Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca7d96b0-1980-3482-8bfc-852595d02978.roa
File:                     ca7d96b0-1980-3482-8bfc-852595d02978.roa (raw, json)
Hash identifier:          re84NB4EN72UAtmAr8So/8WzmbPv74TjoDuwvEYsodg=
Subject key identifier:   27:65:89:CD:D6:EA:AA:02:B7:5D:EB:6C:17:E2:ED:CD:24:15:2D:02
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D769A1F6977500812171A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca7d96b0-1980-3482-8bfc-852595d02978.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1003:b0fc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:9a:1f:69:77:50:08:12:17:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=ac91f03f-811e-4552-97d1-fdccf51230ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:f6:cd:10:d4:5e:8e:a8:52:c2:b5:6a:f1:
                    3c:e9:25:85:c5:2b:63:3f:02:44:80:58:9d:73:c2:
                    00:b4:b3:f2:cd:b4:ae:6c:c4:a5:86:34:c5:00:23:
                    f5:7e:0a:9f:1d:61:93:86:66:f9:ff:9e:34:d5:87:
                    3d:f9:1d:21:ff:a0:99:e5:52:62:c7:a7:40:0d:59:
                    51:15:8d:af:1f:b7:99:d2:29:d0:09:c7:6c:94:17:
                    0a:19:ca:c0:97:8b:3f:36:1c:c9:62:e4:8c:05:26:
                    eb:88:53:42:6b:25:34:5d:5e:a4:c5:bb:7d:cb:f1:
                    26:91:25:95:91:f7:e5:8a:5d:f0:9a:11:75:bf:a6:
                    47:f4:2e:74:c4:cd:29:10:e9:46:6d:50:d0:7d:f1:
                    0e:03:db:81:2a:8a:5c:6d:c3:66:fc:94:88:fc:6b:
                    27:16:77:91:75:9c:80:ba:49:c1:41:95:32:7f:c4:
                    87:23:46:eb:96:c3:71:47:55:8b:c2:b4:95:1c:5e:
                    08:68:e2:11:09:c9:18:4b:b9:35:93:da:73:a8:2a:
                    f7:e2:00:03:0b:0a:eb:c0:37:43:5f:29:1a:dc:7d:
                    35:8d:0d:cb:a2:a3:b8:84:61:d8:1a:28:a1:18:d0:
                    14:74:69:92:42:94:88:e1:43:37:88:58:24:1b:7f:
                    ad:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:65:89:CD:D6:EA:AA:02:B7:5D:EB:6C:17:E2:ED:CD:24:15:2D:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca7d96b0-1980-3482-8bfc-852595d02978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b0fc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:76:e0:51:08:66:8c:53:4b:57:bd:d1:03:51:cc:f8:23:f6:
         97:9a:09:8c:4a:f4:4b:65:05:f4:b0:d3:a9:c7:7b:78:0a:b5:
         e9:70:4f:36:6d:d9:7b:e2:09:40:00:26:40:b8:48:c6:97:61:
         cd:65:cd:dd:e9:7c:5e:36:ae:13:e8:26:cf:f3:54:7c:d9:d9:
         33:41:75:e4:3a:15:2f:dc:84:0d:7c:cb:d1:ca:6b:9d:9c:a9:
         a5:0e:33:f2:6b:2a:a6:5f:f1:f3:81:2d:21:8b:67:4b:41:e6:
         d3:d1:f6:c4:45:27:c2:37:6c:42:9a:fc:62:3f:92:1a:aa:87:
         34:b6:c9:bf:4a:bf:06:4e:19:d5:e9:a2:15:9d:e6:6b:1c:8d:
         f2:90:15:da:b2:02:12:65:d1:01:83:82:84:57:69:ed:74:d5:
         3b:43:ed:9a:bf:00:1c:57:88:12:08:e4:8d:59:75:b7:a5:f0:
         d3:ec:17:29:88:d0:75:91:45:6e:95:ec:cc:92:d2:4d:7b:f0:
         e6:a6:55:83:4c:7a:e6:5c:c1:c4:2f:4f:9d:c0:8c:a5:91:4e:
         5e:70:8f:0e:24:f1:bc:10:33:88:06:58:e0:99:8e:b2:20:4e:
         01:4e:8b:c5:a4:ea:f3:97:0a:e5:18:74:a3:0a:4b:54:04:4e:
         4b:ab:69:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:19 2024 by rpki-client on console-fra.rpki-client.org