Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c47b21dc-e8ad-3b7b-abea-d309b8c4617b.roa
File:                     c47b21dc-e8ad-3b7b-abea-d309b8c4617b.roa (raw, json)
Hash identifier:          iTyaG2u33iHQUfdHxmy+TH9/JUthHyl6AYVQhKxQ4iw=
Subject key identifier:   24:10:F7:4A:5F:17:68:1A:68:62:D4:4C:2E:5E:7D:B9:39:83:0E:3A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA0BA09405124AFD88DC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c47b21dc-e8ad-3b7b-abea-d309b8c4617b.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100e:b1e2::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:0b:a0:94:05:12:4a:fd:88:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=97c73d81-f668-4578-a2b9-bc947bc914c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7c:5c:9f:c6:cf:e5:e3:61:f8:7f:e1:b2:c9:
                    1a:c1:f0:f8:1c:f6:a8:19:62:26:a0:f9:c4:10:f2:
                    aa:c5:42:d3:8d:81:eb:c9:ff:7f:03:1d:c3:ae:02:
                    da:a5:9b:5c:bb:41:16:6b:8b:a2:fe:5d:5e:3c:bf:
                    cd:6f:f8:d3:86:fc:6c:95:c0:ab:e6:46:22:41:e3:
                    e4:83:3b:23:67:00:47:09:fb:86:fb:8d:dc:37:ef:
                    a6:9c:3f:ef:95:28:74:c4:c0:f1:bf:41:a6:70:c7:
                    5d:53:bc:7d:3d:cf:4a:d7:1d:82:2d:53:f8:fc:19:
                    c7:e5:3f:39:41:6c:4c:1c:22:c1:75:51:69:22:69:
                    1d:ab:24:b5:19:fd:eb:77:fc:27:3e:e1:fd:3d:7c:
                    33:43:13:6f:f3:cb:18:a1:55:d5:5e:ff:e9:5b:ab:
                    00:64:36:48:c4:35:a8:28:20:ca:14:38:ef:8f:d6:
                    03:54:17:dd:d4:d3:6f:4a:13:76:3b:8b:ea:af:c5:
                    89:3d:05:bd:fc:3e:d8:04:ce:3a:94:a1:79:d6:bb:
                    3c:a3:3a:ad:eb:18:4f:10:dd:c6:88:b5:f2:23:36:
                    a3:36:37:dd:25:58:ef:a5:47:2e:4a:3d:18:55:4f:
                    29:48:47:c8:21:a3:40:65:e8:c8:3f:a7:0c:d0:be:
                    73:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:10:F7:4A:5F:17:68:1A:68:62:D4:4C:2E:5E:7D:B9:39:83:0E:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c47b21dc-e8ad-3b7b-abea-d309b8c4617b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b1e2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:d6:2e:12:16:d8:a5:3f:89:f6:32:f5:69:89:e1:bf:48:f3:
         b0:ba:a2:5b:59:c2:2a:c9:66:28:e1:ea:17:33:a7:70:d1:5e:
         f6:10:38:c8:0d:2d:d1:17:1e:38:f4:b0:f6:27:cb:8e:ed:0f:
         df:ac:49:7a:c2:da:70:0e:5d:2e:85:a1:b8:bf:e0:43:34:d3:
         0f:88:2d:0f:b2:18:98:66:b8:81:06:7c:af:64:04:b2:28:06:
         0e:ea:86:5f:74:49:2f:9b:08:a3:d2:2a:65:18:49:1e:19:fb:
         ca:83:8c:42:4c:96:de:eb:81:89:17:14:e3:91:8c:df:d6:8d:
         24:0b:41:60:d2:c6:d4:7c:f4:18:c5:e1:33:ce:4f:97:38:e0:
         f9:ad:db:28:86:6f:8d:c2:32:0f:a6:27:eb:cf:65:19:4e:5a:
         45:83:cc:31:50:da:18:8a:f8:74:11:d9:a5:3a:20:4e:29:10:
         5b:75:2b:0c:a9:31:d9:ad:67:c2:df:d2:98:81:25:b2:f4:ea:
         0f:f2:13:ce:74:e5:16:ab:b2:df:d0:66:98:e8:ad:c9:be:d2:
         3f:e4:e6:14:8f:66:08:18:d3:00:08:59:76:8b:e0:28:07:66:
         6d:bb:c4:73:a8:54:2d:5d:25:e7:12:6e:97:77:f5:14:5e:5b:
         77:7b:1b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:48 2024 by rpki-client on console-ams.rpki-client.org