Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9ab99fd-54e5-394a-aefa-fe45b3bf8d1e.roa
File:                     e9ab99fd-54e5-394a-aefa-fe45b3bf8d1e.roa (raw, json)
Hash identifier:          +pUFefD2quga7arRR/tgCSTnDmYFaxnalZ41qvyrGLQ=
Subject key identifier:   88:70:9E:A3:7D:BA:23:41:CD:82:47:C8:FC:FF:49:54:0A:9C:67:6A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846E3E1A7ED8EAA183A408A0610
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9ab99fd-54e5-394a-aefa-fe45b3bf8d1e.roa
Signing time:             Fri 16 Aug 2024 01:36:11 +0000
ROA not before:           Fri 16 Aug 2024 01:36:11 +0000
ROA not after:            Thu 14 Nov 2024 02:36:11 +0000
asID:                     6167
IP address blocks:        2600:100a:b1d0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:e1:a7:ed:8e:aa:18:3a:40:8a:06:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:36:11 2024 GMT
            Not After : Nov 14 02:36:11 2024 GMT
        Subject: CN=d3eccc77-6174-4203-b4bb-efa216f992ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b5:0a:5f:a2:fe:95:79:cf:00:67:cc:90:95:
                    b4:bb:34:cc:5f:f5:7a:13:d8:d7:89:0b:3e:b3:ea:
                    d2:5b:a2:30:86:f8:af:b8:63:4e:3c:0a:b5:46:02:
                    a6:82:42:b2:d0:1e:4a:89:9c:11:d4:47:f1:03:f2:
                    7f:35:d3:7f:13:6b:e2:1f:fd:52:2b:88:9f:55:2b:
                    ee:ad:ba:38:5b:bb:c9:d2:95:0c:b6:f8:55:ac:7b:
                    2d:5a:d6:1b:56:22:c8:64:65:53:8d:bd:e1:dc:71:
                    78:14:36:35:ea:ab:2a:0b:7f:57:c0:01:b5:f4:9b:
                    e1:6a:33:bc:04:3c:0b:2e:12:71:a2:76:b9:36:48:
                    c4:d0:f5:00:1e:f7:c4:5f:98:62:61:e8:2d:9e:d3:
                    cf:0d:f4:21:3c:b1:87:25:5d:6e:8e:47:be:72:ea:
                    f3:3b:24:de:fa:01:e9:b1:6f:07:db:2b:bf:e3:91:
                    71:44:0d:79:8f:c3:17:9d:d5:79:6c:71:eb:72:20:
                    08:cc:0f:2b:c8:51:56:13:82:a2:62:2b:ba:29:1d:
                    b8:b7:e1:62:fb:43:d2:9a:81:98:5e:33:62:8b:bb:
                    19:db:dc:dc:27:75:72:ab:10:ec:c7:91:3a:3f:f4:
                    13:5d:a2:77:8f:8f:55:32:59:d2:9a:17:25:d3:e9:
                    1a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:70:9E:A3:7D:BA:23:41:CD:82:47:C8:FC:FF:49:54:0A:9C:67:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9ab99fd-54e5-394a-aefa-fe45b3bf8d1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:b1d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:e4:46:f2:ba:2a:ec:b5:98:d1:8f:65:48:6e:83:78:4e:25:
         2c:f0:e5:52:f4:64:65:6f:23:91:b1:20:ad:7a:9a:83:2f:92:
         11:18:a9:79:df:8e:b7:2d:51:40:62:10:18:7f:07:5c:de:4c:
         d7:dc:d7:5a:45:c5:19:72:e2:e6:d9:10:bd:51:ec:35:cc:0e:
         5b:f1:0f:b3:53:17:c5:f1:a8:f1:a2:0c:04:8e:2c:f4:29:c2:
         bf:90:0d:da:e7:62:2b:4d:a8:79:06:02:36:e8:2c:fd:1b:d2:
         df:0e:ed:1f:9b:e8:b9:4e:6a:a9:02:10:25:91:2d:1c:2d:6a:
         66:10:03:cc:dd:e4:30:56:89:18:16:b3:ff:cf:15:67:9e:6e:
         d8:78:d4:85:b3:5d:9a:17:cb:5a:76:5e:d1:d2:6f:18:83:2e:
         74:0e:a5:28:fa:24:4e:2f:e7:23:e3:03:47:9f:ab:3d:04:49:
         4a:d4:e0:63:a0:af:e1:5e:43:b2:18:ef:bf:a1:86:e7:97:ec:
         dc:86:d5:33:46:05:1b:47:77:96:58:38:d3:6b:ff:c0:2f:8f:
         c1:87:9a:8d:3e:1d:d0:fb:8d:2b:6a:c9:5e:01:79:db:8c:31:
         80:76:78:5d:94:4e:4a:44:23:c0:ea:30:94:9e:fa:ce:60:d4:
         b0:86:4f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:23:12 2024 by rpki-client on console-ams.rpki-client.org