Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba976431-89fa-3a11-9263-5ea18c79a193.roa
File:                     ba976431-89fa-3a11-9263-5ea18c79a193.roa (raw, json)
Hash identifier:          rpabz0zfX0x36v8wNzK89aIaPppLlP5zKnkfzGa7H38=
Subject key identifier:   DC:81:80:19:FC:A5:C5:1B:3B:5E:9A:8D:67:C3:89:97:15:B1:5F:2D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76AD3BD6CAEA5FE0035F48
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba976431-89fa-3a11-9263-5ea18c79a193.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1008:b130::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:ad:3b:d6:ca:ea:5f:e0:03:5f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=0af5e3c5-d90c-4518-bb25-7b31e8931f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:77:9b:38:7e:64:03:6c:0c:fd:9f:e8:07:
                    1f:51:0c:00:60:77:b9:71:ef:80:3c:8f:f3:d1:32:
                    e3:fd:35:3d:e2:4a:fe:bc:92:71:2c:35:3c:98:5e:
                    1b:ae:b4:79:a1:c5:fa:23:22:16:a8:87:72:57:b6:
                    48:04:00:75:2a:79:84:be:2f:e0:12:5d:a0:38:18:
                    52:b1:18:de:48:43:68:ac:3a:f0:63:73:72:86:06:
                    87:f9:7b:d7:de:b4:48:c0:4d:60:3d:36:05:ac:48:
                    08:0d:f7:57:a8:74:02:a2:bd:97:e8:b6:03:12:5e:
                    6f:39:3e:4d:5a:86:f6:49:d6:a6:1f:69:34:e4:b9:
                    a1:d4:db:30:67:5b:39:77:5c:e6:74:0a:0d:b0:de:
                    ce:2b:93:94:0a:c2:19:ea:19:85:87:5e:a8:fd:06:
                    b5:08:a9:48:13:c6:47:4f:89:2b:53:ff:1c:84:0e:
                    5d:87:fa:35:6e:f4:0c:cd:09:86:a2:40:9d:9b:d3:
                    f5:a0:4e:39:8e:44:f1:dd:32:7b:91:d9:52:2a:bd:
                    01:b4:78:7e:42:0b:b5:53:32:63:b7:ce:69:bb:22:
                    87:3d:29:30:cf:94:05:62:4c:3c:ff:57:69:83:a9:
                    10:84:d3:2b:f7:89:80:ef:a1:83:df:a2:97:5b:78:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:81:80:19:FC:A5:C5:1B:3B:5E:9A:8D:67:C3:89:97:15:B1:5F:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba976431-89fa-3a11-9263-5ea18c79a193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:b130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:7e:1f:7f:82:df:03:97:d5:90:86:a6:50:bb:a5:b7:37:a1:
         8d:b2:ea:7f:a8:d4:e1:41:14:c7:92:cb:dc:f1:13:ea:4a:a5:
         8a:c3:a2:39:07:54:7d:f9:f1:ac:33:bc:65:42:5b:4f:56:a2:
         13:da:b7:c8:5d:ec:5b:88:7a:c7:61:e6:26:52:44:9a:83:fb:
         9f:58:5e:c0:58:fb:cc:26:c9:59:5d:57:4f:aa:2c:a1:22:0c:
         29:f8:28:c5:32:2d:29:5a:fe:e2:21:f6:b8:42:65:82:07:1e:
         36:b0:cb:d8:99:a4:93:77:ef:07:8e:3b:39:08:94:69:c3:59:
         19:7d:28:03:57:ba:7a:dc:c0:8c:da:26:5d:17:88:b6:26:ac:
         a1:69:a1:59:f0:18:54:8f:a5:1a:f9:ee:0d:6a:96:28:2b:ab:
         48:bb:1c:24:3b:13:01:3d:02:44:c5:0b:84:0c:97:c4:22:85:
         87:b6:2f:3e:e5:f9:08:96:dc:0b:02:96:5e:7a:87:64:86:76:
         b1:ec:4e:39:a4:cc:15:4e:2a:e7:87:4e:c1:d6:98:8a:34:1e:
         4d:55:da:58:bb:b9:d4:e4:e4:9b:39:c4:38:ee:18:22:f9:24:
         c4:9c:7e:04:87:15:bb:71:fe:23:f2:32:e8:9f:35:62:84:87:
         23:68:72:c4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeddq071srqX+ADX0gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
MGFmNWUzYzUtZDkwYy00NTE4LWJiMjUtN2IzMWU4OTMxZjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtl3mzh+ZANsDP2f6AcfUQwAYHe5ce+API/z
0TLj/TU94kr+vJJxLDU8mF4brrR5ocX6IyIWqIdyV7ZIBAB1KnmEvi/gEl2gOBhS
sRjeSENorDrwY3NyhgaH+XvX3rRIwE1gPTYFrEgIDfdXqHQCor2X6LYDEl5vOT5N
Wob2SdamH2k05Lmh1NswZ1s5d1zmdAoNsN7OK5OUCsIZ6hmFh16o/Qa1CKlIE8ZH
T4krU/8chA5dh/o1bvQMzQmGokCdm9P1oE45jkTx3TJ7kdlSKr0BtHh+Qgu1UzJj
t85puyKHPSkwz5QFYkw8/1dpg6kQhNMr94mA76GD36KXW3iM7wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNyBgBn8pcUbO16ajWfDiZcVsV8tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmE5NzY0MzEtODlmYS0z
YTExLTkyNjMtNWVhMThjNzlhMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCLEw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKl+H3+C3wOX1ZCGplC7pbc3oY2y6n+o1OFBFMeSy9zxE+pKpYrD
ojkHVH358awzvGVCW09WohPat8hd7FuIesdh5iZSRJqD+59YXsBY+8wmyVldV0+q
LKEiDCn4KMUyLSla/uIh9rhCZYIHHjawy9iZpJN37weOOzkIlGnDWRl9KANXunrc
wIzaJl0XiLYmrKFpoVnwGFSPpRr57g1qligrq0i7HCQ7EwE9AkTFC4QMl8QihYe2
Lz7l+QiW3AsCll56h2SGdrHsTjmkzBVOKueHTsHWmIo0Hk1V2li7udTk5Js5xDju
GCL5JMScfgSHFbtx/iPyMuifNWKEhyNocsQ=
-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:15 2024 by rpki-client on console-fra.rpki-client.org