Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c28c7326-31fc-30ea-9d82-47123b36efd8.roa
File:                     c28c7326-31fc-30ea-9d82-47123b36efd8.roa (raw, json)
Hash identifier:          cILk+7Q5BvwJX6DT6FMdfj1HQPLGuGr2UwTeb7Cu/og=
Subject key identifier:   B2:9E:E3:B8:02:D3:4E:31:EC:9E:17:30:98:54:C2:A4:FD:A4:20:E1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D7699938EB781A57DD1EC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c28c7326-31fc-30ea-9d82-47123b36efd8.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1003:a810::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:99:93:8e:b7:81:a5:7d:d1:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=fbe4390e-8a0d-494f-b8e4-1a6598563a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8a:c8:a8:03:b9:f6:c7:4b:e4:19:87:33:7d:
                    1f:89:c6:65:8d:da:7e:cc:5e:4f:bc:ae:80:df:29:
                    8c:26:a7:07:21:0c:54:5a:b3:5b:6d:de:40:7a:1d:
                    fd:98:9d:83:2b:36:23:79:eb:fc:1d:43:7f:01:f2:
                    76:3b:69:f8:fa:25:67:bf:63:a0:13:4a:53:82:df:
                    d3:5a:c6:42:7c:c0:cd:a8:b4:19:90:b7:08:02:da:
                    3e:4f:3e:72:92:f1:6e:8c:fb:9c:b5:cd:53:7d:f0:
                    c4:c5:1d:13:a2:a0:ee:d6:32:0d:b1:7f:75:8b:fa:
                    ed:d0:92:c9:e9:48:83:b1:69:f9:2b:9c:3a:22:dc:
                    f0:dd:ac:bf:89:af:79:83:27:77:64:33:8e:1f:96:
                    9a:38:03:70:23:d1:8d:41:a6:c6:6e:e7:ac:c4:b2:
                    b7:73:1b:7b:58:fc:f1:dd:a6:0a:1b:55:32:92:a0:
                    1a:da:dc:1f:d6:41:51:71:90:3a:6f:a3:fc:3e:f9:
                    84:59:31:ee:f4:2f:a9:da:4d:12:b2:7d:09:8e:bd:
                    ca:90:54:69:30:4a:36:9a:b6:e6:fe:50:46:8c:d8:
                    ec:be:f5:e8:31:6d:47:21:19:04:1b:c4:59:fb:c0:
                    1e:64:d5:c6:bc:5c:81:d7:07:fe:5f:3c:4e:51:19:
                    ba:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9E:E3:B8:02:D3:4E:31:EC:9E:17:30:98:54:C2:A4:FD:A4:20:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c28c7326-31fc-30ea-9d82-47123b36efd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:a810::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:4d:44:70:07:0c:7e:74:ab:43:5d:96:8c:f1:e2:8e:59:97:
         b0:db:07:bf:e1:be:06:5f:10:29:a3:a5:f8:39:2e:03:4a:12:
         f8:6d:32:25:1e:83:27:28:25:57:8e:e4:63:15:9f:9e:26:30:
         f1:20:bd:f3:40:8c:6d:14:02:c4:e8:87:97:bd:d0:96:a9:36:
         15:e3:07:95:f6:f5:46:e7:e7:14:bd:82:23:c2:fb:a2:59:1c:
         37:cb:8a:24:c7:13:c0:d9:26:ac:88:3f:33:bf:d5:53:d8:b9:
         8a:eb:16:4b:0f:3d:58:98:ba:2f:33:dd:e3:10:de:ea:36:44:
         20:e9:5c:e7:25:b0:b8:ab:f5:82:e8:36:6f:75:51:af:10:9a:
         9b:da:66:ac:0b:c7:7e:e9:73:ac:bc:ec:18:28:cb:fb:85:69:
         d4:3c:c2:d6:f4:d5:f1:1c:5b:5b:af:3a:57:5c:5b:3f:29:ef:
         e8:43:ab:dc:13:6b:6e:c5:6e:65:bc:b7:9c:52:60:a6:af:ac:
         dc:b3:54:28:79:7f:09:f7:45:1a:1b:b7:c9:0a:55:a5:07:93:
         40:08:07:6a:c7:00:35:58:a2:da:9a:21:23:fa:17:cb:14:5f:
         89:2c:e9:52:19:ac:8f:c5:8f:8e:4d:8b:b4:4f:47:9e:5c:5b:
         53:a5:14:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:17 2024 by rpki-client on console-fra.rpki-client.org