Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ede9d4e3-b316-3674-9b6e-881b90bff772.roa
File:                     ede9d4e3-b316-3674-9b6e-881b90bff772.roa (raw, json)
Hash identifier:          HI0Mp69wq3vvIiT9WCMrSQZcWBw++QHGrvwjc0TWPlI=
Subject key identifier:   CB:84:13:AA:4E:F9:2C:9A:9B:2F:B4:73:A2:1F:A0:40:6A:62:CD:B5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847BD915577D74CA53861E03A28
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ede9d4e3-b316-3674-9b6e-881b90bff772.roa
Signing time:             Sat 02 Nov 2024 01:00:31 +0000
ROA not before:           Sat 02 Nov 2024 01:00:31 +0000
ROA not after:            Fri 31 Jan 2025 02:00:31 +0000
asID:                     6167
IP address blocks:        2600:1017:a013::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bd:91:55:77:d7:4c:a5:38:61:e0:3a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  2 01:00:31 2024 GMT
            Not After : Jan 31 02:00:31 2025 GMT
        Subject: CN=0e44d1d0-3730-4eb2-adc9-671cb9971117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:09:1c:0a:16:b7:72:91:d5:e2:d4:cf:50:b4:
                    fa:51:4c:42:3d:dd:4c:87:d1:bc:82:86:d9:b7:c9:
                    41:61:1e:d8:56:e6:68:2d:e2:11:b0:35:b2:19:5b:
                    fc:00:e4:9b:56:dd:3a:b9:fe:41:0a:c3:96:50:76:
                    b1:e4:56:db:0c:17:34:1d:7a:20:01:1c:80:a8:d2:
                    d7:08:6b:9c:02:4d:11:57:e6:3a:ae:82:07:e5:1d:
                    bc:67:01:f1:45:2d:96:b1:57:fb:82:f0:74:c1:1b:
                    85:52:af:04:be:5d:ee:2f:83:30:83:b6:76:fe:2d:
                    e0:3e:53:79:a0:80:91:84:69:2a:91:5f:36:8b:9f:
                    53:7e:09:9e:06:71:04:c8:c8:41:64:b7:9b:15:b8:
                    e0:f1:7f:0d:9d:df:94:b0:85:f9:25:ce:c8:32:cb:
                    d5:7e:b2:53:c6:81:f6:55:1d:d8:b3:c3:bb:ed:35:
                    0f:b4:cd:a2:3a:75:4f:30:cf:d6:ad:b3:a8:a3:38:
                    fe:06:07:35:15:54:77:a2:4c:88:38:a3:eb:67:6a:
                    91:fc:52:c9:c1:0f:cb:69:52:fb:36:92:14:37:cc:
                    05:01:d8:1b:31:3a:15:05:62:a0:80:1e:24:82:84:
                    d0:6b:a8:ef:33:a4:8b:b0:a2:0c:5f:13:5c:6f:40:
                    ed:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:84:13:AA:4E:F9:2C:9A:9B:2F:B4:73:A2:1F:A0:40:6A:62:CD:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ede9d4e3-b316-3674-9b6e-881b90bff772.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:a013::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d4:e5:c3:e8:18:e3:d9:5a:8e:51:56:82:93:9e:7e:b5:c5:
         6f:39:64:41:b0:c6:16:85:76:6e:c9:41:19:ea:5b:27:4b:20:
         a4:be:39:0f:00:20:0e:ab:c9:b3:8c:69:43:0d:2e:02:a6:ae:
         e0:72:44:ef:d4:08:42:f8:3f:b7:1b:c0:96:64:37:91:53:a9:
         7c:97:eb:65:2b:94:e3:12:62:5e:86:01:31:50:a0:79:77:7e:
         d6:11:a1:e9:f3:9c:a2:55:21:65:19:50:7d:ec:8a:13:a7:13:
         cd:be:da:20:53:4c:77:6c:d8:3a:de:dd:f5:82:c2:77:63:d7:
         46:7a:3e:93:8d:d7:97:a9:9b:0d:a8:aa:bf:3e:93:88:37:ba:
         b9:3f:98:81:8e:29:23:ee:34:06:79:07:e7:d6:ad:c8:d5:45:
         39:18:da:f8:c4:e0:7d:63:10:96:65:34:60:c2:ae:29:71:66:
         72:40:62:fe:21:32:cc:ae:c0:68:2b:f2:6a:9d:1c:28:bf:c6:
         99:2f:03:51:4b:c1:ca:9c:bd:4e:f2:2f:f6:77:a5:c9:16:e8:
         6c:14:4c:d6:9b:d2:52:4e:b7:92:8a:ca:82:fa:fa:47:da:08:
         33:99:6e:00:25:e5:74:47:4d:7f:bf:42:3d:96:55:3b:37:2d:
         9e:8d:cf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:57 2024 by rpki-client on console-ams.rpki-client.org