Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3c9bbf5-3aed-3fdb-b8e5-df56747a290b.roa
File:                     c3c9bbf5-3aed-3fdb-b8e5-df56747a290b.roa (raw, json)
Hash identifier:          lubXC1a7Ait00Bzh4CgIfK8uCjamn8jXYVYz+dcusHw=
Subject key identifier:   9A:A0:B4:6B:EB:F9:2B:D4:0D:19:9D:DB:E6:BB:8A:CB:BD:31:6B:50
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D7698AF4E63C9FD80412600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3c9bbf5-3aed-3fdb-b8e5-df56747a290b.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1002:f000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:98:af:4e:63:c9:fd:80:41:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=3af91c57-28d7-4b88-905b-dcae8ecb2215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:33:2f:15:33:b4:7b:87:70:6c:f4:2c:26:1f:
                    f8:a0:a9:37:07:e6:a5:1f:ba:46:ae:91:d3:10:f8:
                    03:32:e0:fe:ba:78:5e:67:59:9e:42:3a:45:5a:db:
                    d4:0b:1f:e0:55:fa:64:ba:bf:b1:1d:7b:18:1c:14:
                    de:3f:5b:15:02:dd:f4:b5:0f:a6:b0:e3:29:75:61:
                    81:bc:8a:6b:ae:f9:4a:af:a7:36:9e:82:da:cf:6e:
                    3e:d2:d5:0e:dc:34:e4:eb:62:ef:52:59:0e:09:da:
                    86:6a:2b:26:a8:83:1f:fb:d8:09:fb:66:e6:ea:9b:
                    96:18:30:19:17:e6:02:d0:c5:b4:39:2f:81:c0:69:
                    12:a5:15:da:17:55:43:67:a1:75:7e:81:7f:69:b0:
                    fc:0c:b2:bb:a0:f4:13:b5:1a:2a:7c:96:ce:e8:92:
                    9e:60:13:43:64:73:43:47:5d:b2:5f:41:0c:4d:0c:
                    fd:8e:70:8c:d7:60:08:00:1c:1f:d2:25:26:e1:91:
                    0c:af:ac:10:ea:90:43:34:87:a4:da:24:38:5b:f3:
                    fe:eb:05:70:1f:5d:cc:90:1c:83:2d:07:72:b7:99:
                    8a:39:06:18:f0:69:71:cf:76:94:5f:9d:fd:dc:6a:
                    bf:79:c1:1f:d3:6c:78:c6:72:4c:5e:fc:b8:62:44:
                    ab:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A0:B4:6B:EB:F9:2B:D4:0D:19:9D:DB:E6:BB:8A:CB:BD:31:6B:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3c9bbf5-3aed-3fdb-b8e5-df56747a290b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:69:48:ca:6e:f9:4b:d0:4c:d8:11:e3:e5:79:c8:29:91:e2:
         76:fc:3f:85:ac:10:18:87:07:ec:dd:f9:7f:6f:35:82:cb:e2:
         04:3b:02:df:fe:ba:c3:8c:50:e7:9d:6a:0b:50:8e:e9:0d:37:
         3b:2d:3c:13:e9:4d:d5:91:85:f0:58:41:7f:13:b3:b9:54:4e:
         da:3c:92:54:82:b6:5a:1e:b1:2f:3c:93:52:08:38:dd:39:32:
         24:35:02:16:1a:d2:83:c1:65:4a:11:b3:0a:54:a4:cf:5d:6a:
         54:1b:5e:7e:ff:e4:05:a1:09:ea:cf:5e:de:2e:02:a0:2a:2d:
         99:15:3f:f7:2f:3a:0f:33:17:de:a4:53:c9:bc:98:4c:e0:b6:
         11:18:61:1b:79:f1:ff:5c:db:48:cc:bc:48:99:4c:15:86:4e:
         f7:23:2c:09:ad:8c:7e:95:22:22:c2:d5:fa:44:58:5e:f6:55:
         dd:0a:97:77:38:c0:54:2a:7b:f2:e8:8e:90:db:a4:28:ef:8b:
         84:4a:3b:ba:d8:5e:be:d1:46:c1:57:a1:52:89:21:e3:10:69:
         49:35:f0:d8:38:1b:c2:f4:5c:25:51:b6:39:2c:83:45:d3:eb:
         ad:32:84:cf:1a:ad:e3:8e:8a:35:a6:93:f5:26:d1:29:5e:3d:
         18:fe:eb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:52 2024 by rpki-client on console-fra.rpki-client.org