Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ceed53b0-77b0-3ef7-8535-3ac71fe82878.roa
File:                     ceed53b0-77b0-3ef7-8535-3ac71fe82878.roa (raw, json)
Hash identifier:          RQt64IOvyARpcul11kv9obzhz/lj7UHEAKWOEm6Trls=
Subject key identifier:   84:BA:84:CB:4B:E7:84:91:AD:91:F1:48:B2:6D:DE:18:98:C4:FF:27
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D769FFBF1F67DC38F74C400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ceed53b0-77b0-3ef7-8535-3ac71fe82878.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1004:b2a0::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:9f:fb:f1:f6:7d:c3:8f:74:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=d0c9badb-77a5-4ad9-913c-8cbde9ca9674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5f:0d:98:7a:5a:97:40:68:43:cb:84:a0:20:
                    48:5f:bb:c2:89:4c:5f:3e:ca:68:ed:fc:f4:a8:12:
                    9e:91:f8:a3:c2:f5:55:73:9e:4e:8e:2c:b4:90:0a:
                    a6:ae:d8:5c:59:dc:8b:d0:a2:19:18:99:2d:ea:34:
                    6f:28:b5:77:9f:39:92:7e:99:0c:75:bf:95:7e:a9:
                    31:8e:79:58:bd:7d:8e:8b:fe:59:d1:7b:87:7d:6d:
                    e3:2e:ce:be:06:65:29:1b:50:e1:89:64:64:44:0a:
                    ec:14:ba:cf:97:61:33:b6:cb:28:8d:7a:09:53:be:
                    46:c1:02:06:36:5d:c4:56:a8:eb:c2:03:9d:59:2b:
                    84:28:18:78:ee:12:95:89:78:93:c1:ad:d5:fc:3f:
                    c3:87:7f:a3:34:f5:45:91:a4:ff:6b:ab:70:ce:fa:
                    24:fe:dc:5d:0e:c4:bb:2e:3c:91:8b:f9:bc:6e:92:
                    08:46:4d:b4:1b:7e:1b:5b:82:36:f7:c6:0a:59:78:
                    1e:4f:1f:5e:bb:1f:8a:95:e4:de:ee:aa:7e:8c:2e:
                    21:34:59:e2:01:15:28:c0:d2:94:74:50:45:8e:7f:
                    17:98:b3:3d:d5:43:9a:41:0e:a0:95:b2:ed:d1:dc:
                    10:b3:c8:44:c8:c6:6d:f4:ca:f6:fc:65:9f:65:ad:
                    1a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BA:84:CB:4B:E7:84:91:AD:91:F1:48:B2:6D:DE:18:98:C4:FF:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ceed53b0-77b0-3ef7-8535-3ac71fe82878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b2a0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:2a:aa:ea:7e:d4:72:15:83:3f:05:56:e9:bc:86:06:c5:78:
         8d:46:25:eb:ca:08:ae:a0:f3:e1:43:41:5f:41:ea:f4:9f:57:
         e2:4d:c6:fe:53:7e:7b:14:4d:27:b5:5c:6d:3d:98:ef:99:94:
         e6:a2:96:cb:8c:d5:bf:86:33:b6:10:0f:c2:cb:b6:40:0d:41:
         03:c1:18:b3:a0:a1:d1:af:ba:7d:4c:3e:c2:7d:25:4f:bc:89:
         12:9a:ba:bd:e7:45:28:83:41:78:18:80:3d:96:62:0e:ef:fa:
         41:42:bb:ca:cc:65:d3:31:0b:df:ff:a3:38:bc:e7:b8:b8:48:
         b4:00:63:0a:6a:bf:4a:33:14:be:28:5d:31:9e:38:e3:8e:34:
         64:35:13:51:92:de:8e:e8:b4:d0:1b:f2:2e:4a:63:da:7c:ac:
         af:fe:08:1e:09:65:69:f2:e9:0a:90:d6:0b:38:d2:f1:31:30:
         04:c7:1a:f6:ab:51:8e:e4:96:52:9e:a3:14:c5:e8:ea:1c:b2:
         a3:07:28:92:77:bf:93:12:f9:d8:f4:e8:11:48:2d:43:64:1b:
         df:6e:59:2e:01:1c:be:89:7d:22:1b:bb:52:ca:cf:60:36:93:
         aa:f8:ff:cb:42:3e:2f:62:16:8d:5c:53:a0:c2:ed:fc:91:cd:
         29:da:2a:b7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeddp/78fZ9w490xAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
ZDBjOWJhZGItNzdhNS00YWQ5LTkxM2MtOGNiZGU5Y2E5Njc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF8NmHpal0BoQ8uEoCBIX7vCiUxfPspo7fz0
qBKekfijwvVVc55Ojiy0kAqmrthcWdyL0KIZGJkt6jRvKLV3nzmSfpkMdb+Vfqkx
jnlYvX2Oi/5Z0XuHfW3jLs6+BmUpG1DhiWRkRArsFLrPl2EztssojXoJU75GwQIG
Nl3EVqjrwgOdWSuEKBh47hKViXiTwa3V/D/Dh3+jNPVFkaT/a6twzvok/txdDsS7
LjyRi/m8bpIIRk20G34bW4I298YKWXgeTx9eux+KleTe7qp+jC4hNFniARUowNKU
dFBFjn8XmLM91UOaQQ6glbLt0dwQs8hEyMZt9Mr2/GWfZa0aqQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIS6hMtL54SRrZHxSLJt3hiYxP8nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2VlZDUzYjAtNzdiMC0z
ZWY3LTg1MzUtM2FjNzFmZTgyODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQBLKg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGYqqup+1HIVgz8FVum8hgbFeI1GJevKCK6g8+FDQV9B6vSfV+JN
xv5TfnsUTSe1XG09mO+ZlOailsuM1b+GM7YQD8LLtkANQQPBGLOgodGvun1MPsJ9
JU+8iRKaur3nRSiDQXgYgD2WYg7v+kFCu8rMZdMxC9//ozi857i4SLQAYwpqv0oz
FL4oXTGeOOOONGQ1E1GS3o7otNAb8i5KY9p8rK/+CB4JZWny6QqQ1gs40vExMATH
GvarUY7kllKeoxTF6OocsqMHKJJ3v5MS+dj06BFILUNkG99uWS4BHL6JfSIbu1LK
z2A2k6r4/8tCPi9iFo1cU6DC7fyRzSnaKrc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:50 2024 by rpki-client on console-ams.rpki-client.org