Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b452aca1-6e6e-3d87-b658-e44b8b3b0e23.roa
File:                     b452aca1-6e6e-3d87-b658-e44b8b3b0e23.roa (raw, json)
Hash identifier:          Oh5mcFTD/j12nVFeSylC71uy0+c36dFIyVcOvg/UqsE=
Subject key identifier:   E0:54:60:2A:6C:2E:40:55:F1:FA:47:F3:E4:B8:04:B3:34:9F:EA:83
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76E61D422150BD9D17DF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b452aca1-6e6e-3d87-b658-e44b8b3b0e23.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     701
IP address blocks:        2600:40ff:fffb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:e6:1d:42:21:50:bd:9d:17:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=0bfe2a16-e70f-4264-a436-9b561e2a8095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:33:ad:7f:5d:21:f6:1f:b9:08:d6:d9:b1:97:
                    00:fd:0d:6e:1c:93:09:dd:ca:27:de:f0:9e:52:14:
                    4f:d1:60:dd:24:07:d1:78:ff:c8:aa:84:28:bc:44:
                    4e:ca:f1:d5:26:94:54:06:b0:04:d8:c1:36:b2:88:
                    07:c8:3c:63:06:80:58:9c:6b:35:bb:55:81:2b:89:
                    6e:5d:b0:0a:14:8e:21:1a:54:98:5d:75:9d:d0:ca:
                    ea:f6:73:6b:60:a4:6d:54:f5:7d:6d:4b:f9:6e:5b:
                    8d:51:cc:37:bf:da:b0:2e:50:1c:2a:14:d2:61:34:
                    24:7b:5b:b5:6e:d8:7d:09:a2:dd:e2:44:ab:73:6d:
                    a7:e5:2f:3f:ca:46:0b:42:ec:fe:fa:45:7c:a2:0e:
                    c0:23:85:bd:15:13:93:10:03:5b:80:ce:8a:43:19:
                    c7:4c:ac:9c:c8:f6:9d:79:be:cc:63:ee:6c:ba:f1:
                    87:00:0e:af:17:2b:a9:5d:7b:71:89:36:18:2a:46:
                    dc:18:cb:63:be:3e:9b:1d:17:bb:90:b0:5e:fc:15:
                    7d:e5:e8:76:07:92:ca:27:a3:a9:18:0a:6d:09:57:
                    03:fa:d0:cf:b9:9d:99:62:25:33:bd:6b:54:77:09:
                    3a:8d:c9:ab:9f:43:a9:3d:c9:68:40:9a:c0:1c:14:
                    a3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:54:60:2A:6C:2E:40:55:F1:FA:47:F3:E4:B8:04:B3:34:9F:EA:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b452aca1-6e6e-3d87-b658-e44b8b3b0e23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:40ff:fffb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d1:64:0e:1e:ad:b3:a6:ec:e3:bb:88:85:f2:cb:ce:ad:39:
         4b:15:fd:b5:01:01:7f:6b:66:87:cf:c4:6a:99:ab:1b:67:9d:
         12:c3:e7:81:85:8e:8b:fc:71:cd:e1:54:d5:9f:28:dd:f5:98:
         22:b3:b5:56:77:13:d1:41:f0:2e:91:c6:ee:9e:99:af:54:eb:
         4f:99:e5:66:0d:97:07:f9:e1:0a:f8:a5:b4:35:fd:b4:75:c0:
         3b:a0:42:f1:f6:46:4d:63:8d:c5:69:dd:f8:24:55:09:f6:e0:
         67:3c:9c:a0:eb:b6:19:b8:f7:c8:41:f4:8a:0b:af:48:55:81:
         49:7b:97:3b:3b:f6:0d:8d:f6:aa:e5:8e:0a:c4:a5:3b:f2:87:
         3b:f0:97:be:6c:f9:08:cf:38:96:dd:77:22:1a:d9:99:e6:3d:
         3f:21:1d:ba:75:f2:05:a3:be:59:5f:2e:76:a8:20:67:e7:3b:
         85:69:a6:6c:00:5c:e8:6c:28:03:33:1d:a8:f5:08:db:6b:b1:
         9f:8f:3d:ef:31:59:39:a4:6c:c4:1f:e4:af:a3:af:25:5f:46:
         1b:8b:ec:c3:a1:5b:ff:b8:55:92:49:ae:d0:2e:c2:9e:fa:86:
         f3:e1:9b:e9:77:02:5f:80:3f:73:94:5b:fe:7d:0e:4c:08:d7:
         47:d6:df:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:45 2024 by rpki-client on console-ams.rpki-client.org