Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af239a50-4aa1-3a21-b422-3b80ff79587b.roa
File:                     af239a50-4aa1-3a21-b422-3b80ff79587b.roa (raw, json)
Hash identifier:          vlCp+w2IBSxXldhRM//tRFxV9gJkuo1jYt4j8xOS64Q=
Subject key identifier:   1E:91:4D:EB:F6:0F:8E:24:64:1F:6D:8F:B5:5D:38:A4:32:F6:FB:65
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76A7E75E707F277BA44AC4
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af239a50-4aa1-3a21-b422-3b80ff79587b.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1006:b318::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:a7:e7:5e:70:7f:27:7b:a4:4a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=27c096a9-0a15-40df-b742-23534e05d16a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:21:01:c6:5b:ed:f4:61:97:fb:35:1a:18:e8:
                    42:0a:bc:04:45:80:03:06:29:40:9d:ba:2f:4a:8a:
                    a0:7f:d8:66:20:0b:48:8e:05:d1:5a:6a:2d:21:4f:
                    4d:a2:58:de:4a:dd:20:b4:db:b2:3b:fa:60:aa:80:
                    b9:a4:8f:25:3a:f9:7d:f9:93:6c:88:af:ce:2b:0e:
                    75:e8:96:e6:10:8a:7a:42:07:6f:c7:a2:cb:f6:6c:
                    12:57:fb:52:a1:2d:de:c2:cf:8f:8e:ee:8a:68:17:
                    07:cf:3d:c4:da:81:27:ac:91:17:5f:8d:5e:cd:f1:
                    3c:f2:98:79:69:31:cf:b5:2e:e9:9e:ba:bd:f4:26:
                    20:c0:65:ba:08:b4:2d:50:c9:1d:57:19:2e:f2:46:
                    51:e7:1e:07:48:ce:8e:ad:9a:64:2a:1f:4c:b2:73:
                    ae:23:70:73:2c:07:f8:8a:32:4e:a7:78:a3:5d:59:
                    98:dd:4c:b8:64:14:50:b6:8b:08:cf:10:44:70:cc:
                    f3:ee:59:83:79:6c:ae:02:d3:f9:58:d7:b6:0c:48:
                    9b:35:cf:f9:5c:c5:97:b3:b0:f3:52:86:07:de:11:
                    23:a4:5f:5d:44:7a:c0:11:f3:8c:9b:2e:90:67:4f:
                    42:94:87:25:cc:a0:67:e9:7f:fe:79:7c:f1:d4:82:
                    05:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:91:4D:EB:F6:0F:8E:24:64:1F:6D:8F:B5:5D:38:A4:32:F6:FB:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af239a50-4aa1-3a21-b422-3b80ff79587b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:b318::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:3a:1a:07:f4:e4:e7:f0:6c:43:25:bd:cc:d2:b2:6b:a2:df:
         33:53:e4:2c:fb:f3:52:61:1b:a1:3b:7f:18:11:96:08:54:54:
         3d:53:98:f4:1e:44:3d:85:d2:fa:60:e3:e3:18:ff:68:3c:87:
         e4:32:10:c7:fd:98:ee:b7:5c:3f:ce:30:8b:0a:85:90:79:9e:
         ba:fa:9f:1c:64:32:2e:a8:52:31:31:58:8b:05:64:92:ef:d7:
         8c:2e:19:4e:cb:53:25:e8:30:d6:bb:07:43:62:b5:df:b9:41:
         a8:a9:8f:0e:59:05:3f:a9:27:98:e3:6e:b8:ad:01:71:5b:5f:
         ef:ee:a2:af:a4:69:4f:c4:79:20:9d:c2:4c:dc:d7:5e:b5:07:
         a4:14:4d:d2:9e:b4:7a:fe:8b:7a:b8:36:81:2a:93:d1:27:52:
         cd:b2:01:33:65:b3:14:8e:6f:b6:16:24:37:05:ec:fe:f8:bf:
         95:c5:79:3c:05:60:6d:4f:56:17:ee:3d:09:ed:08:58:67:25:
         c8:88:cd:68:47:b9:fc:0e:a4:f4:71:64:59:ee:05:b2:93:fc:
         48:8a:b0:e9:f8:5b:d7:5d:9a:df:31:f6:bc:4c:71:93:1c:ff:
         0d:58:e6:8e:8a:f4:ce:89:64:cb:f7:32:c1:40:62:ee:6c:e6:
         fb:a0:06:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:12 2024 by rpki-client on console-fra.rpki-client.org