Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e968a981-4a08-34cc-8577-9b51f096751b.roa
File:                     e968a981-4a08-34cc-8577-9b51f096751b.roa (raw, json)
Hash identifier:          +ljrsPIKDhnA1/20z6tr+zpiiMWZlM5XYtnX9lt93EU=
Subject key identifier:   C9:21:F3:C9:50:C7:84:0C:19:4C:AA:40:BF:75:E7:EC:3E:B1:FC:A4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76AEC08DA03D73D9F60980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e968a981-4a08-34cc-8577-9b51f096751b.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1008:f100::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:ae:c0:8d:a0:3d:73:d9:f6:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=b88fa423-9829-417a-aec6-bd0a51e316f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:8c:e5:71:a5:37:81:56:d5:0d:e9:49:de:
                    8e:e1:d3:7a:75:3c:33:8d:24:71:ff:d2:06:fe:86:
                    ad:73:97:1f:2d:e6:d4:fd:9f:52:1e:b1:c5:11:c9:
                    8a:dd:dd:ab:dd:b6:09:60:35:92:a6:d1:d4:fc:2a:
                    31:bf:f8:8d:48:d1:08:5b:dc:13:6f:01:9b:e3:1b:
                    98:49:8c:18:78:92:23:88:f4:26:ce:10:7c:92:08:
                    63:a1:b3:56:fb:d6:41:9a:ce:77:a6:b3:04:c1:d6:
                    ec:a7:7b:dd:86:1e:aa:3d:67:ea:cd:12:04:55:24:
                    e4:2c:9e:c8:d7:1b:d7:5b:09:8b:45:2a:4b:60:99:
                    c7:71:f7:02:1e:9d:40:be:4c:aa:05:c3:63:68:1d:
                    52:41:59:46:b6:1d:6c:64:91:71:96:31:23:74:e8:
                    58:fc:5f:af:f7:2c:7c:02:02:f8:04:33:ed:51:fd:
                    26:93:38:10:67:68:0d:60:b2:0d:e0:83:8e:2a:6e:
                    f1:db:43:95:c9:30:64:6f:c5:5d:4b:37:f3:8a:0e:
                    2d:c2:dc:12:33:19:46:00:40:fe:ca:ed:d3:35:4f:
                    88:a3:50:4d:15:b3:cc:3f:0b:1a:38:e4:77:35:b2:
                    e1:71:36:fd:e2:aa:57:fd:14:2d:a0:07:a4:0d:77:
                    35:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:21:F3:C9:50:C7:84:0C:19:4C:AA:40:BF:75:E7:EC:3E:B1:FC:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e968a981-4a08-34cc-8577-9b51f096751b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:f100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:67:cf:04:32:3a:de:20:d1:9b:01:71:b1:14:51:c9:6d:33:
         96:0a:8d:f6:3e:2c:1d:f5:bd:92:11:dd:a2:5a:15:71:b5:82:
         9a:4b:d9:65:5d:b8:b1:6b:fb:4e:9b:74:1a:82:81:55:34:37:
         67:69:31:75:b0:8f:bc:82:37:4a:11:58:45:b1:45:0e:5f:fa:
         56:ae:86:69:cb:b1:78:6c:57:68:36:05:43:04:96:e2:c0:09:
         f1:4b:2b:ec:19:dd:66:5c:9e:b7:42:7b:bd:63:99:1c:f5:78:
         ef:86:64:66:6d:42:c4:ef:b5:3a:d1:7f:ab:7f:a4:5d:cc:2b:
         18:e0:c5:ac:fd:05:8d:aa:54:fb:e9:1c:02:55:94:2a:10:2b:
         e6:f2:5d:d2:97:2e:a8:45:f7:a9:15:ec:e9:bf:3d:73:64:dc:
         52:af:66:1b:e4:96:fc:75:80:74:c7:4b:f9:72:d8:ec:2c:c3:
         7f:f1:65:d2:e0:be:24:8c:09:e3:11:1e:33:e4:79:e8:c9:af:
         19:7b:3b:52:bd:2d:c9:f6:26:e6:6a:b0:95:a4:79:2a:15:55:
         b5:fc:2d:5d:a6:03:9f:5f:5e:e3:01:c1:54:a1:63:14:77:9d:
         46:52:3a:a6:b8:90:6c:af:a7:9e:73:17:36:16:02:14:17:73:
         82:bd:49:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:00 2024 by rpki-client on console-fra.rpki-client.org