Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbde4e5c-3ccd-3205-b546-9fd5ff527b2e.roa
File:                     dbde4e5c-3ccd-3205-b546-9fd5ff527b2e.roa (raw, json)
Hash identifier:          1Zqa/dhoI8H7xsiN/IawFC9I7O+SmNJgLyu2x5KLvoU=
Subject key identifier:   E7:A9:0D:1D:56:C6:24:BC:1C:A4:E8:FF:6B:D9:E0:BD:9D:40:38:19
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA04FFCD9BE4EA8A0A1380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbde4e5c-3ccd-3205-b546-9fd5ff527b2e.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100d:b0c2::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:04:ff:cd:9b:e4:ea:8a:0a:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=260ba2a1-4f30-4fd0-9c4f-45e37ee53acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:c1:de:16:62:d4:92:aa:2a:2d:aa:ea:e5:
                    60:ac:fc:9f:61:1d:11:9f:3d:46:50:a0:ac:52:16:
                    79:d6:b4:3c:4f:3d:08:5a:fd:44:fb:b7:5c:e2:db:
                    2a:42:6c:9d:fc:3b:7a:37:78:bc:27:5a:c9:cf:cb:
                    2b:39:2d:dc:28:95:24:81:b9:1b:ca:72:a8:45:cf:
                    70:be:ef:e1:79:7b:0f:86:43:7a:56:7c:db:7f:e7:
                    29:dc:ed:36:69:35:49:69:59:8c:f8:b7:4c:d7:55:
                    7a:c2:da:0a:f2:87:69:3d:49:0d:0b:8a:ae:32:f8:
                    79:ba:bf:d6:95:94:91:27:ed:44:7c:8e:45:e9:b2:
                    0d:5b:aa:53:fe:8e:4d:3c:6d:36:f5:8c:55:6e:9c:
                    e1:5c:b9:3b:36:a0:05:81:23:20:19:32:ef:a3:22:
                    7b:ce:3e:60:54:3f:a3:66:4a:3b:b0:01:2a:d3:f2:
                    dd:0d:b4:1c:10:5b:8c:d0:9b:e2:05:7c:59:ac:a8:
                    bd:0a:bc:93:6d:d8:a3:28:94:6b:ca:84:5d:f4:ad:
                    ac:a3:18:a6:9b:7b:fd:54:f9:2d:a4:ff:ee:c3:a1:
                    bd:53:8c:23:b9:54:e7:15:3f:3c:ca:f3:d0:d4:36:
                    6a:b0:d9:b5:84:20:ed:ac:56:b5:c7:ea:c5:4c:96:
                    02:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A9:0D:1D:56:C6:24:BC:1C:A4:E8:FF:6B:D9:E0:BD:9D:40:38:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbde4e5c-3ccd-3205-b546-9fd5ff527b2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b0c2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ad:e0:b5:ed:64:17:43:42:9d:a7:6a:54:89:88:7d:65:f8:
         78:15:0a:61:44:b5:cd:97:ed:fd:ee:f0:f6:e3:0a:77:e7:0c:
         32:f9:9a:45:62:2b:90:1a:36:e5:7c:d7:20:49:47:a7:1c:e9:
         7a:3f:3c:5c:65:85:9b:0a:2d:17:09:e5:6c:ac:ac:68:26:18:
         e5:6c:52:03:53:67:ab:cb:c7:e1:d8:d1:c0:db:f0:5e:30:79:
         01:ff:d6:c3:04:e4:8b:78:7f:0f:8d:87:12:1b:45:78:3c:ee:
         85:7b:5a:fe:78:cb:af:01:bd:1c:f2:a1:bd:b9:4c:9a:a1:79:
         95:c7:5e:0d:96:59:26:d4:b2:f2:96:cb:ad:25:b2:40:14:b5:
         4b:c2:b5:77:b8:a9:dd:b8:e2:4a:be:80:92:45:c5:4a:5f:9c:
         ad:66:5d:0d:9d:a6:30:06:ff:0c:fb:e5:75:be:61:98:b4:ea:
         b1:09:d8:85:65:fc:2d:5c:6b:82:a0:56:58:40:5e:1a:34:a1:
         a3:ee:26:e1:40:80:5c:89:54:65:59:52:2c:23:c5:77:73:dc:
         19:25:3c:7f:1c:0e:d0:a3:11:d0:76:ff:cb:75:8a:4e:a0:9a:
         17:0b:3d:9a:4a:25:d1:32:f9:70:9c:31:3e:5d:8f:57:81:b6:
         f3:19:71:65
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfEqgT/zZvk6ooKE4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk
MjYwYmEyYTEtNGYzMC00ZmQwLTljNGYtNDVlMzdlZTUzYWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtODB3hZi1JKqKi2q6uVgrPyfYR0Rnz1GUKCs
UhZ51rQ8Tz0IWv1E+7dc4tsqQmyd/Dt6N3i8J1rJz8srOS3cKJUkgbkbynKoRc9w
vu/heXsPhkN6Vnzbf+cp3O02aTVJaVmM+LdM11V6wtoK8odpPUkNC4quMvh5ur/W
lZSRJ+1EfI5F6bINW6pT/o5NPG029YxVbpzhXLk7NqAFgSMgGTLvoyJ7zj5gVD+j
Zko7sAEq0/LdDbQcEFuM0JviBXxZrKi9CryTbdijKJRryoRd9K2soximm3v9VPkt
pP/uw6G9U4wjuVTnFT88yvPQ1DZqsNm1hCDtrFa1x+rFTJYCEwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOepDR1WxiS8HKTo/2vZ4L2dQDgZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGJkZTRlNWMtM2NjZC0z
MjA1LWI1NDYtOWZkNWZmNTI3YjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDbDC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI6t4LXtZBdDQp2nalSJiH1l+HgVCmFEtc2X7f3u8PbjCnfnDDL5
mkViK5AaNuV81yBJR6cc6Xo/PFxlhZsKLRcJ5WysrGgmGOVsUgNTZ6vLx+HY0cDb
8F4weQH/1sME5It4fw+NhxIbRXg87oV7Wv54y68BvRzyob25TJqheZXHXg2WWSbU
svKWy60lskAUtUvCtXe4qd244kq+gJJFxUpfnK1mXQ2dpjAG/wz75XW+YZi06rEJ
2IVl/C1ca4KgVlhAXho0oaPuJuFAgFyJVGVZUiwjxXdz3BklPH8cDtCjEdB2/8t1
ik6gmhcLPZpKJdEy+XCcMT5dj1eBtvMZcWU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:53 2024 by rpki-client on console-ams.rpki-client.org