d4:d8:b6:be:c1:61:5b:7f:b7:20:06:73:88:
         97:81:ab:8a:39:74:52:27:dd:2f:11:29:f4:12:61:97:dd:03:
         6b:31:51:49:d9:e6:ea:c3:be:22:6e:30:0a:8a:20:96:19:b2:
         7c:8b:87:90:08:e7:d0:8b:b0:7c:4f:d0:b4:cf:60:f8:0f:77:
         7e:52:cd:4d:bc:22:d3:cd:c0:cb:9b:5f:06:c8:32:ff:d3:8c:
         24:76:86:32:98:dd:62:41:b1:d0:a3:fa:1a:57:06:d7:cf:f0:
         81:cf:2b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:47 2024 by rpki-client on console-fra.rpki-client.org