Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae0e88ca-9ee1-3c92-ba7c-7cdaa8cc4ee8.roa
File:                     ae0e88ca-9ee1-3c92-ba7c-7cdaa8cc4ee8.roa (raw, json)
Hash identifier:          272waGMoXlPF2UoZOotJL3A8KI38v38oHRSGSCwlhvg=
Subject key identifier:   DE:5B:A8:3B:FB:7F:53:A7:7A:92:D0:59:0B:21:7A:EB:C5:03:B7:4F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA0D6B2C4F841476022D60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae0e88ca-9ee1-3c92-ba7c-7cdaa8cc4ee8.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100e:bf1c::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:0d:6b:2c:4f:84:14:76:02:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=dca53769-0bec-45bd-b6de-367387764cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:4e:4c:8b:f5:8a:85:cf:6d:18:f1:6c:e4:
                    ec:9c:78:81:f2:13:bb:c2:19:76:57:a8:73:fe:21:
                    78:41:da:96:79:37:48:ed:c0:5e:51:c0:67:c3:6e:
                    76:e4:59:b6:ed:1f:ed:0b:64:68:2d:28:ca:4b:e5:
                    f5:eb:c1:b8:a3:0f:99:f0:fa:4a:81:06:88:fe:b7:
                    10:40:6e:81:1a:f4:be:6a:19:07:a2:f0:49:41:89:
                    01:4b:52:02:8b:32:05:f5:bf:c0:22:ef:f7:c1:5a:
                    34:87:24:2e:59:b2:94:02:72:89:64:e5:2a:1c:ac:
                    31:db:2c:d8:dc:93:5e:61:9e:89:58:cc:5f:56:58:
                    af:82:e5:36:62:bb:d9:07:04:ed:14:aa:7c:8e:f6:
                    43:6b:3c:cd:ee:ba:de:a6:b6:8c:32:20:8d:1a:5e:
                    91:a8:77:1e:7b:7e:f0:16:e1:4e:b6:3d:e0:c7:a8:
                    88:c2:31:58:78:72:15:ff:41:3d:9d:f9:79:67:b0:
                    67:1b:fa:1f:fb:7f:62:c2:52:60:f3:4a:1e:9a:9b:
                    4a:4f:64:ff:0f:b5:2b:70:f5:05:5d:9f:4d:1e:66:
                    b0:3a:58:07:01:05:46:5c:bd:d9:0c:c9:9d:91:2c:
                    12:2d:2f:bd:2e:72:82:ac:27:6b:eb:fa:9a:f2:29:
                    25:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5B:A8:3B:FB:7F:53:A7:7A:92:D0:59:0B:21:7A:EB:C5:03:B7:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae0e88ca-9ee1-3c92-ba7c-7cdaa8cc4ee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:bf1c::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:91:65:c5:15:73:ea:3a:39:3f:37:d9:db:69:63:f0:4c:0b:
         65:87:36:b2:49:ad:c8:13:64:62:5d:a3:28:ab:6c:67:df:b7:
         eb:e3:74:1e:6b:8b:77:22:a9:68:34:35:1e:ec:e6:ff:eb:05:
         1e:0f:93:ec:24:fd:60:ab:da:66:25:79:3a:6d:cc:23:f5:48:
         cc:a0:d5:48:49:59:d3:91:60:e2:18:e3:4b:d1:01:78:a1:1a:
         4a:2e:76:0d:54:65:3f:5d:ec:7c:2b:6f:d7:52:06:eb:39:e9:
         f8:06:7a:d1:9a:f1:5c:fc:6f:d2:96:39:de:b0:44:70:3b:75:
         53:5e:64:19:fd:1c:35:09:39:10:d1:97:55:0c:62:48:9f:12:
         93:04:05:a7:da:77:c4:18:63:a3:e4:a3:40:de:38:34:a4:65:
         d6:d0:17:e8:4a:41:65:a1:07:77:e4:6b:f1:a4:e5:22:c9:93:
         85:53:f0:4c:93:b8:e8:8f:03:5d:61:8f:be:ac:23:a4:4b:9b:
         d5:b3:15:01:59:d6:70:b9:98:a1:7e:9b:39:63:b0:13:fc:f6:
         2a:11:57:e8:b3:70:89:0f:26:5b:7b:4f:9b:53:a3:58:68:66:
         9a:25:95:3e:bb:60:0a:70:84:bc:d9:21:78:69:1c:0d:ef:40:
         cc:01:e7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:44 2024 by rpki-client on console-ams.rpki-client.org