Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be41d05e-c4b5-3a43-b801-9fbe7417cd64.roa
File:                     be41d05e-c4b5-3a43-b801-9fbe7417cd64.roa (raw, json)
Hash identifier:          4gozH8Y5mtOGqxTKjfQ1X4kAg5Qq1Tm6uXmivO5Krt4=
Subject key identifier:   72:9C:3D:3B:04:3F:EF:62:8B:AF:4D:0D:D7:E1:D9:85:D4:65:20:0E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846E3E20CA8CC950B653411CC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be41d05e-c4b5-3a43-b801-9fbe7417cd64.roa
Signing time:             Fri 16 Aug 2024 01:36:58 +0000
ROA not before:           Fri 16 Aug 2024 01:36:58 +0000
ROA not after:            Thu 14 Nov 2024 02:36:58 +0000
asID:                     6167
IP address blocks:        2600:100e:be12::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:e2:0c:a8:cc:95:0b:65:34:11:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:36:58 2024 GMT
            Not After : Nov 14 02:36:58 2024 GMT
        Subject: CN=0496f8c8-5faa-4220-9de7-36eab3c881a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6b:dd:1a:df:d4:d5:56:4f:ff:67:d3:7c:c1:
                    25:75:53:4c:ff:58:9c:21:cc:7e:5e:06:34:1d:bf:
                    c3:d6:e9:fa:6b:6a:73:bb:7a:72:be:5b:45:5f:10:
                    b5:a0:31:35:d1:85:75:f4:08:20:65:af:50:66:0a:
                    c0:cb:fb:0c:76:a4:35:8a:35:35:32:ba:8d:e6:69:
                    6b:4d:36:b6:f1:19:36:8c:b5:15:eb:62:a4:22:10:
                    55:8b:92:d8:db:d6:d3:31:f0:4e:19:00:63:0f:e5:
                    5a:70:e2:2c:16:77:e0:a2:58:ef:ac:34:cc:19:c5:
                    34:31:3d:48:c3:55:dc:90:1c:c0:9e:cc:2f:d4:08:
                    25:8c:89:76:9a:8d:3f:92:4b:38:f7:70:f4:bb:2b:
                    bc:ce:d7:08:57:dd:54:72:c2:27:20:2d:46:41:85:
                    4d:4d:28:78:91:20:6b:6a:65:2f:6e:8a:81:2b:5f:
                    03:3c:b7:46:6e:f5:0f:b6:34:1e:29:7e:04:13:c2:
                    2e:ec:2c:44:df:0a:fb:29:7f:df:94:ec:b6:cc:8e:
                    b6:b4:47:83:fe:6e:f1:2d:92:7a:00:ad:e7:32:9b:
                    76:56:a7:e0:40:bb:ab:99:16:92:e6:40:7c:fc:26:
                    e2:0a:d5:80:61:63:b6:bc:ac:ac:37:26:4f:c7:ba:
                    2f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9C:3D:3B:04:3F:EF:62:8B:AF:4D:0D:D7:E1:D9:85:D4:65:20:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be41d05e-c4b5-3a43-b801-9fbe7417cd64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:be12::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:8c:3e:52:71:f4:6c:cd:5a:af:05:81:79:54:13:14:91:b0:
         d3:e8:22:9b:e1:a0:cb:e7:ef:b6:53:04:e9:5c:40:0d:80:cf:
         e2:e1:73:3f:f4:07:d8:60:8a:64:c4:9e:f4:86:91:31:4f:8d:
         53:13:89:07:a9:aa:65:0a:ec:76:a7:ea:31:c1:82:94:8b:0b:
         5e:3a:e7:71:7a:e0:c4:6f:17:1c:12:db:e9:bf:a7:ac:12:92:
         e9:02:84:c9:83:c5:f4:ac:9f:b0:b9:61:78:4f:99:02:7d:d6:
         7d:1e:4d:24:f5:f1:8d:81:57:05:8a:ac:61:e1:d5:06:8a:73:
         7f:b2:20:b5:8b:06:8f:38:66:e8:5c:ea:e0:65:55:19:0d:59:
         46:56:79:29:83:3a:39:2a:4d:46:86:01:2a:2c:71:c7:a7:bf:
         2d:8c:95:1c:87:91:64:e5:c1:3b:b1:b5:2c:7e:cf:2f:83:26:
         ab:d0:40:33:90:56:6d:4c:d6:6f:e3:58:83:ab:58:1e:b2:cb:
         94:17:f5:9a:71:46:fc:87:77:fe:02:60:02:37:c5:9f:1a:1d:
         6e:bd:37:fe:84:07:b8:38:66:49:e8:cb:90:76:4e:f5:aa:f4:
         c8:84:fd:e4:87:db:26:3f:10:1a:c0:6f:6b:1e:fc:fb:3e:d2:
         dd:1f:42:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:23:00 2024 by rpki-client on console-ams.rpki-client.org