Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbe1e5b1-c296-336a-8998-9b3a78f2fcb5.roa
File:                     dbe1e5b1-c296-336a-8998-9b3a78f2fcb5.roa (raw, json)
Hash identifier:          ITBP+HTgqs5lvuJRt2R/rHt3ecRkVtPE85L4GnBQa5c=
Subject key identifier:   54:8F:4A:2C:06:2A:71:F9:4A:16:59:F5:A2:C2:8B:B0:6B:7C:9B:C1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846E3E2315BEBD96B7C28EC6760
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbe1e5b1-c296-336a-8998-9b3a78f2fcb5.roa
Signing time:             Fri 16 Aug 2024 01:37:15 +0000
ROA not before:           Fri 16 Aug 2024 01:37:15 +0000
ROA not after:            Thu 14 Nov 2024 02:37:15 +0000
asID:                     6167
IP address blocks:        2600:100f:b220::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:e2:31:5b:eb:d9:6b:7c:28:ec:67:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:37:15 2024 GMT
            Not After : Nov 14 02:37:15 2024 GMT
        Subject: CN=d6114d3f-f99a-4dec-9a13-772fb32b0a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f8:1d:c3:e5:7a:3b:24:c6:26:8b:b2:a0:b1:
                    8f:2b:10:3a:79:ef:be:ec:a9:f9:d3:03:3d:3b:3d:
                    ad:ab:ce:2f:64:1a:9b:f3:08:7f:c0:ee:a4:94:a3:
                    6f:d8:18:13:91:4d:2f:33:2c:99:3d:d1:e2:55:0c:
                    91:7d:b7:f1:60:f4:2a:f8:63:1c:92:90:a1:4b:63:
                    66:bd:f2:37:b1:c0:f3:fc:3b:9a:45:30:a2:67:61:
                    43:7e:1d:82:c8:e9:93:b9:a7:16:52:ef:aa:f3:e4:
                    78:e2:15:90:c3:fc:e7:22:20:db:79:65:e3:05:03:
                    02:9c:5e:ff:d4:86:8a:2c:95:53:09:d1:5e:d8:20:
                    1b:bc:21:47:24:c5:e4:35:1e:bc:58:82:d7:fc:54:
                    bb:6c:58:0b:e0:57:82:e5:6b:ff:9a:dc:cc:b0:9d:
                    63:ac:96:38:d4:d0:f2:e6:28:3e:ad:5f:b5:05:26:
                    af:e6:26:89:b4:5c:5f:94:e2:71:2e:3c:e9:10:77:
                    a5:b7:28:0c:e5:4d:23:15:c0:75:db:27:87:6e:d9:
                    c6:72:9d:8b:15:5b:a9:b1:3e:15:e7:ea:4b:2c:d3:
                    1b:d5:36:54:17:7c:4d:c6:6e:f0:05:7f:17:4f:85:
                    68:d2:a3:96:e7:c7:7e:26:08:d9:50:fd:91:fd:a1:
                    98:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8F:4A:2C:06:2A:71:F9:4A:16:59:F5:A2:C2:8B:B0:6B:7C:9B:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbe1e5b1-c296-336a-8998-9b3a78f2fcb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b220::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:2b:aa:34:68:73:3c:83:7c:23:ad:15:85:6e:bf:4b:15:ae:
         e8:17:2a:ed:bc:5e:3b:30:e1:a6:96:58:cd:d8:f1:f6:02:a7:
         6e:92:ba:fd:a8:7c:c5:72:e0:c9:e6:96:23:e2:be:6b:47:8c:
         ac:63:55:a3:11:e5:f7:7f:85:d3:75:ad:6c:23:e1:e9:77:87:
         fc:22:d1:d3:1a:74:4f:40:7b:87:e5:1b:2d:63:eb:fa:d5:ba:
         d3:68:7b:08:7f:79:ef:59:1a:1a:ff:37:55:6a:22:fe:81:7d:
         19:bd:5e:ab:d9:ca:a9:dd:5a:bf:a8:9b:dd:ce:34:58:f7:2c:
         fa:6d:25:65:6c:6c:1b:cc:9f:3b:db:bb:e5:fc:e8:d3:5a:b5:
         16:bc:b1:9f:de:ca:5d:b6:05:72:71:0a:c8:88:c8:7b:5d:cb:
         80:36:a8:db:90:7e:8a:5e:97:9e:4c:97:53:43:d3:9b:29:06:
         3b:98:14:fc:49:ca:87:6f:66:fe:5e:27:81:f4:e8:da:97:41:
         90:67:c6:83:c4:4a:5f:52:d5:c7:da:99:03:5d:01:fe:22:31:
         33:e7:6f:02:46:46:ba:99:4a:3b:46:8a:7a:ce:46:e7:d6:35:
         6e:d4:78:eb:58:8c:a1:2c:8c:25:aa:24:5d:e2:8a:e1:0c:55:
         5a:d9:9a:0e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEbj4jFb69lrfCjsZ2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDgxNjAxMzcxNVoXDTI0MTExNDAyMzcxNVowLzEtMCsGA1UEAxMk
ZDYxMTRkM2YtZjk5YS00ZGVjLTlhMTMtNzcyZmIzMmIwYTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/gdw+V6OyTGJouyoLGPKxA6ee++7Kn50wM9
Oz2tq84vZBqb8wh/wO6klKNv2BgTkU0vMyyZPdHiVQyRfbfxYPQq+GMckpChS2Nm
vfI3scDz/DuaRTCiZ2FDfh2CyOmTuacWUu+q8+R44hWQw/znIiDbeWXjBQMCnF7/
1IaKLJVTCdFe2CAbvCFHJMXkNR68WILX/FS7bFgL4FeC5Wv/mtzMsJ1jrJY41NDy
5ig+rV+1BSav5iaJtFxflOJxLjzpEHeltygM5U0jFcB12yeHbtnGcp2LFVupsT4V
5+pLLNMb1TZUF3xNxm7wBX8XT4Vo0qOW58d+JgjZUP2R/aGYsQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFSPSiwGKnH5ShZZ9aLCi7BrfJvBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGJlMWU1YjEtYzI5Ni0z
MzZhLTg5OTgtOWIzYTc4ZjJmY2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQD7Ig
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADErqjRoczyDfCOtFYVuv0sVrugXKu28Xjsw4aaWWM3Y8fYCp26S
uv2ofMVy4MnmliPivmtHjKxjVaMR5fd/hdN1rWwj4el3h/wi0dMadE9Ae4flGy1j
6/rVutNoewh/ee9ZGhr/N1VqIv6BfRm9XqvZyqndWr+om93ONFj3LPptJWVsbBvM
nzvbu+X86NNatRa8sZ/eyl22BXJxCsiIyHtdy4A2qNuQfopel55Ml1ND05spBjuY
FPxJyodvZv5eJ4H06NqXQZBnxoPESl9S1cfamQNdAf4iMTPnbwJGRrqZSjtGinrO
RufWNW7UeOtYjKEsjCWqJF3iiuEMVVrZmg4=
-----END CERTIFICATE-----
Generated at Tue Oct 22 21:23:08 2024 by rpki-client on console-ams.rpki-client.org