Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db7c544e-e72a-3a59-823a-1bd625dd8358.roa
File:                     db7c544e-e72a-3a59-823a-1bd625dd8358.roa (raw, json)
Hash identifier:          ozQkrV+s0V8v4Ia3olFqHTnmyCwRjJtOKfrCstWkH/8=
Subject key identifier:   37:F2:E8:6F:83:C7:B5:7D:3F:C0:2F:D5:06:81:98:C8:CE:8F:3E:89
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846E3E21FF099B7DA7D73406480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db7c544e-e72a-3a59-823a-1bd625dd8358.roa
Signing time:             Fri 16 Aug 2024 01:37:07 +0000
ROA not before:           Fri 16 Aug 2024 01:37:07 +0000
ROA not after:            Thu 14 Nov 2024 02:37:07 +0000
asID:                     6167
IP address blocks:        2600:100f:9100::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:e2:1f:f0:99:b7:da:7d:73:40:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:37:07 2024 GMT
            Not After : Nov 14 02:37:07 2024 GMT
        Subject: CN=448ae205-b1ce-450c-a023-15e86fc8bb6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:46:2a:4f:29:c2:be:0e:63:2b:2d:99:77:aa:
                    bd:07:6d:fd:1d:a6:1f:21:f8:37:64:6c:fc:68:ec:
                    e3:58:3c:af:fe:6b:ea:cd:7a:bf:c8:6a:a1:27:bc:
                    b2:f5:fc:9f:11:8f:b8:b4:66:13:36:a0:34:40:dd:
                    70:42:da:67:e9:6d:5d:1f:cb:fe:cb:b7:97:f6:a2:
                    15:5b:ac:1b:5b:f9:82:d9:3e:88:8b:94:4f:ef:9e:
                    81:0e:aa:35:ac:69:09:2d:3b:5d:bb:49:a4:c7:dd:
                    9a:cb:28:7f:1c:08:08:40:5a:89:43:72:10:cb:a7:
                    d2:69:b0:43:0c:2e:a1:63:3e:7a:9d:ef:54:86:d4:
                    25:68:89:f8:1f:00:28:5c:76:bd:6b:0f:bc:62:5d:
                    6c:05:4c:b4:ab:b4:04:37:a4:f7:7a:a7:2c:b4:0a:
                    f6:e8:16:b1:49:ae:e7:44:9a:d7:74:b6:53:d0:e6:
                    33:62:a8:91:64:5c:82:e4:a3:6a:a9:d3:35:83:90:
                    08:5f:e7:63:fb:6d:7b:44:2e:83:48:e9:34:01:98:
                    8c:c2:bf:2b:61:49:10:d4:e1:2d:45:02:88:f6:8d:
                    87:42:ee:a3:7d:8c:14:7c:6a:4a:b1:b3:d3:b1:b3:
                    3a:82:f6:7f:19:8a:28:c5:43:6e:82:86:62:89:d7:
                    4a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F2:E8:6F:83:C7:B5:7D:3F:C0:2F:D5:06:81:98:C8:CE:8F:3E:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db7c544e-e72a-3a59-823a-1bd625dd8358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:9100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ca:5c:35:64:7b:86:7b:70:ca:9f:d6:04:18:6d:fb:b4:60:
         b5:c9:f5:96:74:5a:16:22:26:97:d4:ba:8f:85:ad:ba:f4:cb:
         5c:ca:b3:c1:6c:dc:5b:18:8c:fa:f2:98:4b:ed:ae:11:ba:97:
         48:f9:4d:40:29:3e:3c:e2:f4:71:48:1d:40:de:6c:30:62:3f:
         98:63:62:2b:cb:6f:b5:8d:e2:75:d6:63:bc:34:3c:2b:23:28:
         32:7f:64:8d:a0:68:57:04:55:0f:66:85:85:01:16:54:ca:56:
         19:97:eb:13:5e:d3:84:40:fe:fa:95:1f:df:f6:3d:d6:48:6a:
         37:41:2d:78:a8:3d:93:df:16:95:74:e0:6e:a9:41:1b:fa:e9:
         7b:a0:76:3a:43:81:c3:3a:e1:22:bc:0d:06:07:3f:0f:36:a4:
         7b:50:49:5f:9a:1c:95:95:43:65:a0:1d:e2:db:96:27:ce:39:
         bb:b6:4b:ed:c2:d4:01:cc:10:a9:ea:72:52:f0:5c:f9:79:df:
         0d:2e:7d:f1:34:f3:2e:9c:f3:55:be:d5:3f:2c:43:5d:c0:9d:
         b0:f2:98:b7:a9:4c:f9:6e:08:70:01:c8:7b:4b:d8:07:5e:40:
         7b:41:59:1e:f8:20:c6:bd:d1:6f:55:bf:3f:38:8d:44:03:95:
         ec:bc:9e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:24 2024 by rpki-client on console-fra.rpki-client.org