Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae3bd7fb-dabc-338a-a5fe-ae66c15f9e27.roa
File:                     ae3bd7fb-dabc-338a-a5fe-ae66c15f9e27.roa (raw, json)
Hash identifier:          NqcySU/PnduZr3CZAiGg2O6qftBXiHRDNcrvRjPvXSE=
Subject key identifier:   A4:F2:39:74:DF:88:0F:A6:13:EB:14:57:AB:3B:CC:AF:24:E9:6E:DE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBEC91E06F2B9E211BA800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae3bd7fb-dabc-338a-a5fe-ae66c15f9e27.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1017:b4c8::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:ec:91:e0:6f:2b:9e:21:1b:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=4dc16c2c-f86d-4f25-80c8-7b11ab671882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7a:11:28:a7:32:64:9f:6f:3a:a0:e3:d5:71:
                    b6:cc:be:e1:38:ae:a4:14:87:fe:59:3b:4a:ea:fe:
                    4e:25:f3:81:c7:c6:2c:db:c2:ca:81:3b:4a:34:5c:
                    27:d4:51:e1:77:aa:28:87:00:e7:cb:7a:d5:cf:2d:
                    ff:da:9b:0d:02:ab:12:61:4a:98:04:1c:3c:09:1b:
                    73:63:8b:89:d1:59:77:bf:d5:ad:f0:69:04:4a:72:
                    6b:08:43:fa:9f:52:b0:d9:f7:34:9e:97:be:9d:fc:
                    d0:85:07:9e:35:d9:24:6d:cb:d9:53:e8:b3:0f:36:
                    14:61:69:e1:a9:af:1a:7e:cc:f4:ba:d9:df:bd:07:
                    62:06:ba:00:6b:ac:6c:97:54:62:91:6b:eb:a0:28:
                    17:5b:e4:6f:3f:d2:40:3a:57:5c:63:f0:6a:2e:61:
                    42:9c:e3:db:7c:4a:84:0f:2d:a3:39:5f:97:2e:0c:
                    78:73:e6:23:38:f7:69:3c:a4:b8:21:1e:9f:69:d7:
                    75:0b:a7:eb:3f:75:b9:b7:23:02:3e:54:cc:fa:d4:
                    be:cc:18:93:f3:df:5e:ae:f3:04:78:22:3c:0a:d4:
                    f2:7e:9c:59:da:79:d7:b4:6c:1b:6e:89:2c:13:fb:
                    b1:a9:71:71:83:72:dc:26:e7:f2:d5:8e:da:a2:35:
                    fc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F2:39:74:DF:88:0F:A6:13:EB:14:57:AB:3B:CC:AF:24:E9:6E:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae3bd7fb-dabc-338a-a5fe-ae66c15f9e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:b4c8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:35:b3:5a:e3:bf:0b:fd:da:13:11:b5:58:ef:38:83:3c:ff:
         bf:9a:9b:69:66:f6:83:3d:d3:3b:6c:6e:1c:0c:83:73:61:b9:
         e7:dc:5c:6d:ac:e2:63:2a:e3:97:6a:a8:02:74:10:1d:cb:ae:
         94:b1:45:8e:2f:6f:ef:f4:5f:1e:e2:93:53:87:11:17:b0:d9:
         32:4c:3f:68:cd:ee:4f:c5:ba:23:ff:85:7a:6f:5c:aa:7a:4b:
         6e:68:c8:30:4f:a6:45:85:23:82:50:d1:8d:3b:6f:dc:2b:d5:
         2d:53:7d:8e:11:4b:92:9b:a0:0b:55:5a:f5:5f:6f:44:25:69:
         0c:43:fe:62:3a:fd:dd:6e:f3:de:65:a5:a8:59:b7:0e:57:0a:
         f2:40:7d:b5:7d:bf:bb:cc:81:18:9c:ed:0c:f4:fb:03:4f:d3:
         4f:25:86:f0:91:de:12:2b:e5:95:27:5f:e1:1f:ef:cb:e8:1b:
         4e:84:49:dd:c0:92:9a:c7:42:7d:8c:86:1d:cd:4b:c0:e4:1b:
         1b:87:fd:2c:4e:a2:9e:df:c4:d6:19:f2:25:0c:c6:99:95:bf:
         41:07:d6:39:de:08:bf:71:1e:e1:6e:36:d8:c6:1f:ce:a3:8a:
         e0:74:a4:b0:59:af:7a:e1:97:c8:e7:ff:3e:64:1d:64:93:10:
         34:60:f4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:44 2024 by rpki-client on console-ams.rpki-client.org