Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc79bfad-c550-35ff-8102-15478306efce.roa
File:                     cc79bfad-c550-35ff-8102-15478306efce.roa (raw, json)
Hash identifier:          DfZO4ji71f0YfNm0/GSmX7mRrCOifHdvpoVhQdWftns=
Subject key identifier:   2D:CE:46:69:9C:DE:FE:9F:58:3D:B1:60:AA:88:64:14:FE:F5:C4:FC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBE30618D1BD4D1BE99B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc79bfad-c550-35ff-8102-15478306efce.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1014:b0b0::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:e3:06:18:d1:bd:4d:1b:e9:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=cd90821f-a02a-4029-8b4b-9a2e254628e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c6:04:99:57:9d:4d:14:fd:53:27:73:33:56:
                    0e:89:90:4f:a6:8e:36:91:6e:3c:be:1f:74:4b:be:
                    66:58:c6:ab:9c:f2:0a:bd:c8:51:d5:0a:30:6c:36:
                    2b:db:82:1e:bf:66:dc:ba:1b:ca:89:15:a6:c7:be:
                    5b:51:81:c2:bd:42:e0:1b:3d:e9:4a:0f:c5:c1:88:
                    2b:fc:48:85:b6:f0:13:76:70:9c:5a:19:98:30:6f:
                    d3:d1:52:a3:7a:6e:c3:e6:96:9b:40:da:33:ae:79:
                    25:4c:54:69:01:13:cc:e9:35:54:40:ca:7b:f2:82:
                    04:76:2e:40:38:2c:50:ad:a1:32:57:06:21:9e:eb:
                    b0:a3:26:09:e1:87:20:c1:9a:cf:6b:e3:c5:73:16:
                    fc:6a:a0:17:9e:6d:d9:7e:1d:d1:21:bc:2a:41:91:
                    f8:ff:b1:3e:7a:54:98:fc:e1:95:b4:58:82:fc:97:
                    1a:a7:fe:7a:c0:2c:10:1a:e4:fb:96:06:a9:9e:8b:
                    42:51:9f:8a:be:56:91:b8:6b:88:67:e7:f9:1a:e1:
                    73:0b:c7:b9:b8:2e:9e:01:79:19:6a:da:57:47:98:
                    33:bc:54:bc:50:40:cb:9b:a8:35:d3:0e:df:70:51:
                    6b:6c:a3:6b:d9:e5:22:31:0d:d3:2f:44:fb:68:97:
                    f1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CE:46:69:9C:DE:FE:9F:58:3D:B1:60:AA:88:64:14:FE:F5:C4:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc79bfad-c550-35ff-8102-15478306efce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b0b0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:4f:f9:b4:c1:bc:43:ae:3e:a4:55:82:21:9e:a6:7d:3d:55:
         2b:b8:16:31:1d:80:de:6c:b2:70:04:57:c8:3b:64:2a:53:0c:
         b6:1b:a7:96:05:2c:ad:3b:66:b7:c0:f0:74:05:df:85:e4:22:
         86:60:47:f7:79:7d:c6:87:8c:28:d7:b5:d1:ed:4d:79:54:b9:
         62:7f:d0:24:b7:4b:04:2b:34:f1:c3:b6:76:9b:cc:fe:0e:1a:
         80:a7:8f:94:b7:f5:02:99:67:ee:93:40:75:bd:48:ea:73:ef:
         a1:a6:f9:3a:ef:93:2e:3b:b0:95:92:5b:8d:dc:d4:07:f1:45:
         a4:68:49:80:84:45:b8:af:f0:6a:d8:5e:a7:95:e3:80:bb:3d:
         ba:e1:95:77:2c:9f:cf:0f:c8:cf:dc:c4:be:e8:93:cd:8e:a8:
         06:1e:66:07:3a:6c:42:bb:e9:6b:e2:dc:90:c5:25:fe:59:f1:
         11:b1:fa:b1:92:b7:16:26:d5:d0:cf:22:fa:91:8f:4e:05:05:
         e1:3b:13:eb:f5:47:c6:f0:5d:0f:0c:81:0a:eb:38:db:24:bb:
         bf:4e:b1:79:8e:2c:5e:08:95:db:fa:0b:6e:e3:1f:45:6e:ac:
         43:c2:f3:5d:a7:d6:3c:eb:84:a9:8a:a9:a1:cc:ea:0e:0b:d3:
         c5:00:13:86
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeJ6+MGGNG9TRvpmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAxNDEzMDA0N1oXDTI1MDExMjE0MDA0N1owLzEtMCsGA1UEAxMk
Y2Q5MDgyMWYtYTAyYS00MDI5LThiNGItOWEyZTI1NDYyOGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8YEmVedTRT9UydzM1YOiZBPpo42kW48vh90
S75mWMarnPIKvchR1QowbDYr24Iev2bcuhvKiRWmx75bUYHCvULgGz3pSg/FwYgr
/EiFtvATdnCcWhmYMG/T0VKjem7D5pabQNozrnklTFRpARPM6TVUQMp78oIEdi5A
OCxQraEyVwYhnuuwoyYJ4YcgwZrPa+PFcxb8aqAXnm3Zfh3RIbwqQZH4/7E+elSY
/OGVtFiC/Jcap/56wCwQGuT7lgapnotCUZ+KvlaRuGuIZ+f5GuFzC8e5uC6eAXkZ
atpXR5gzvFS8UEDLm6g10w7fcFFrbKNr2eUiMQ3TL0T7aJfxPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC3ORmmc3v6fWD2xYKqIZBT+9cT8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2M3OWJmYWQtYzU1MC0z
NWZmLTgxMDItMTU0NzgzMDZlZmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQFLCw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABVP+bTBvEOuPqRVgiGepn09VSu4FjEdgN5ssnAEV8g7ZCpTDLYb
p5YFLK07ZrfA8HQF34XkIoZgR/d5fcaHjCjXtdHtTXlUuWJ/0CS3SwQrNPHDtnab
zP4OGoCnj5S39QKZZ+6TQHW9SOpz76Gm+Trvky47sJWSW43c1AfxRaRoSYCERbiv
8GrYXqeV44C7PbrhlXcsn88PyM/cxL7ok82OqAYeZgc6bEK76Wvi3JDFJf5Z8RGx
+rGStxYm1dDPIvqRj04FBeE7E+v1R8bwXQ8MgQrrONsku79OsXmOLF4Ildv6C27j
H0VurEPC812n1jzrhKmKqaHM6g4L08UAE4Y=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:54 2024 by rpki-client on console-fra.rpki-client.org