Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae5f4963-68fa-3e79-8d20-4173db9a2560.roa
File:                     ae5f4963-68fa-3e79-8d20-4173db9a2560.roa (raw, json)
Hash identifier:          Qwjcr73UcGBB/3qnr11BMvagdzltw03MUyVOSajOzkA=
Subject key identifier:   F2:6D:7B:A2:7A:B7:76:FF:A4:60:5C:BF:20:CC:DB:18:C3:67:9E:36
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBDDAA0053096264596AE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae5f4963-68fa-3e79-8d20-4173db9a2560.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1012:a130::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:dd:aa:00:53:09:62:64:59:6a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=8eaca8b1-5c17-430a-82fc-61840f721017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ec:b5:56:48:0a:bf:89:a1:8e:87:d5:cb:2a:
                    f8:c2:5a:3c:36:40:5d:63:e2:3b:76:7d:f7:0b:89:
                    61:c9:ca:cb:c3:84:22:43:a6:82:06:09:e9:71:1f:
                    86:36:ff:4a:5b:ff:96:da:0d:bd:c0:1c:02:6f:9c:
                    cf:22:ca:30:5d:0f:6c:fa:e4:02:5b:0f:78:f6:cd:
                    7e:87:3e:b3:21:fc:f3:df:1b:b1:00:d8:fb:d1:22:
                    83:18:3e:76:c9:d5:96:d6:e3:c7:2b:4b:12:2d:30:
                    c1:83:05:e3:00:ef:32:c7:88:00:76:3d:ab:7a:57:
                    57:5d:56:c2:16:77:87:6f:80:cb:01:ed:d1:fc:c1:
                    63:c0:e8:8c:13:ca:b8:a4:41:ee:cf:2a:f3:7f:46:
                    65:35:db:aa:a3:89:e8:90:d8:29:60:c3:4c:1d:b4:
                    be:ba:c5:22:da:74:34:39:e4:3e:74:93:47:65:88:
                    9e:c0:af:bb:7b:a9:82:e5:d2:e5:2d:2f:74:58:6b:
                    aa:51:02:c3:85:eb:d1:cc:05:48:3c:dc:24:99:24:
                    a9:29:ef:fc:48:63:f4:ac:3e:53:00:79:53:ed:67:
                    43:ff:20:f6:a4:78:41:a9:4b:a9:39:91:8d:e0:6e:
                    e4:fd:34:c8:76:aa:14:fa:f8:2d:1c:dd:10:f4:09:
                    d4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6D:7B:A2:7A:B7:76:FF:A4:60:5C:BF:20:CC:DB:18:C3:67:9E:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae5f4963-68fa-3e79-8d20-4173db9a2560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:a130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:57:bf:5a:df:11:b1:17:8f:9d:c3:9a:fc:50:71:d4:8f:1e:
         d3:f1:2f:f6:26:22:34:a0:f7:3c:29:49:2c:a8:a5:c2:50:31:
         ed:d2:89:11:a4:41:7c:9f:52:4c:c9:9a:2a:51:b4:93:dc:76:
         62:ab:0c:d8:2f:29:b7:1b:38:9a:66:f4:ec:42:aa:82:70:d3:
         b6:21:28:1c:08:bf:b7:30:eb:29:75:04:c3:c5:b7:f2:60:e7:
         5a:02:c5:c3:52:e2:ff:11:d6:ba:96:72:81:24:3a:b0:45:2a:
         f4:f1:c1:04:d6:25:a1:e3:57:01:bf:25:9e:1f:f6:5b:a5:98:
         99:01:7f:e7:49:98:54:e1:89:69:29:be:ce:9b:6a:44:fe:c6:
         0d:af:ff:1d:68:2d:5d:73:79:10:23:43:f6:c1:35:97:ef:3e:
         d4:20:2c:cf:8d:4a:5e:40:4e:f8:e1:c8:bf:ef:ed:c6:59:9d:
         52:e3:f5:17:10:e3:48:eb:84:ce:20:27:f6:0e:73:ac:1d:4d:
         b4:73:00:6e:92:b0:69:a8:7c:c5:d8:51:f2:57:57:de:55:7f:
         44:30:06:c1:08:cb:24:3c:8d:16:5b:b5:3e:e0:49:ae:8b:c9:
         25:0b:e7:6f:d8:67:cc:94:a1:d3:b0:9a:c6:74:ba:26:70:08:
         5f:13:3e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:48 2024 by rpki-client on console-fra.rpki-client.org