Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5ed2d30-ac5c-35e0-b5fd-7bd16f67b53e.roa
File:                     b5ed2d30-ac5c-35e0-b5fd-7bd16f67b53e.roa (raw, json)
Hash identifier:          A5hTFS7sxsrhxRdPPJc5NkclXblUK2j6SNhd1hyes4w=
Subject key identifier:   2E:84:AC:BC:82:D4:D7:E0:15:96:C3:72:31:E1:1E:44:B2:20:34:E6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76A60EAE8962AC5037BB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5ed2d30-ac5c-35e0-b5fd-7bd16f67b53e.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1006:b070::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:a6:0e:ae:89:62:ac:50:37:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=19f4f58f-2c84-4b66-bda6-d75f5692f9d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ec:d8:1d:39:1a:54:09:30:73:00:8f:81:81:
                    4d:fc:7b:7f:63:fd:ba:c2:b4:21:5e:60:dc:02:3e:
                    ae:14:ab:0e:7a:c4:00:3c:aa:ba:1b:09:0c:a5:a8:
                    72:08:9f:25:6e:f6:36:6e:73:13:65:fb:96:00:0f:
                    b3:92:7c:8c:e4:22:0a:02:ee:58:8e:e2:12:b7:91:
                    f5:96:0c:0e:9e:67:1b:98:07:1c:09:8f:8a:bb:bf:
                    46:f6:c2:2d:9b:db:d0:53:d4:80:08:c1:07:66:e7:
                    08:af:5c:06:eb:86:38:45:8c:94:0a:38:e9:48:ed:
                    0d:f2:78:4a:53:61:e6:6e:1c:bd:fa:d9:5e:ee:04:
                    18:74:0e:ae:fc:34:77:6b:42:2a:7f:bc:0b:20:c1:
                    60:87:cd:60:63:82:6a:1c:58:c5:fe:bf:2d:65:b2:
                    f9:45:46:c5:9c:7f:c4:87:c5:b2:8f:8a:f9:7b:1d:
                    99:ed:5b:a9:39:bd:4c:01:68:17:14:d6:8e:4a:64:
                    a2:e3:8a:77:30:d0:f6:d0:81:c1:19:e0:94:c2:e6:
                    e0:54:a7:50:0e:cf:8d:6c:b9:3e:a1:49:30:09:9f:
                    6f:ae:49:29:a7:35:32:4b:b9:85:86:9c:51:b0:98:
                    c5:eb:6a:f4:5d:97:64:6a:50:00:47:83:41:bd:a2:
                    54:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:84:AC:BC:82:D4:D7:E0:15:96:C3:72:31:E1:1E:44:B2:20:34:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5ed2d30-ac5c-35e0-b5fd-7bd16f67b53e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:b070::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:fd:30:a6:94:fc:dd:48:9d:6a:14:fc:ae:22:b9:47:89:7c:
         03:07:0c:f9:ca:bf:a3:47:ca:78:02:c5:45:a0:45:3d:3a:4f:
         38:76:52:ff:b7:90:58:9b:85:e2:a9:62:92:3b:1a:27:d0:19:
         43:d0:5d:92:46:88:29:82:69:d6:c1:dd:05:eb:b5:d3:ea:5d:
         ac:b5:00:16:ca:8b:4e:23:d4:1a:33:80:25:08:b8:18:c7:23:
         8a:e0:4b:e6:e3:f6:e8:48:fe:e7:f5:30:6a:65:89:34:c1:8a:
         43:ff:12:18:c4:0a:d2:dc:10:c7:9d:18:d1:05:06:11:50:66:
         48:ec:bd:d9:a7:40:e6:23:53:cd:5a:6c:1e:42:49:e3:28:51:
         2d:62:9f:da:37:aa:0c:be:eb:a8:33:64:24:73:80:0f:06:e2:
         86:cb:24:e9:e2:fe:0d:3e:cb:3e:20:a9:ec:c9:3c:b9:de:2c:
         61:e9:47:22:04:e0:7c:ea:5e:89:30:67:07:8a:82:74:f6:51:
         07:e7:69:a3:97:5d:82:bc:96:b7:81:df:b2:63:14:2d:0e:03:
         53:9f:c5:ab:d6:c2:b6:22:4a:0b:33:93:28:b2:c6:80:84:51:
         7b:0a:66:d1:d3:46:da:16:8e:cd:c6:c8:de:4f:f9:e0:22:7a:
         a6:64:a0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:14 2024 by rpki-client on console-fra.rpki-client.org