Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad802ac5-7a02-354f-a55b-e095d4c7d9c1.roa
File:                     ad802ac5-7a02-354f-a55b-e095d4c7d9c1.roa (raw, json)
Hash identifier:          gmkc4mbxuxS64eeg6TDA5CETIJy0JB5wGzqcD5BtmMo=
Subject key identifier:   DE:D9:4C:A1:07:F3:AD:E5:1B:46:9C:A0:37:FA:99:DD:6E:4B:EB:33
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBE34D1399F3222B316700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad802ac5-7a02-354f-a55b-e095d4c7d9c1.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1014:b100::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:e3:4d:13:99:f3:22:2b:31:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=5ed7691f-adca-4036-8d0c-f9f396dc9e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a0:6c:0e:8d:05:6c:c6:95:31:be:3a:56:09:
                    45:9f:3f:e3:30:fc:88:ec:c0:14:bc:b1:95:e9:42:
                    65:87:bd:96:1e:73:b0:98:9b:00:1b:fa:f5:7e:3f:
                    eb:14:4e:77:41:7e:5e:95:76:4c:19:1c:df:ce:d8:
                    04:cb:9c:78:4e:0f:54:33:99:0c:c6:48:db:c0:8b:
                    52:11:b7:7d:f5:8f:fa:79:a6:22:bf:37:bd:03:b4:
                    c3:62:68:5a:83:98:df:ff:a2:c2:c7:0e:9c:01:56:
                    c8:31:83:bf:8d:ba:bc:d7:92:12:d9:38:7a:29:31:
                    42:c9:fe:57:dd:78:50:a4:67:64:89:14:33:46:f2:
                    fb:cd:9b:d9:79:c8:1e:e4:09:24:84:6a:87:25:07:
                    e5:cd:0e:0a:32:6f:2d:f0:77:f2:6b:e1:2e:19:15:
                    5f:8b:9e:20:8c:20:b2:c9:14:e7:53:4a:24:05:b8:
                    d1:cb:74:74:7c:42:2b:8e:3e:32:09:c4:17:ec:95:
                    84:33:3a:b9:6c:51:52:1e:ef:b9:50:f6:2a:52:ed:
                    df:fc:df:f9:e9:1b:2e:28:10:7f:0c:66:70:6c:27:
                    5c:77:65:6c:a6:6f:15:91:cb:b4:55:a7:6d:11:aa:
                    b7:5e:79:98:bc:6b:64:a1:0d:29:13:dd:e3:ee:5f:
                    48:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D9:4C:A1:07:F3:AD:E5:1B:46:9C:A0:37:FA:99:DD:6E:4B:EB:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad802ac5-7a02-354f-a55b-e095d4c7d9c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:10:b3:bf:76:50:ab:9d:85:63:bd:a6:ad:1f:98:c2:b4:ce:
         61:1f:dd:1c:4f:d6:dd:8b:3a:c7:ea:54:3c:73:9e:aa:01:75:
         1b:c1:32:d9:d7:0b:f4:25:01:01:e3:fa:f3:c7:55:04:54:5c:
         2b:3c:dd:73:b8:c7:1b:92:f8:cd:ed:d4:8b:88:ed:db:a0:d1:
         d6:e7:10:33:36:29:82:7b:ee:71:dd:23:c8:1c:b6:3f:1a:61:
         34:ed:aa:3d:a9:6d:82:21:e0:9f:a2:b1:08:73:99:37:b5:48:
         d2:f5:8a:b2:e4:7c:13:16:28:f1:ae:83:80:bf:aa:39:75:4e:
         b0:a0:87:2c:04:2a:6a:53:81:cc:02:c3:bf:a6:0d:23:ce:25:
         b8:b7:58:39:35:a8:b7:30:2f:04:39:6b:e3:66:6e:8b:af:45:
         88:b0:20:5b:92:c7:ce:a3:2d:8a:86:7c:18:1c:26:00:60:03:
         7a:97:a3:cc:12:06:ba:2e:17:ff:80:d6:cb:c7:9a:27:41:85:
         38:86:65:31:b4:c6:cd:3f:83:7d:49:d3:42:da:85:d8:87:85:
         6b:25:f3:27:61:dc:15:0b:e8:83:fe:0b:98:d1:00:f2:1b:45:
         2f:e7:f8:f8:70:45:8a:0f:b8:b6:6b:cc:f5:19:8a:b4:c7:f3:
         2b:e2:89:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:47 2024 by rpki-client on console-fra.rpki-client.org