Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ede9d4e3-b316-3674-9b6e-881b90bff772.roa
File:                     ede9d4e3-b316-3674-9b6e-881b90bff772.roa (raw, json)
Hash identifier:          xhB27iei7E0wn93SC8k7x/WUd2gniMAhLifZV7+X28Y=
Subject key identifier:   80:53:9F:62:F2:88:B6:23:D0:43:19:55:4F:DD:7B:55:7E:FA:E3:D0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846DD97396609E7086FA89AAA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ede9d4e3-b316-3674-9b6e-881b90bff772.roa
Signing time:             Tue 13 Aug 2024 19:31:21 +0000
ROA not before:           Tue 13 Aug 2024 19:31:21 +0000
ROA not after:            Mon 11 Nov 2024 20:31:21 +0000
asID:                     6167
IP address blocks:        2600:1017:a013::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:dd:97:39:66:09:e7:08:6f:a8:9a:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 13 19:31:21 2024 GMT
            Not After : Nov 11 20:31:21 2024 GMT
        Subject: CN=f0312e9f-6018-415e-bf21-3a3d23f3f286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:bf:26:ad:2b:88:fc:bf:7f:be:cc:b8:86:
                    d0:85:db:87:6c:8c:3b:86:9b:82:e6:fd:29:28:f0:
                    a5:aa:07:0d:e9:eb:4e:23:bc:13:36:44:e0:48:21:
                    3a:02:f5:09:eb:42:93:f9:97:4b:33:0d:32:37:aa:
                    ad:6b:3a:77:f9:23:bc:c6:f1:20:72:89:cc:a4:24:
                    8e:97:ec:83:65:e7:4d:1f:f8:98:48:3a:4c:41:83:
                    c1:76:7f:5a:03:21:d3:27:6d:2b:0c:f9:d2:1c:8e:
                    6f:b9:53:aa:83:97:63:95:c6:0b:3f:20:24:10:1d:
                    36:80:97:f7:d1:a1:07:25:d3:fb:65:ce:74:c3:f4:
                    bb:c6:a8:37:d3:f0:74:2f:a0:a0:fd:cf:32:af:ec:
                    df:09:94:e8:3a:3b:86:e3:49:a3:d1:43:50:62:f8:
                    8e:27:90:1e:ea:86:30:3a:e1:95:47:7f:2c:10:71:
                    ef:e5:47:9d:4c:26:70:66:50:db:3e:af:71:cd:8f:
                    6a:25:4e:f9:11:c2:c0:62:e8:7f:67:fb:e8:b4:53:
                    a1:7b:ff:6d:d9:e0:31:ae:7c:e6:1a:98:6a:02:f9:
                    75:ca:92:fd:48:60:55:ee:6a:a3:cb:65:b3:5f:8e:
                    2b:f1:10:ce:ae:86:68:52:b8:5a:d1:3c:b0:e6:b6:
                    ea:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:53:9F:62:F2:88:B6:23:D0:43:19:55:4F:DD:7B:55:7E:FA:E3:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ede9d4e3-b316-3674-9b6e-881b90bff772.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:a013::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:2a:4b:e9:dd:11:f7:98:35:4a:b4:0f:59:f7:03:21:11:47:
         c5:0f:58:dd:ab:9f:4c:80:96:4f:9b:65:97:43:20:f0:c7:69:
         e4:a6:0e:8f:ee:00:81:a3:84:25:23:d9:69:b3:b6:32:fd:62:
         69:e3:f8:3f:28:ce:c2:93:96:88:ff:41:86:53:c2:1b:19:56:
         47:b7:ba:d3:d9:44:ab:ee:fe:e1:a5:ae:e6:af:51:4c:b2:1a:
         5c:b0:b8:7a:4b:b5:f1:30:33:76:8b:65:f5:40:8a:7a:77:04:
         bc:fc:c9:16:7f:76:23:ad:20:70:66:a1:cf:a6:17:b6:49:18:
         cd:2c:8b:61:50:ce:e1:f6:88:7e:4d:b3:ad:50:ed:c6:15:4c:
         30:c6:f7:6f:e2:7a:47:39:34:d0:9c:f5:d6:8a:36:d7:ef:c6:
         40:49:fc:d2:49:82:51:ce:7f:22:d3:3c:42:eb:7c:59:15:76:
         12:2f:d2:b5:7b:53:16:09:3b:8e:20:f6:32:85:4e:59:3b:fc:
         fd:10:c0:03:d6:b7:7a:31:87:34:77:ee:29:07:7f:3b:cd:af:
         86:85:cb:3c:08:ac:12:07:80:8e:33:61:76:47:f6:a5:87:fa:
         d0:5b:3e:a7:32:cf:d0:21:fb:24:da:4c:d5:94:28:f0:da:68:
         0e:24:bf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:29 2024 by rpki-client on console-fra.rpki-client.org