Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6f1b0cb-b119-3a50-b16c-4512d7a7df32.roa
File:                     d6f1b0cb-b119-3a50-b16c-4512d7a7df32.roa (raw, json)
Hash identifier:          7U2BwpdSWd7t0eM6FCkea2xrPcCKdOWM1GZzSPUnrdk=
Subject key identifier:   C3:0F:49:28:82:BB:14:B1:2C:19:12:1B:4E:E9:24:C0:62:F9:5F:4D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D769865083B1AA314560D40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6f1b0cb-b119-3a50-b16c-4512d7a7df32.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1002:b1b0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:98:65:08:3b:1a:a3:14:56:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=0d1a5d11-f21e-43e4-b045-de876c12d8be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:09:3c:c5:ce:54:be:0c:00:e1:d4:49:c7:2b:
                    87:78:ad:19:77:27:57:f0:69:05:49:1e:7d:58:8a:
                    98:21:c0:3c:70:8e:91:cc:13:2e:3b:41:c0:dd:b2:
                    01:09:45:3c:75:8a:a1:eb:dc:2e:69:97:17:ab:49:
                    a8:ae:4b:14:66:12:f6:53:26:57:70:78:f5:7d:cd:
                    7c:ac:e8:3b:37:6b:c1:3c:ca:e6:5c:42:f6:4d:7d:
                    cd:57:64:14:c7:1f:52:f8:43:8c:4e:c9:e7:21:a5:
                    f0:31:e0:3c:e7:0d:87:41:fa:68:c5:38:d2:5a:4a:
                    8d:31:bd:64:79:62:bb:03:53:33:7c:dc:30:b1:16:
                    a7:6c:33:9b:74:e4:61:dd:93:4e:f5:7e:47:e8:13:
                    24:8a:d5:de:17:2f:3d:ce:df:6b:11:cf:e7:db:dc:
                    1a:5c:b0:a8:9b:4d:77:c7:0d:7a:93:7b:1e:e0:dd:
                    ea:14:ce:66:a0:b7:23:96:34:56:a4:95:cb:32:af:
                    28:fd:d2:92:d9:9a:0b:9a:14:a7:09:68:0d:e1:a3:
                    b7:cd:4f:10:49:fb:02:6f:35:b2:37:37:58:f6:2e:
                    d3:78:a5:69:cc:e6:80:10:8e:05:36:01:20:a4:6a:
                    76:a9:08:69:12:11:a3:6a:b6:33:9a:bb:d0:00:cd:
                    a8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0F:49:28:82:BB:14:B1:2C:19:12:1B:4E:E9:24:C0:62:F9:5F:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6f1b0cb-b119-3a50-b16c-4512d7a7df32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:b1b0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:90:ae:cf:35:79:f2:d2:7c:23:2b:cd:ff:8a:6b:c4:04:99:
         fc:2d:95:ee:66:31:85:3b:89:52:08:09:0a:50:08:e1:19:b8:
         04:a4:cc:d1:16:d8:69:78:8b:ff:eb:58:ef:1c:b7:fb:af:08:
         2d:a6:2f:09:e2:f3:d2:ac:f0:97:20:d4:b4:54:b0:71:04:79:
         de:13:b3:4e:e4:20:cb:4f:25:19:cf:05:ab:b5:63:06:55:bf:
         7a:13:71:1f:07:be:df:5c:93:91:b2:9b:e7:f4:7b:ae:b6:66:
         bb:1f:cf:38:94:b7:f1:d0:87:4a:eb:7e:bb:2e:b5:48:15:93:
         ae:43:a5:d1:16:05:df:0d:79:e6:e1:b1:26:3e:dd:05:19:e8:
         bf:6f:fe:8d:85:e5:a9:35:68:67:51:59:04:ab:e4:00:ae:5a:
         5f:88:f4:21:4a:ab:c3:15:e5:78:11:f6:2c:46:88:05:e0:af:
         00:c0:2f:e4:d9:2c:89:24:37:91:11:94:df:06:5b:42:de:5e:
         bc:43:56:b6:a9:0b:55:f4:4c:7d:3d:a5:45:b7:72:3b:5c:29:
         a7:5f:ff:56:94:76:16:3c:c5:7f:c5:4f:14:f4:66:5c:bf:c9:
         92:85:69:5c:61:02:da:7a:9c:ea:aa:d5:27:b4:59:64:a7:dc:
         cf:5c:d2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:56 2024 by rpki-client on console-fra.rpki-client.org