Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e729435a-0215-383a-8b95-ce7cf5ff4c84.roa
File:                     e729435a-0215-383a-8b95-ce7cf5ff4c84.roa (raw, json)
Hash identifier:          5c1X6dbhvfKJvP+BdV/ln0SoTdSDXqYPISm/1SdS978=
Subject key identifier:   6C:0E:8C:C2:97:D5:1B:B4:75:85:19:DF:1E:ED:78:E0:BD:DF:87:C9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76A12E3623E2CFC1E971E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e729435a-0215-383a-8b95-ce7cf5ff4c84.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1004:f000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:a1:2e:36:23:e2:cf:c1:e9:71:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=37c7436c-5aab-4896-a4fe-df3c521124d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ee:c1:fc:30:32:bf:05:9b:ee:36:50:c6:0b:
                    5d:7e:21:d1:b1:b3:48:b0:8a:56:e5:2f:7a:7d:ec:
                    c6:4b:0b:7e:d5:4f:64:b3:03:b1:06:9f:0c:40:e9:
                    ab:b4:19:4c:7e:a9:f2:fb:de:a3:9f:97:84:d3:7a:
                    3e:63:08:de:ef:9c:0f:17:22:65:51:45:24:de:52:
                    b9:42:1e:5d:cf:38:ac:4d:41:51:2b:4f:d9:6d:65:
                    79:04:78:1c:25:b6:47:96:02:14:74:ae:cc:8e:5a:
                    cf:7c:79:17:04:df:fe:5b:5c:33:ae:c5:1c:f5:5b:
                    b1:72:5e:f2:e3:16:2b:26:35:26:b9:76:36:05:72:
                    c4:43:b9:20:8c:68:d1:38:4b:24:36:99:8a:18:7c:
                    b0:02:db:bc:8b:1a:bd:b5:e4:a3:8a:24:c3:8d:70:
                    b4:44:0c:d6:45:ab:de:1b:82:df:f3:50:71:b3:e3:
                    1d:d7:bb:c4:31:0a:e5:54:9b:b2:7a:98:19:55:e0:
                    4f:27:54:04:63:ae:70:72:93:d8:0f:3f:dc:32:75:
                    4a:f6:8f:9f:43:e3:62:eb:fe:96:b3:3f:75:42:8b:
                    ed:16:b7:1b:9c:da:d1:97:4d:0e:1b:6f:f7:4e:35:
                    7e:98:20:bc:07:b6:47:38:02:b3:ea:f4:36:28:ec:
                    ca:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0E:8C:C2:97:D5:1B:B4:75:85:19:DF:1E:ED:78:E0:BD:DF:87:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e729435a-0215-383a-8b95-ce7cf5ff4c84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:c8:b3:4d:b3:8f:5e:a6:19:58:42:40:84:4d:d5:f8:ee:bb:
         36:ec:27:37:ca:a3:42:aa:0a:37:0d:bc:83:54:80:78:b6:cf:
         1b:02:73:d1:fe:2d:36:f3:ee:60:20:9b:52:b1:97:a5:8a:9a:
         a7:b2:23:d0:d2:f9:af:03:42:ef:38:f1:52:23:9e:7f:7d:34:
         1d:fc:81:0d:33:c5:32:a1:c9:f0:18:a5:1f:a7:a4:aa:23:c2:
         8b:74:2a:06:c7:18:01:33:2e:1d:2c:4f:0b:33:f6:77:fd:bb:
         03:60:31:ed:a1:d8:6d:76:3a:7b:1a:26:8e:26:19:58:ec:5e:
         40:7f:8d:48:e0:fd:b5:0d:0b:bd:91:f9:f1:b2:0e:5d:cd:81:
         b7:da:32:2b:19:56:64:57:e9:7d:a3:6b:2f:66:b1:94:54:41:
         90:9f:24:a9:a2:f9:0c:22:03:b4:cf:03:87:e7:db:c0:8e:9a:
         80:5e:c0:eb:18:9a:00:f7:4e:b7:31:de:3c:2e:94:32:4c:c3:
         f7:7e:cb:da:5e:68:35:eb:cb:89:8b:0e:f5:42:5b:d5:f0:86:
         01:c4:86:03:97:46:5c:38:55:c6:30:ed:44:47:19:1f:17:c8:
         95:dc:e8:9c:db:d5:bf:c3:12:b3:9d:0d:72:de:5f:95:06:c8:
         b0:0e:b4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:23:11 2024 by rpki-client on console-ams.rpki-client.org