Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b117999d-4535-3920-93cc-6aa452710636.roa
File:                     b117999d-4535-3920-93cc-6aa452710636.roa (raw, json)
Hash identifier:          IHS+xYYKTyFB6//199OZe+6p3lUdhOMkg1kpnQhAkrU=
Subject key identifier:   75:60:35:37:82:C3:BC:2B:6F:B9:E5:12:20:1B:9B:62:E9:64:08:3B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76A848F37F62929094F140
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b117999d-4535-3920-93cc-6aa452710636.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1006:f040::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:a8:48:f3:7f:62:92:90:94:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=9b4958dd-e78f-4146-804d-5a85cc54a0e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:38:10:5a:33:91:45:b4:34:a6:3d:c2:95:89:
                    48:ff:2c:2c:f1:02:e0:a6:0d:a6:84:1b:ae:9c:43:
                    1c:06:4a:a4:dc:0f:85:a0:72:b0:67:32:4d:ee:05:
                    59:e0:da:bc:3d:fb:52:e3:7d:6c:b3:f0:71:0d:03:
                    45:38:5a:5a:f3:e9:1b:d4:9b:8b:2a:22:55:7c:fb:
                    51:7f:f9:cf:7a:92:93:5b:f9:01:f0:d4:33:e4:d5:
                    fc:9a:3d:68:a4:11:df:a8:4e:ff:71:f0:39:74:7a:
                    bc:ef:e4:da:cd:55:e6:09:22:ff:76:40:6a:84:53:
                    83:64:e6:a1:df:71:11:b5:92:94:3f:82:17:af:1f:
                    9c:9a:2d:47:84:17:15:35:07:2f:56:9c:f3:44:ca:
                    25:23:ae:75:ae:36:df:38:8a:10:ea:f4:12:40:eb:
                    a2:20:a0:ce:da:f8:c6:31:a0:e8:36:ae:54:63:b0:
                    a0:26:7d:37:51:c1:c7:5f:a1:67:b7:d4:4c:30:11:
                    a6:6d:77:97:2b:a9:40:80:92:57:40:ac:26:ba:a6:
                    1a:b2:22:71:a4:68:60:e5:9c:a0:44:45:77:26:63:
                    a4:e2:ee:6d:62:8c:fc:90:eb:a3:4c:6f:c4:10:71:
                    30:b7:54:5e:da:c6:d9:35:51:17:87:b9:0d:b2:72:
                    6a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:60:35:37:82:C3:BC:2B:6F:B9:E5:12:20:1B:9B:62:E9:64:08:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b117999d-4535-3920-93cc-6aa452710636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:f040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:73:ab:af:ce:cc:b3:0d:14:4f:f3:6b:eb:d8:d9:91:5b:7a:
         f0:78:d7:98:69:31:d4:b3:6d:ad:78:e7:82:10:a1:e6:58:33:
         0d:6c:9d:cc:f4:03:fe:6d:ce:18:41:4c:93:b7:30:af:b0:25:
         ed:89:2e:fe:62:5e:b4:db:8d:34:cb:99:a8:ff:02:4e:21:14:
         85:53:96:9c:cc:54:41:fa:e5:fc:4f:15:e1:c8:22:37:c7:68:
         45:7f:30:d0:55:0e:01:56:72:44:52:91:04:c2:91:ee:bc:b4:
         c5:ea:26:40:80:b2:d4:88:aa:7b:1f:41:76:d5:0a:c9:ec:be:
         6c:ac:f5:02:32:ab:6d:cf:b1:12:f7:4a:fd:5b:e7:0e:2b:d2:
         28:ee:18:2d:e0:ff:2e:36:8f:55:f1:a9:79:72:43:38:36:23:
         ea:f9:d4:b9:7c:14:ef:95:ba:26:2b:35:43:40:40:79:f5:6a:
         36:97:a9:0d:62:6c:51:e8:ce:a7:5d:e0:b6:3d:9c:96:27:f5:
         f0:a9:c6:28:11:31:86:9b:b2:8e:43:f9:f7:7f:e8:6e:a0:46:
         cc:ff:69:4b:75:97:4a:fb:3e:71:e2:a3:4a:54:ee:77:92:2b:
         e1:59:85:53:77:1e:6d:d9:2b:23:f4:31:18:04:ba:bc:22:ca:
         09:2e:55:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:13 2024 by rpki-client on console-fra.rpki-client.org