Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ebcb9959-7946-3f5a-8ae3-adc8d5799827.roa
File:                     ebcb9959-7946-3f5a-8ae3-adc8d5799827.roa (raw, json)
Hash identifier:          1BKfF9omAXKb9amXNC0d3h7XLaua//b2wYAxqmyweYQ=
Subject key identifier:   AB:2A:B5:FA:2E:9E:C1:70:37:19:83:45:70:E6:63:29:97:01:DD:E0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D768C30628761B9E5E4CC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ebcb9959-7946-3f5a-8ae3-adc8d5799827.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1000:a000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:8c:30:62:87:61:b9:e5:e4:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=de7ff4e6-bfa8-4b08-9dc2-2e7c211c0142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d1:d4:46:a3:f8:42:30:b6:1d:09:ae:59:22:
                    59:cb:0a:a0:04:27:87:e0:a1:a7:5f:41:95:cb:3d:
                    7e:7a:f1:65:1b:7a:3d:1f:dc:5f:dc:e3:78:03:96:
                    f8:ae:73:92:c4:d4:a9:10:d7:62:67:69:37:42:b6:
                    ec:99:cb:85:94:0b:92:a4:ed:9a:86:92:e8:a8:93:
                    13:48:59:1a:81:53:88:cd:36:d2:c3:62:0e:66:20:
                    63:25:bb:aa:f8:3b:c4:d4:18:c0:9c:ea:33:32:f9:
                    54:5c:f0:af:be:8e:71:42:05:28:ab:12:85:89:42:
                    0c:1e:a6:fc:8f:0b:f5:33:11:45:24:01:61:53:b4:
                    b0:30:d7:af:d5:41:dc:6c:21:4b:5a:a4:6b:28:e7:
                    61:db:fd:38:6a:2f:b8:9d:a3:ff:5f:49:bf:ed:ac:
                    76:27:6f:4b:3d:d7:06:d5:02:96:1a:c4:3c:89:f9:
                    50:6e:99:f6:39:ca:58:ab:0f:1b:b5:cb:d5:7f:46:
                    aa:80:18:cd:b8:88:4a:01:c9:1f:36:9e:34:bd:ff:
                    ff:ba:56:05:7a:1c:17:cb:bc:c9:60:6a:01:b3:06:
                    01:79:4a:d8:c2:5c:ad:16:af:31:0a:34:76:d9:6c:
                    af:0d:5e:2e:70:57:5f:27:9f:2e:c5:50:f0:60:c3:
                    f9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2A:B5:FA:2E:9E:C1:70:37:19:83:45:70:E6:63:29:97:01:DD:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ebcb9959-7946-3f5a-8ae3-adc8d5799827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:22:c9:8a:80:7c:47:e5:21:d3:94:6d:b3:9b:cb:46:93:90:
         16:0a:cb:b2:e5:ca:4e:80:f5:68:c9:26:83:c7:6d:16:c5:77:
         b7:82:e6:5f:42:88:5e:8e:88:f4:53:a3:0d:cd:5f:c3:22:ce:
         2b:21:05:69:b8:6e:91:8e:f9:ab:3a:03:3c:61:e3:22:da:92:
         32:61:fb:b6:4e:df:7d:73:f3:77:9d:82:07:ce:6e:64:6b:5d:
         89:6f:24:a7:ce:8a:e2:61:4c:fc:80:65:7d:2e:e0:0f:2d:b8:
         9b:f7:64:30:6f:0c:1f:91:2d:e2:dc:33:c9:b4:cb:8b:1b:9a:
         da:be:50:0c:ea:c2:08:61:92:34:d9:64:28:00:f2:40:4a:7e:
         b9:7d:50:5c:a9:25:44:47:82:9b:4f:49:cd:5b:7a:bf:b8:6a:
         5c:2e:c3:66:5b:52:58:36:0d:9a:40:c8:5e:9b:2f:71:c3:31:
         d6:25:c9:33:c1:34:4c:05:75:ab:a6:26:79:e3:d5:1d:d0:a4:
         be:51:85:61:ba:0c:ab:a6:08:80:72:14:d3:91:f9:8c:45:80:
         d0:79:6b:9c:7a:3f:2e:58:6e:5a:6b:b9:77:ef:9b:ef:c3:6f:
         d6:da:fb:b0:6d:4b:5d:58:ee:1a:d7:68:28:dd:a9:25:c1:4f:
         3a:4f:3a:2d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeddowwYodhueXkzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
ZGU3ZmY0ZTYtYmZhOC00YjA4LTlkYzItMmU3YzIxMWMwMTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9HURqP4QjC2HQmuWSJZywqgBCeH4KGnX0GV
yz1+evFlG3o9H9xf3ON4A5b4rnOSxNSpENdiZ2k3QrbsmcuFlAuSpO2ahpLoqJMT
SFkagVOIzTbSw2IOZiBjJbuq+DvE1BjAnOozMvlUXPCvvo5xQgUoqxKFiUIMHqb8
jwv1MxFFJAFhU7SwMNev1UHcbCFLWqRrKOdh2/04ai+4naP/X0m/7ax2J29LPdcG
1QKWGsQ8iflQbpn2OcpYqw8btcvVf0aqgBjNuIhKAckfNp40vf//ulYFehwXy7zJ
YGoBswYBeUrYwlytFq8xCjR22WyvDV4ucFdfJ58uxVDwYMP5wQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKsqtfounsFwNxmDRXDmYymXAd3gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWJjYjk5NTktNzk0Ni0z
ZjVhLThhZTMtYWRjOGQ1Nzk5ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQAKAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALAiyYqAfEflIdOUbbOby0aTkBYKy7Llyk6A9WjJJoPHbRbFd7eC
5l9CiF6OiPRTow3NX8MizishBWm4bpGO+as6Azxh4yLakjJh+7ZO331z83edggfO
bmRrXYlvJKfOiuJhTPyAZX0u4A8tuJv3ZDBvDB+RLeLcM8m0y4sbmtq+UAzqwghh
kjTZZCgA8kBKfrl9UFypJURHgptPSc1ber+4alwuw2ZbUlg2DZpAyF6bL3HDMdYl
yTPBNEwFdaumJnnj1R3QpL5RhWG6DKumCIByFNOR+YxFgNB5a5x6Py5YblpruXfv
m+/Db9ba+7BtS11Y7hrXaCjdqSXBTzpPOi0=
-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:28 2024 by rpki-client on console-fra.rpki-client.org