Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db0b3d1f-43fd-38be-8d57-d318857053ab.roa
File:                     db0b3d1f-43fd-38be-8d57-d318857053ab.roa (raw, json)
Hash identifier:          DhWtnTM2tiul+XsxVDi8JFA76lYpxv8VGcS2WcfAWrE=
Subject key identifier:   01:BE:6E:E2:51:71:45:EC:DB:0A:DA:72:7A:F9:56:09:A5:CC:7B:22
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4A9FF4D90C369874132D380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db0b3d1f-43fd-38be-8d57-d318857053ab.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100c:9200::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:a9:ff:4d:90:c3:69:87:41:32:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=e0b221ad-522c-4fc7-8bc4-44f0937830c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2d:90:67:f0:da:27:2c:fd:9c:3c:cc:3b:ad:
                    89:11:8b:94:c3:c1:21:66:e2:98:bb:51:72:e3:05:
                    e4:63:86:bf:52:9e:70:fe:f6:ef:13:94:bc:7f:fb:
                    a0:e0:74:31:1f:61:84:f2:8e:0c:2a:f9:aa:0e:5c:
                    23:9c:3f:a3:e5:2d:27:ad:ae:66:e0:34:28:77:cd:
                    ed:07:72:69:22:32:e8:51:bb:a5:c8:77:5e:b6:3d:
                    c3:e1:b2:50:c9:59:c5:55:dc:c3:5a:65:9a:5c:6c:
                    41:99:ff:25:23:d4:a0:f7:54:04:da:b3:81:38:44:
                    32:93:f8:2f:19:7d:ad:77:3a:cb:f8:9b:cf:52:e4:
                    81:67:f2:95:19:48:66:a6:ae:e5:7b:a5:1b:a3:da:
                    a2:db:86:62:11:9d:be:8c:b3:3b:ba:f6:33:0c:45:
                    6a:da:d1:d2:e5:a1:45:9d:6e:dc:6b:56:ae:34:19:
                    8d:39:01:d8:14:68:62:33:59:34:92:a9:f5:a3:24:
                    59:1c:a9:40:3f:81:17:76:cc:7d:33:10:a8:0b:ba:
                    91:a7:b7:d2:b3:e6:bd:a4:f0:a2:54:d2:f8:62:5f:
                    69:52:d8:78:29:8c:34:55:6c:43:1e:9e:fe:60:ec:
                    b0:cd:f8:7f:63:47:8f:f7:1b:20:d8:35:01:3e:13:
                    d6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BE:6E:E2:51:71:45:EC:DB:0A:DA:72:7A:F9:56:09:A5:CC:7B:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db0b3d1f-43fd-38be-8d57-d318857053ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:9200::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:7a:2e:8a:f7:66:d2:98:55:af:68:50:3d:cf:08:8e:be:bc:
         19:95:bf:6d:dd:46:d0:7c:a8:e9:18:b6:31:36:eb:b5:f9:2d:
         33:03:13:b9:bd:9d:4b:0e:5b:bc:dd:5c:12:ae:0c:a2:27:62:
         b2:d4:67:e6:89:9e:ab:81:1f:2a:41:e8:fd:48:70:bc:10:30:
         fd:ec:c3:e0:99:a9:b5:fc:74:42:5b:40:56:0a:54:8b:05:7b:
         bc:1f:da:fe:c2:c5:06:b6:e5:09:6b:0f:16:a9:72:6c:1d:63:
         4f:c8:b9:94:4c:40:f9:b5:b5:68:93:4c:ad:96:ce:69:aa:2e:
         95:95:69:c3:18:35:33:da:c3:b7:fa:da:5b:4f:5b:75:9d:e5:
         c7:e9:f8:62:5e:74:12:2a:92:e7:1c:bd:d0:4f:15:85:5e:b6:
         1f:a9:b4:58:8f:b7:93:9d:6b:5b:43:7e:42:d2:35:77:f5:f6:
         bc:fc:18:f2:fc:2a:e8:d6:95:69:36:1f:84:b6:e5:11:42:75:
         81:4f:94:29:19:b0:68:9d:39:45:ef:5a:b0:f3:40:48:ac:73:
         ad:7f:11:c7:a4:48:0d:f1:eb:72:02:b4:8a:92:2a:6d:8f:de:
         28:90:37:26:f1:87:24:85:46:fb:d6:53:38:ed:f7:0c:c9:87:
         f4:87:c2:e7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfEqf9NkMNph0Ey04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk
ZTBiMjIxYWQtNTIyYy00ZmM3LThiYzQtNDRmMDkzNzgzMGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki2QZ/DaJyz9nDzMO62JEYuUw8EhZuKYu1Fy
4wXkY4a/Up5w/vbvE5S8f/ug4HQxH2GE8o4MKvmqDlwjnD+j5S0nra5m4DQod83t
B3JpIjLoUbulyHdetj3D4bJQyVnFVdzDWmWaXGxBmf8lI9Sg91QE2rOBOEQyk/gv
GX2tdzrL+JvPUuSBZ/KVGUhmpq7le6Ubo9qi24ZiEZ2+jLM7uvYzDEVq2tHS5aFF
nW7ca1auNBmNOQHYFGhiM1k0kqn1oyRZHKlAP4EXdsx9MxCoC7qRp7fSs+a9pPCi
VNL4Yl9pUth4KYw0VWxDHp7+YOywzfh/Y0eP9xsg2DUBPhPWvwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAG+buJRcUXs2wracnr5VgmlzHsiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGIwYjNkMWYtNDNmZC0z
OGJlLThkNTctZDMxODg1NzA1M2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDJIA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABd6Lor3ZtKYVa9oUD3PCI6+vBmVv23dRtB8qOkYtjE267X5LTMD
E7m9nUsOW7zdXBKuDKInYrLUZ+aJnquBHypB6P1IcLwQMP3sw+CZqbX8dEJbQFYK
VIsFe7wf2v7CxQa25QlrDxapcmwdY0/IuZRMQPm1tWiTTK2WzmmqLpWVacMYNTPa
w7f62ltPW3Wd5cfp+GJedBIqkuccvdBPFYVeth+ptFiPt5Oda1tDfkLSNXf19rz8
GPL8KujWlWk2H4S25RFCdYFPlCkZsGidOUXvWrDzQEisc61/EcekSA3x63ICtIqS
Km2P3iiQNybxhySFRvvWUzjt9wzJh/SHwuc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:53 2024 by rpki-client on console-ams.rpki-client.org