Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e4f2bed1-869f-3059-94ab-5faa063f9ad6.roa
File:                     e4f2bed1-869f-3059-94ab-5faa063f9ad6.roa (raw, json)
Hash identifier:          XM3ZF/mkdlnKkM+f9iEw5ZOTzuBGekHfZ9W7ccxmEfg=
Subject key identifier:   54:AD:49:CF:AE:79:97:DD:3D:17:FE:D9:28:C6:A9:60:68:56:EC:FC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D7695A1962665BA756B2300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e4f2bed1-869f-3059-94ab-5faa063f9ad6.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1001:f000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:95:a1:96:26:65:ba:75:6b:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=52eb49c8-b4d5-4299-9ab5-a68acaab87a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d6:f4:87:c0:32:a6:19:90:f2:77:38:9b:fa:
                    88:eb:f6:53:f3:50:ad:fb:4a:a7:52:21:73:54:fb:
                    3a:f2:36:a8:7e:02:4d:75:75:73:0e:44:13:bd:74:
                    75:3a:d6:fd:54:e0:af:b3:16:21:03:5b:d0:95:41:
                    a8:b8:92:eb:19:cb:5a:da:cd:27:19:12:1a:ea:af:
                    06:1f:46:22:c5:d9:b0:75:06:22:85:f7:a3:5f:b0:
                    bc:13:b3:eb:2b:11:ab:e9:2c:79:5e:3c:47:5f:6c:
                    5d:67:d2:e6:16:87:c5:e8:14:81:fb:7f:3e:98:10:
                    e9:fb:e2:2a:6d:b9:77:e2:1d:13:0b:bf:bd:65:79:
                    cf:65:36:dd:0f:18:81:ee:47:ce:95:cf:3f:31:4e:
                    63:79:7f:83:a3:da:2d:68:57:cc:6f:ea:0f:84:3d:
                    ef:b1:8f:bd:56:19:67:4f:7f:95:c0:b4:5c:8a:e3:
                    de:0a:81:e2:33:a2:26:c1:fa:82:b4:0e:ab:8f:7a:
                    2e:06:32:e0:05:da:31:05:dd:26:95:50:fa:f7:59:
                    ac:e5:98:77:82:b2:f3:b8:ad:d2:1b:0a:b8:d7:2b:
                    25:7a:44:10:50:5a:f7:a8:09:33:50:54:9b:6c:40:
                    da:1d:ab:24:6a:58:39:40:53:8d:6a:f4:4c:ed:c9:
                    12:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AD:49:CF:AE:79:97:DD:3D:17:FE:D9:28:C6:A9:60:68:56:EC:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e4f2bed1-869f-3059-94ab-5faa063f9ad6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:71:1e:7c:08:31:ec:84:38:1c:e1:b3:b7:04:7f:3d:c0:df:
         19:ee:7c:c1:36:c1:fc:1b:7a:68:71:70:07:35:27:04:40:50:
         4d:1b:e0:bd:1d:2d:0b:b4:d0:61:2c:34:4c:b9:a1:a5:1c:17:
         7d:96:e2:13:1e:a1:3e:04:66:1f:a7:85:d7:40:b4:3c:ba:09:
         61:b1:53:d4:69:93:28:03:3e:1c:d0:13:fb:4b:94:1d:d6:c5:
         17:76:8f:95:df:77:1b:c7:5f:b8:89:a0:81:f3:55:c3:69:94:
         81:4d:04:5b:76:d0:79:f5:8b:c4:f5:02:c1:b4:12:a5:87:4a:
         66:d5:59:79:22:ac:ba:68:c3:ca:3d:ee:82:2f:8a:c2:66:18:
         0a:2f:18:7c:4c:2c:c0:f2:7e:e5:8a:01:a0:43:6c:95:9c:5d:
         06:4b:73:a3:c4:dc:3f:4c:1f:8e:02:b6:8e:8a:ce:cd:a7:17:
         3c:14:04:88:b4:56:80:ab:98:fd:43:3b:65:15:2d:1a:45:bb:
         6c:f0:4c:e7:24:f9:dc:f6:e1:66:62:34:71:12:c3:09:3f:de:
         fe:f7:a3:6d:c2:82:43:6e:9a:bd:23:d2:68:c0:98:66:ff:b5:
         6f:9f:46:ef:2b:db:db:a5:8b:53:64:58:1f:41:cc:db:b4:0a:
         70:67:5f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:27 2024 by rpki-client on console-fra.rpki-client.org