Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1f66afc-8447-30d4-b796-33e8827a84dd.roa
File:                     c1f66afc-8447-30d4-b796-33e8827a84dd.roa (raw, json)
Hash identifier:          1MSq3XhS3946rkLsEWfpN6+COG3g/VzNT9Rzs552DpU=
Subject key identifier:   EA:0C:A5:8E:C0:2D:A4:24:00:22:D2:25:09:06:AA:9E:0E:86:8A:23
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBDACA64F0409E130A6880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1f66afc-8447-30d4-b796-33e8827a84dd.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1011:b0c0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:da:ca:64:f0:40:9e:13:0a:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=2024fd8e-8e59-4a70-82f7-7fdbd704628a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:ab:6b:23:de:69:27:13:21:4b:0d:87:a5:
                    32:e5:ff:b5:8e:26:f0:5c:f2:e6:25:75:b9:83:ee:
                    e2:01:0f:c2:c5:4c:d4:65:5a:9e:5b:18:7e:53:41:
                    8c:cf:02:86:79:e7:ce:ce:c6:6f:3c:7f:3a:0a:ef:
                    43:ee:2e:1d:e8:0f:b7:c9:e2:76:45:dc:ff:c2:69:
                    2a:05:2f:a7:fb:3c:00:e9:5c:74:89:b4:1f:07:18:
                    4c:6e:5f:e8:eb:88:36:f0:e8:01:d6:c7:e2:f6:06:
                    51:45:64:94:27:80:f7:ed:66:bb:40:9a:26:1a:4f:
                    18:b5:3e:fd:d4:39:da:54:22:40:36:a3:25:b9:c3:
                    d0:34:b9:ba:5e:49:f1:3f:9d:9a:2e:bb:58:47:e6:
                    9b:5a:2b:bc:e4:ec:1b:63:98:0a:51:92:48:7c:af:
                    24:c7:86:5a:11:e0:ce:f0:80:88:5d:d3:ec:86:29:
                    a6:f7:73:ad:d9:53:76:6a:33:ed:5a:d8:97:92:a5:
                    7e:6f:e6:ec:a7:33:e6:0b:77:e0:6d:86:6f:13:d7:
                    17:92:8c:13:6c:0f:1c:1e:ba:85:73:61:64:d1:3a:
                    01:64:a7:49:89:3a:a3:0d:21:29:5f:ee:3e:a4:f5:
                    3c:1a:02:d1:64:68:67:85:c7:11:b6:68:6a:43:b0:
                    bb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0C:A5:8E:C0:2D:A4:24:00:22:D2:25:09:06:AA:9E:0E:86:8A:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1f66afc-8447-30d4-b796-33e8827a84dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b0c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:7a:72:b7:8f:b1:f3:99:2c:9a:58:8d:7e:b1:ba:1b:07:ca:
         19:ec:9b:49:96:9e:39:16:bb:29:a7:4e:5c:2d:4a:ff:75:c0:
         8f:a0:01:66:13:44:c5:30:f5:a7:2c:4f:6d:e4:c8:a5:c3:10:
         43:d1:8d:5a:3e:9e:39:10:ef:c0:95:14:fa:9e:07:50:59:cd:
         5a:74:7d:4b:4c:2e:6c:1b:29:84:3b:fa:c0:98:68:67:85:55:
         fc:3c:d1:74:05:bd:2e:2f:62:fb:74:91:3e:d1:37:43:c2:d6:
         98:cc:bd:5e:ab:50:2f:91:b8:03:d9:10:a9:94:82:1f:ba:d8:
         24:e4:ae:ba:4e:64:d4:cd:88:02:48:64:60:0f:be:9e:68:f4:
         d8:b1:c3:b3:b9:43:58:34:4b:3a:a4:26:b8:0c:81:b1:7e:6b:
         3f:44:d4:9e:4b:8f:e7:10:06:99:5b:1b:8b:fb:e8:5c:63:23:
         3f:96:10:44:5f:df:ec:c3:a7:7b:72:d9:c9:9c:99:ab:d9:4f:
         32:39:a4:8a:f0:f7:0c:4e:fd:8e:d7:ed:e2:4f:8e:bf:87:9a:
         bc:e4:81:57:06:f7:34:52:69:05:3e:cd:77:a1:3e:09:b7:86:
         47:cd:55:c0:fa:87:09:6d:2c:9a:0b:a7:77:51:3e:de:0a:9c:
         4d:0a:09:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:17 2024 by rpki-client on console-fra.rpki-client.org