Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b96d2035-1e3e-3bcf-9f54-031f7060463a.roa
File:                     b96d2035-1e3e-3bcf-9f54-031f7060463a.roa (raw, json)
Hash identifier:          ErGEF37BM6KfWnX1OhqMA+WxHcXNxkbfS25Pb7oh90g=
Subject key identifier:   FC:3F:58:37:14:BD:A5:09:51:DF:A9:C7:42:08:64:EE:3D:8C:A2:C6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBE0FD170F6A76E4702800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b96d2035-1e3e-3bcf-9f54-031f7060463a.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1013:a010::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:e0:fd:17:0f:6a:76:e4:70:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=d455fd3b-83c9-4550-a846-b6577e64b211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:67:53:63:c1:e2:02:72:c9:1f:9b:db:18:9a:
                    ce:c7:f6:cc:28:c5:77:c7:33:df:5c:4d:c4:c7:6a:
                    e5:f0:31:8e:f2:d6:a5:01:12:ad:48:34:77:c6:ad:
                    58:f5:e1:c2:ac:3a:eb:e4:29:92:0f:e4:b1:a0:98:
                    bc:f3:43:07:03:c5:21:0a:cf:1a:04:66:d5:7a:55:
                    27:04:3f:b2:40:4b:38:b8:85:1e:b2:21:26:b6:a9:
                    16:e4:4b:13:43:97:45:36:12:fa:b3:1b:8b:22:f0:
                    42:ed:8c:d6:4d:d1:aa:55:22:9c:c3:44:ec:01:9c:
                    35:37:2b:8c:9e:d8:49:78:7a:61:89:e3:53:3e:4b:
                    92:51:6f:71:a2:16:3e:1d:2a:1c:cc:a1:d8:82:37:
                    a9:2d:e3:7d:c6:2a:83:37:be:44:9d:ee:49:f6:fb:
                    91:7c:98:63:40:4f:5d:e9:d7:98:71:c5:bf:af:ae:
                    42:b4:1d:53:d0:4f:b8:99:33:61:84:a9:60:d5:b9:
                    73:f0:a1:68:55:2f:80:cd:3c:59:92:69:b0:d5:17:
                    cf:25:ea:24:f4:fa:8e:25:7a:f1:e7:08:96:e1:18:
                    54:6f:75:b6:b9:4e:ba:93:8e:54:db:c8:11:41:a9:
                    b0:92:5f:0d:5c:a6:46:11:0c:a8:3e:7d:f8:e1:fb:
                    46:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3F:58:37:14:BD:A5:09:51:DF:A9:C7:42:08:64:EE:3D:8C:A2:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b96d2035-1e3e-3bcf-9f54-031f7060463a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1013:a010::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:0b:39:ee:a2:99:c8:b6:4d:2a:02:d4:ae:ef:f4:30:73:a1:
         de:a0:5e:21:bf:81:f0:62:f4:fe:8c:f9:de:e4:6a:28:11:f4:
         87:6d:d9:31:c3:41:1e:3f:67:b2:87:06:1c:96:22:41:4c:3c:
         d1:e9:52:c7:fe:5a:7d:5f:da:20:0f:89:6b:40:51:ec:c5:94:
         52:e4:fd:7f:cb:63:2c:d0:a8:92:3a:c1:da:78:eb:2e:f7:f0:
         8e:f9:8b:35:d3:b0:4b:6a:55:5d:2e:e7:b4:1e:ce:48:7e:af:
         e6:33:d0:3c:d2:fb:89:52:6e:c1:9c:1e:57:ab:9d:15:69:17:
         0e:43:c0:80:f6:f7:ab:8d:b4:cb:00:25:eb:c0:9b:12:0c:19:
         a2:fc:89:4b:03:84:1c:38:19:32:af:51:da:07:8d:d4:fe:95:
         6d:ae:8e:b1:cf:bc:e7:a0:c6:50:56:7a:1e:20:68:e0:66:8c:
         73:02:0f:15:1d:5d:26:92:4c:f9:9d:b3:f4:bb:7f:98:9d:d7:
         91:89:f2:f2:a0:6d:0c:12:24:e3:1f:9e:3f:ee:6b:77:d3:e5:
         a7:42:f1:a5:82:f4:c5:08:f7:c7:2c:b1:5d:ad:e9:be:d9:bb:
         8c:1b:6b:40:3c:06:43:bc:5e:50:1c:71:0e:41:5a:5e:ba:90:
         c6:d7:83:df
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeJ6+D9Fw9qduRwKAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAxNDEzMDA0N1oXDTI1MDExMjE0MDA0N1owLzEtMCsGA1UEAxMk
ZDQ1NWZkM2ItODNjOS00NTUwLWE4NDYtYjY1NzdlNjRiMjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2dTY8HiAnLJH5vbGJrOx/bMKMV3xzPfXE3E
x2rl8DGO8talARKtSDR3xq1Y9eHCrDrr5CmSD+SxoJi880MHA8UhCs8aBGbVelUn
BD+yQEs4uIUesiEmtqkW5EsTQ5dFNhL6sxuLIvBC7YzWTdGqVSKcw0TsAZw1NyuM
nthJeHphieNTPkuSUW9xohY+HSoczKHYgjepLeN9xiqDN75Ene5J9vuRfJhjQE9d
6deYccW/r65CtB1T0E+4mTNhhKlg1blz8KFoVS+AzTxZkmmw1RfPJeok9PqOJXrx
5wiW4RhUb3W2uU66k45U28gRQamwkl8NXKZGEQyoPn344ftGAwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPw/WDcUvaUJUd+px0IIZO49jKLGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjk2ZDIwMzUtMWUzZS0z
YmNmLTlmNTQtMDMxZjcwNjA0NjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQE6AQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFYLOe6imci2TSoC1K7v9DBzod6gXiG/gfBi9P6M+d7kaigR9Idt
2THDQR4/Z7KHBhyWIkFMPNHpUsf+Wn1f2iAPiWtAUezFlFLk/X/LYyzQqJI6wdp4
6y738I75izXTsEtqVV0u57Qezkh+r+Yz0DzS+4lSbsGcHlernRVpFw5DwID296uN
tMsAJevAmxIMGaL8iUsDhBw4GTKvUdoHjdT+lW2ujrHPvOegxlBWeh4gaOBmjHMC
DxUdXSaSTPmds/S7f5id15GJ8vKgbQwSJOMfnj/ua3fT5adC8aWC9MUI98cssV2t
6b7Zu4wba0A8BkO8XlAccQ5BWl66kMbXg98=
-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:15 2024 by rpki-client on console-fra.rpki-client.org