Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d047a20b-883d-3419-b44a-bf1016325d69.roa
File:                     d047a20b-883d-3419-b44a-bf1016325d69.roa (raw, json)
Hash identifier:          dZIHwcRMP2lSL6Jw7xLatnZ0RZVJCR9CU1dTHsKt4Qk=
Subject key identifier:   3D:43:A1:E2:D7:99:4B:D5:4D:0A:4E:53:F1:D1:43:EC:8E:DD:AD:E0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA0F6B752CAD7DC5D40C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d047a20b-883d-3419-b44a-bf1016325d69.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100f:b100::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:0f:6b:75:2c:ad:7d:c5:d4:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=30c1ffe0-d4da-4dd7-bead-a6201adbf26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c1:c8:22:5b:21:15:ad:5e:11:e7:56:a2:89:
                    30:35:89:f8:c7:27:4d:b7:3e:62:c3:9a:ba:12:77:
                    35:7f:ee:fa:a3:06:e0:8c:f1:e3:41:80:fe:b9:ae:
                    eb:1c:27:cd:70:81:fb:53:da:f1:18:36:c6:e2:f9:
                    1b:66:d7:ac:4d:96:69:d9:66:e2:c0:d0:c1:23:46:
                    4e:2a:52:0d:71:c7:52:01:30:8e:fb:cc:b3:59:ed:
                    d7:48:52:47:0b:ce:37:2d:a9:ee:a2:ac:48:2c:de:
                    dd:f9:19:f0:99:1e:c9:b7:41:37:06:a4:68:e0:4c:
                    72:ed:90:8f:c7:88:cb:49:58:de:51:48:2a:b4:36:
                    27:d8:01:31:ac:ad:7c:c2:1b:1b:21:02:0c:56:ac:
                    75:85:b3:e1:46:2a:ea:64:d5:0c:fd:27:b7:37:39:
                    15:ab:d6:1a:ee:98:e2:00:b2:b8:dd:61:cb:75:1b:
                    a2:00:a5:0f:b9:9b:fc:33:f7:27:f9:dd:4a:e3:0f:
                    78:cc:8e:5b:07:1d:95:c5:d9:bf:0c:63:8e:46:75:
                    2b:f9:51:47:23:72:ab:a8:5e:f7:81:01:6d:c7:77:
                    1c:f3:85:74:b7:22:46:99:3e:23:29:fb:8c:dc:72:
                    90:86:c0:fc:91:8f:b4:79:bb:c9:40:0b:8c:98:b0:
                    db:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:43:A1:E2:D7:99:4B:D5:4D:0A:4E:53:F1:D1:43:EC:8E:DD:AD:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d047a20b-883d-3419-b44a-bf1016325d69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:da:28:51:63:3f:dd:d4:80:9e:e1:ec:0c:ad:97:c0:7f:1a:
         89:37:5a:de:bd:2a:0d:03:b7:0f:19:23:b5:2d:73:99:96:11:
         e8:75:11:dd:83:ac:7d:5e:22:20:23:39:7f:11:7d:d1:1f:d3:
         b2:76:b7:72:58:b7:db:b2:f7:03:6d:b1:9e:58:c4:9a:19:2c:
         3e:2e:09:31:e7:db:75:4c:8d:74:43:1b:7a:82:b9:e1:ef:ab:
         6f:2e:7f:63:33:33:bc:d4:bf:0a:c0:91:e4:88:41:45:85:c0:
         07:0a:94:71:f3:12:1d:cb:53:33:84:02:ea:bb:ff:84:d6:75:
         d2:c8:6e:d9:da:73:05:5f:4b:ad:91:9c:4e:a5:b1:25:ac:5f:
         03:87:2e:48:1c:ce:ba:2f:11:04:6a:a1:c3:df:02:fe:2b:58:
         eb:39:a3:10:71:16:56:b1:fe:1f:65:c4:03:7f:29:a3:ed:c0:
         15:de:e7:71:e4:fa:f3:68:4d:fe:75:1d:5e:b2:7a:30:90:7c:
         25:d1:41:bf:10:e2:5b:03:06:fd:b8:d4:79:be:25:13:ee:29:
         10:19:be:a4:92:3c:21:01:09:76:74:dc:43:a7:27:bf:fc:62:
         61:63:98:c5:8f:b4:30:0b:43:01:f8:21:df:88:5a:63:25:19:
         df:59:72:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:50 2024 by rpki-client on console-ams.rpki-client.org