Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7461af2-365c-3a00-a3ca-27db755befc5.roa
File:                     b7461af2-365c-3a00-a3ca-27db755befc5.roa (raw, json)
Hash identifier:          fnW3fgwxZixf/uSBIpC5GaxU9pHQjuYKM9k5e84lCVM=
Subject key identifier:   57:35:61:41:FA:4D:51:43:FF:D8:DE:5A:2D:E3:06:BD:CB:60:74:4A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846E3E18D802E96941949D5E700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7461af2-365c-3a00-a3ca-27db755befc5.roa
Signing time:             Fri 16 Aug 2024 01:35:58 +0000
ROA not before:           Fri 16 Aug 2024 01:35:58 +0000
ROA not after:            Thu 14 Nov 2024 02:35:58 +0000
asID:                     6167
IP address blocks:        2600:1009:a010::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:e1:8d:80:2e:96:94:19:49:d5:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:35:58 2024 GMT
            Not After : Nov 14 02:35:58 2024 GMT
        Subject: CN=52cd9271-8d4f-4964-9b29-814a1608115d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:03:64:11:89:1c:7a:4b:59:45:ce:f6:22:
                    3a:14:33:4b:c4:a5:54:c9:47:50:af:35:41:73:76:
                    41:44:67:d0:75:19:d8:52:fb:07:f3:cd:fe:9e:6b:
                    ac:90:ba:9e:f3:4e:de:b8:44:26:cd:6d:22:0e:11:
                    e4:8d:1b:f2:47:de:8a:35:39:94:6e:43:93:e3:78:
                    20:03:a9:9a:f7:b5:da:66:8c:07:76:1a:11:21:06:
                    63:00:d7:5b:c1:37:4f:c3:c0:a0:0e:63:d3:49:e7:
                    9d:bd:15:38:c9:9c:9d:a7:cd:56:d0:fc:f7:14:bb:
                    6f:fb:83:e3:c0:dc:2e:f9:f6:37:1e:33:f9:9a:46:
                    81:56:3f:7c:34:c1:18:93:eb:2e:ed:cf:8b:ce:fc:
                    fe:6c:75:a1:d7:60:38:4c:34:d7:69:83:5d:33:62:
                    1c:d0:85:48:ad:e1:14:a7:b0:4e:93:48:86:b4:80:
                    79:c0:39:75:18:5e:21:c5:53:9f:77:24:e3:bb:2b:
                    a4:3b:8c:b7:04:13:92:88:d7:6f:b2:0d:84:56:09:
                    35:77:2a:30:20:e3:56:c5:36:91:27:1b:5c:46:f6:
                    ea:1a:27:dd:78:4d:b0:88:ea:8e:83:95:f2:b2:9b:
                    e9:ce:cf:a7:c1:97:83:c8:3a:b0:1f:46:0a:77:1e:
                    77:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:35:61:41:FA:4D:51:43:FF:D8:DE:5A:2D:E3:06:BD:CB:60:74:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7461af2-365c-3a00-a3ca-27db755befc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:a010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:03:56:dc:59:d6:35:a0:f3:66:2f:32:da:2b:f1:67:51:6e:
         80:f8:ac:2d:d8:37:a3:d7:17:4e:8b:6d:f3:11:a7:39:b2:71:
         9b:c7:90:df:96:1f:c5:6e:bb:9f:4f:74:5d:31:40:45:51:c5:
         d4:bc:e8:5f:dd:7a:1e:06:fe:b0:91:cb:b9:4d:cf:11:88:ac:
         87:d7:f0:03:71:24:5a:de:07:d6:de:b9:84:4b:c4:0f:c8:8f:
         9c:e3:2e:8d:60:c3:bb:75:83:11:ae:a6:e1:2d:87:a6:c7:7e:
         51:c0:21:9a:a2:b9:b0:09:13:4b:47:a2:0e:11:3b:1d:76:2f:
         74:ad:96:37:e8:af:96:95:05:e7:3f:b1:2b:16:6e:56:de:28:
         99:8c:b2:b4:e1:96:a0:f0:f9:ce:97:92:46:97:19:16:0b:23:
         8b:68:cb:1f:3d:f3:de:8c:e7:1c:ca:7c:07:3c:ae:0b:85:1e:
         cd:4c:6b:fe:73:c4:ba:a3:69:87:a0:15:25:50:49:38:4a:a7:
         ea:41:5d:9d:0c:7d:4a:39:b1:bb:ea:59:fd:e3:8a:bb:e7:59:
         36:e2:87:89:2c:a4:31:21:da:9b:c2:5f:3e:83:92:19:da:72:
         b4:92:f1:c4:7b:8a:c8:63:64:bf:d3:42:4e:51:5c:a3:9c:34:
         4e:7d:05:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:15 2024 by rpki-client on console-fra.rpki-client.org