Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8daafaa-f1ae-36bf-9c29-1087d0faa1f3.roa
File:                     d8daafaa-f1ae-36bf-9c29-1087d0faa1f3.roa (raw, json)
Hash identifier:          1FdF+ygIO04Fa7XONoX3RxHAqDstNkrqHcPSCsfhmJI=
Subject key identifier:   D7:18:86:AF:93:C2:8A:18:EE:D3:91:D2:6A:91:3F:0C:D1:45:B0:DF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBE88ACB1119C891F77680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8daafaa-f1ae-36bf-9c29-1087d0faa1f3.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1016:a110::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:e8:8a:cb:11:19:c8:91:f7:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=a5c0bf1b-4a40-42d8-8187-7398bc2c2d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1e:3f:be:fb:4a:56:78:39:20:0d:c4:ab:cc:
                    ba:43:f4:54:71:8f:f5:4c:82:79:ca:8a:fe:9c:9a:
                    50:ba:ff:0a:91:42:00:40:bf:c0:ef:2c:d1:e7:90:
                    96:20:84:a5:39:f7:c6:12:23:2f:4a:3f:f3:1d:da:
                    04:fd:76:8d:66:4a:24:87:00:d4:a5:75:41:c7:47:
                    03:84:88:fd:de:52:90:66:f9:ae:42:b5:a9:d2:3d:
                    b2:67:8e:f6:e4:9a:3f:4d:ca:9d:8a:26:4a:c4:98:
                    c6:ad:f2:f1:e6:c5:b1:1c:77:59:56:75:ad:07:22:
                    60:bb:26:15:d9:06:ff:06:f7:7d:b2:3e:2c:b6:f8:
                    8b:95:d6:0c:49:b1:1d:d2:cc:8b:50:de:24:bd:2e:
                    3a:aa:83:95:55:e6:2f:df:d3:5c:f2:a7:08:7a:e8:
                    fe:f1:74:33:5a:94:0b:6f:6e:0d:97:ca:7e:a6:83:
                    eb:25:f9:54:94:66:14:04:ff:c5:4e:82:43:21:9e:
                    5f:fa:ed:b5:df:49:26:77:1e:b1:db:33:cc:c1:12:
                    bc:24:20:7c:9c:4a:d3:b2:9d:48:41:42:28:0d:f3:
                    ea:28:e5:69:1d:32:67:2d:9d:3e:d9:7f:da:05:cd:
                    f5:57:2a:e8:13:bb:01:7a:5e:b8:fc:1b:61:9f:d6:
                    05:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:18:86:AF:93:C2:8A:18:EE:D3:91:D2:6A:91:3F:0C:D1:45:B0:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8daafaa-f1ae-36bf-9c29-1087d0faa1f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:a110::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:74:d8:16:d3:6d:c0:3b:44:b9:60:da:f9:95:ec:50:ac:17:
         1d:f9:b0:5a:49:f8:6e:0c:b0:03:86:b9:47:42:73:31:04:f2:
         f7:ba:e8:d1:1a:18:30:ef:07:c8:c9:8a:47:8b:69:78:bd:6b:
         00:0e:60:af:c0:a2:55:48:45:8f:95:00:f9:8d:86:01:61:5a:
         0e:b3:38:45:ca:21:5a:87:e6:af:28:84:47:5c:19:d3:2f:da:
         81:df:7d:00:7d:7f:9b:ad:ed:59:bf:a6:7b:50:c4:87:17:ea:
         5a:f9:d2:94:bc:44:6c:3e:5c:2e:eb:95:c6:86:db:13:08:b7:
         40:6d:fa:8f:8f:00:4f:f1:d3:96:0c:58:b9:aa:a8:32:fe:a1:
         92:17:0a:b3:02:89:f1:5a:3e:7d:53:fb:0d:54:b2:29:3f:d4:
         62:ed:c0:3a:ef:13:b9:90:b5:53:18:60:f9:a3:6d:7b:43:51:
         ce:c0:90:e5:56:69:20:d8:28:a7:63:33:6e:a2:8d:3d:45:0e:
         0d:95:95:84:c0:31:5f:0c:10:db:9a:b0:6f:6f:21:71:9c:6a:
         85:8a:a8:04:64:23:1e:df:3f:8b:b1:ac:2d:da:0e:02:0a:73:
         48:71:e1:aa:e9:a7:d7:11:a1:4f:e7:83:c2:76:55:05:29:a4:
         f3:e8:a5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:57 2024 by rpki-client on console-fra.rpki-client.org