Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ebd85f6b-1316-39eb-bcbf-4539b3d0b512.roa
File:                     ebd85f6b-1316-39eb-bcbf-4539b3d0b512.roa (raw, json)
Hash identifier:          s7o3R9eqDImugNrRh9TlNCm+JjNnJk/P8KRb8caLWhA=
Subject key identifier:   EA:2F:62:27:7D:66:E2:45:7A:05:44:34:8C:6F:1D:05:F8:68:08:1C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBDF3E652E551A230F5E93
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ebd85f6b-1316-39eb-bcbf-4539b3d0b512.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1012:b138::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:df:3e:65:2e:55:1a:23:0f:5e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=153b3966-5801-441f-9fa9-9851c146822c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ca:08:26:1f:63:d1:7f:3b:c7:88:4f:55:0e:
                    f2:0f:ca:2c:62:96:f9:6f:0e:82:67:8f:ee:ab:49:
                    d9:ea:5b:e9:42:f5:5a:31:b7:fc:1a:38:41:8c:dc:
                    dd:fd:ff:1e:51:0c:2d:32:26:dd:0b:1c:ca:6a:84:
                    36:61:d2:76:8d:2f:fe:a8:3f:c1:e7:42:42:1a:49:
                    8f:62:ef:25:77:14:29:b1:ba:bc:54:15:3d:f2:98:
                    da:99:11:32:55:f7:39:f9:a5:9f:17:12:6b:35:09:
                    92:9e:28:0d:4f:12:03:a1:55:b7:d8:0f:bf:f2:84:
                    dc:f6:e8:f8:c8:5c:6b:d6:b5:f9:85:a7:c7:3f:95:
                    b1:06:36:14:6d:06:80:c4:39:90:d0:3b:d2:60:ce:
                    1d:31:81:79:83:ea:6a:db:b7:f6:ed:1d:07:cb:21:
                    2b:a5:21:07:15:2a:bd:37:ae:b0:43:f9:26:07:f1:
                    02:6a:77:d0:c4:1d:53:06:d8:0f:8d:e4:71:c5:9b:
                    8d:16:59:63:92:7e:97:05:36:d5:da:60:f3:ee:e0:
                    17:91:38:16:97:1d:07:48:24:cc:99:96:c4:a4:dd:
                    64:49:9f:c3:26:c3:43:b2:1f:1f:05:21:91:a1:e0:
                    82:2c:cb:ba:57:a5:29:0f:fc:cf:26:d8:3e:6c:a1:
                    02:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2F:62:27:7D:66:E2:45:7A:05:44:34:8C:6F:1D:05:F8:68:08:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ebd85f6b-1316-39eb-bcbf-4539b3d0b512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b138::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:9f:6b:b0:7b:16:f0:48:73:bc:5d:03:2b:bd:b3:b6:10:63:
         c1:5d:0f:0f:43:e6:bd:a7:06:b1:54:61:49:2f:df:ba:c3:a2:
         7f:f2:0a:4d:09:2e:49:0c:48:8e:86:85:3d:25:9e:b1:74:f2:
         28:3a:1a:24:e9:03:c6:33:e7:8b:8c:e6:2b:d4:28:ee:36:38:
         90:1d:4c:b2:05:e7:8f:be:0e:56:7d:bb:b5:b9:80:e0:25:22:
         05:fd:07:7a:ac:00:ff:73:e8:8e:d6:05:ae:cc:c1:1f:56:c6:
         b5:92:2f:b4:e8:18:42:ee:3f:12:b7:50:87:44:34:54:7a:55:
         df:c5:ad:80:6f:fc:3e:ca:95:23:a2:b0:05:c7:8d:46:8d:27:
         99:69:b2:ef:ec:5f:1f:5e:a7:73:a7:86:59:74:63:00:c2:84:
         5b:bc:a7:29:be:b8:2f:4d:f7:05:50:71:24:1f:16:0b:25:50:
         0b:02:d8:dc:7a:11:e0:35:80:22:f3:42:43:91:c4:37:96:57:
         a0:0c:34:3b:c2:98:e1:5b:fb:02:e1:0c:8b:8d:5c:5d:45:97:
         c8:fe:81:ea:91:7e:cc:2f:1a:4f:41:24:70:be:fe:8b:00:28:
         7b:cd:9b:70:0b:f9:50:51:bb:a6:09:95:e7:22:13:de:4d:f8:
         d2:b1:ec:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:28 2024 by rpki-client on console-fra.rpki-client.org