Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc3d6d5b-1155-3498-852a-efbae7704593.roa
File:                     dc3d6d5b-1155-3498-852a-efbae7704593.roa (raw, json)
Hash identifier:          72hLX3grUPy3IQZlmtxRDFx2wAYEPDTZk/3ErZPilHk=
Subject key identifier:   08:CA:51:41:53:B0:D5:E9:2E:B8:E2:09:64:6E:64:FA:2E:14:1A:09
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBE9912362E95E790B0C7E
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc3d6d5b-1155-3498-852a-efbae7704593.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1016:b110::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:e9:91:23:62:e9:5e:79:0b:0c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=582b614c-eb3f-423a-ba3e-87e6b99916aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:11:e9:0a:ef:51:f0:c4:95:0f:53:46:39:d6:
                    68:40:f9:98:67:d1:ea:4d:bb:6f:d4:0b:96:6d:ac:
                    21:7b:f7:83:ab:b8:3e:a7:96:f1:31:3d:38:ab:5d:
                    56:93:58:e0:8a:e0:b7:87:4b:fa:42:26:2d:db:0d:
                    61:a8:f0:a1:c9:df:7e:e8:99:46:bf:7a:19:6e:0d:
                    1c:3e:98:55:04:c9:6d:c5:25:25:93:f3:9e:fe:39:
                    86:0a:cd:77:ab:1b:34:e0:d4:45:78:ef:48:cd:b0:
                    ce:c3:d3:f0:69:8a:3e:21:71:95:34:1c:59:c8:2e:
                    59:af:49:97:c6:36:ca:9c:47:7b:f7:a4:7b:a8:3a:
                    4b:4b:ac:0e:77:40:ec:e4:b7:e3:58:d8:1f:c8:9e:
                    6c:87:f3:a2:3f:20:b7:2f:30:7b:8d:89:a5:02:af:
                    16:b4:56:db:07:6b:81:ab:76:d0:85:43:55:6b:ca:
                    0e:58:1a:18:f3:86:3b:88:86:80:38:42:eb:e4:57:
                    34:d8:c9:b6:c4:18:eb:48:17:f0:32:c5:ac:65:91:
                    13:b6:6e:2e:fb:50:aa:70:88:ef:f6:4c:d9:3f:11:
                    fe:60:1f:59:79:b3:c3:78:91:85:af:cc:9f:26:de:
                    1a:03:30:24:5f:5e:07:da:69:9d:fb:53:69:be:e5:
                    f2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CA:51:41:53:B0:D5:E9:2E:B8:E2:09:64:6E:64:FA:2E:14:1A:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc3d6d5b-1155-3498-852a-efbae7704593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:b110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:11:d7:8c:ea:17:40:5e:69:51:d8:92:43:af:5c:9f:9a:b1:
         e5:1b:1c:66:44:02:47:8d:a1:0c:6f:0d:43:46:d1:ef:56:61:
         7a:8a:55:57:30:52:30:ce:fc:63:4d:1b:40:2e:39:12:ef:f4:
         53:61:ff:71:78:64:43:d6:06:7b:6c:f6:1b:ae:28:d8:90:33:
         82:8c:78:f2:cb:d8:3f:27:d1:7d:f1:1f:cd:bc:04:35:a0:50:
         c2:ba:0f:15:e0:75:e7:2f:4d:9b:f8:c7:9d:7a:85:d7:46:a7:
         b3:a7:9e:9b:c0:56:b5:83:96:ee:de:d8:eb:e4:5d:25:0f:3d:
         64:51:b3:ec:81:84:bc:1b:eb:16:2a:e2:b0:b5:1b:5c:25:ab:
         c9:ae:ee:80:d4:2b:ba:df:d2:27:10:c5:be:7a:82:24:44:82:
         b3:a0:c1:98:6c:79:05:37:49:56:eb:8e:63:16:94:4f:29:77:
         cf:c3:01:41:56:32:e1:c8:61:51:1a:c1:f0:e3:89:e2:41:df:
         fa:9f:12:01:f2:6e:9b:14:d4:11:51:f8:de:cf:01:1e:d8:40:
         0a:90:a4:58:bd:dd:b8:bc:98:cb:b4:d6:2f:bc:23:5e:ed:f2:
         8e:dc:a7:a6:4d:b6:e6:6f:cc:48:93:08:d8:8b:0c:c4:10:74:
         8d:29:1e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:57 2024 by rpki-client on console-fra.rpki-client.org