Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d042b4b6-5df6-3674-84a5-b742778b4861.roa
File:                     d042b4b6-5df6-3674-84a5-b742778b4861.roa (raw, json)
Hash identifier:          FoF51dTvnNsmZwo7in+5skIQZf42vlN7t4jeu0FssYY=
Subject key identifier:   3A:14:59:A6:EF:E0:FD:18:93:BF:EA:F9:71:FD:1B:C8:F8:E8:01:EA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA0CEF979CFCDDB24E2500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d042b4b6-5df6-3674-84a5-b742778b4861.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100e:be1a::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:0c:ef:97:9c:fc:dd:b2:4e:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=dab31209-996b-4c3a-a5db-579c3f6b36d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:37:07:3c:fd:03:98:1a:16:c9:4d:05:4d:c3:
                    49:10:cb:a2:05:6e:b2:33:69:70:e3:88:6c:b4:ed:
                    d3:6b:c6:b6:de:fb:75:16:3f:34:dc:db:36:0d:9c:
                    48:30:90:de:7d:f2:13:1d:62:a2:08:1d:a1:14:87:
                    a4:dc:4b:7b:26:9a:af:eb:85:be:c3:b7:25:f5:dd:
                    6d:36:80:37:0a:f4:3e:74:71:98:2d:8a:6e:a8:09:
                    56:d8:cc:6c:4a:83:4b:2c:b6:50:c0:98:67:d5:11:
                    ad:20:3c:cb:c3:96:48:d8:71:54:8e:b3:7d:20:e7:
                    82:85:f9:05:fb:5f:4f:55:d8:76:6c:78:8e:7f:3a:
                    f8:f1:ce:11:65:71:64:8c:87:12:5d:5e:2f:07:48:
                    2e:f5:0b:43:d3:8d:e3:33:d3:72:69:df:df:51:be:
                    ec:2d:bf:0e:1f:53:23:ee:ea:3a:a3:09:c2:aa:6c:
                    81:51:15:38:fb:82:9b:14:c5:31:20:f1:fe:8b:17:
                    82:5d:e3:58:76:e2:42:28:d1:cd:cc:42:7c:79:28:
                    0d:24:17:7a:5c:2d:98:78:97:fe:14:f6:44:06:39:
                    03:24:e2:a2:ce:5d:95:18:22:7d:1c:0f:e8:51:2c:
                    c6:3c:93:44:02:92:fe:dd:0b:e0:75:57:9d:73:56:
                    a4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:14:59:A6:EF:E0:FD:18:93:BF:EA:F9:71:FD:1B:C8:F8:E8:01:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d042b4b6-5df6-3674-84a5-b742778b4861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:be1a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:47:a8:c0:38:1a:d2:cc:41:44:5a:8b:8c:47:83:a4:a3:99:
         61:6e:7b:0d:53:cf:55:6c:f2:99:c7:8f:2b:0b:de:cb:dc:b8:
         1b:df:00:50:82:42:b2:73:e6:ac:bb:0c:69:a9:98:62:82:b8:
         73:bb:b7:c8:f1:15:b3:eb:bd:15:5a:73:ec:80:95:bc:61:de:
         70:22:62:a9:b9:fc:29:df:c5:74:cc:12:8c:c7:13:97:6f:bf:
         1e:13:57:91:7f:16:23:a9:68:0a:1b:70:48:e2:86:d2:b2:5a:
         24:88:a0:ab:84:f4:92:ec:60:8e:49:82:5e:eb:9a:a1:5a:2f:
         a7:a2:fa:b4:10:03:64:d2:fe:b7:fe:4c:68:85:a8:e7:9b:65:
         06:40:b0:03:5e:fe:ce:1d:f3:53:d9:ab:89:d5:e0:ce:8a:44:
         2d:25:2c:88:98:7b:67:a7:9c:de:25:6e:96:07:f8:3a:56:3f:
         15:c8:06:2e:db:51:56:07:7c:e0:7d:9a:7f:fd:4c:81:6f:e1:
         6c:54:65:c5:c9:35:8a:3e:e3:bf:ab:db:97:63:0f:8c:7d:0a:
         45:90:bf:55:b8:bb:b2:aa:64:a2:d2:0f:ca:47:92:48:cc:46:
         d1:53:e6:5e:11:d6:c1:28:3c:53:b2:b2:56:a5:73:ad:fa:b7:
         64:76:c9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:55 2024 by rpki-client on console-fra.rpki-client.org