Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2f6b8b5-bfb7-371d-85e3-cada4d7d3553.roa
File:                     f2f6b8b5-bfb7-371d-85e3-cada4d7d3553.roa (raw, json)
Hash identifier:          Rfl4aLVk+7a7ugXLMTxgUSaflLy3dmdudzM3a7tiXSA=
Subject key identifier:   6A:DD:F0:26:E9:0E:25:CC:3B:E7:79:C2:F8:EB:48:46:BC:7E:F1:25
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E4C4ACED2F75B6C234859E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2f6b8b5-bfb7-371d-85e3-cada4d7d3553.roa
Signing time:             Sat 16 Nov 2024 02:00:28 +0000
ROA not before:           Sat 16 Nov 2024 02:00:28 +0000
ROA not after:            Fri 14 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        2600:100f:a021::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e4:c4:ac:ed:2f:75:b6:c2:34:85:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 16 02:00:28 2024 GMT
            Not After : Feb 14 02:00:28 2025 GMT
        Subject: CN=64821ddf-47b9-4d42-80b6-d61b5544680f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3e:e2:05:d9:09:8a:72:75:59:66:68:dc:95:
                    c4:a0:af:df:fb:20:4f:9b:f1:a5:f7:30:03:e7:e0:
                    f9:a3:43:b4:b8:94:84:9e:85:2e:86:4e:a3:e1:9d:
                    ac:9c:06:82:dc:76:85:09:f9:ba:07:0a:d1:9f:ae:
                    55:2a:02:81:2c:1c:ca:43:a0:ed:32:4b:60:55:0a:
                    89:85:a7:5e:ca:62:02:31:20:c9:8d:5d:a3:69:0d:
                    65:89:63:1e:a2:8d:1f:0a:d5:15:b8:4f:d0:71:5f:
                    7c:09:8c:ff:a9:cc:90:20:70:b7:c0:f0:3a:ac:35:
                    ef:b3:3b:5e:82:a5:97:13:e4:df:89:d9:74:ef:5d:
                    96:da:87:ef:bc:e6:e4:c0:e2:3f:e2:55:42:6f:81:
                    fd:82:ac:bb:b3:c2:bc:6b:61:e7:d4:b8:8a:60:f6:
                    6f:ae:3d:4d:17:94:0f:ea:22:2b:a0:04:f8:ca:1b:
                    51:df:a6:05:a2:6c:48:37:8c:dd:ba:cb:ea:98:c5:
                    2f:ac:d2:59:77:90:25:7b:b4:b1:57:12:0d:34:6a:
                    b0:94:ea:ab:ef:f4:5d:4e:31:dd:d1:5d:43:01:af:
                    15:09:15:c4:ce:16:16:79:b4:37:c0:37:d8:8e:ce:
                    35:52:27:19:9c:01:dd:90:ca:6f:cd:27:ea:42:0d:
                    a8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DD:F0:26:E9:0E:25:CC:3B:E7:79:C2:F8:EB:48:46:BC:7E:F1:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2f6b8b5-bfb7-371d-85e3-cada4d7d3553.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:a021::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:86:d1:c7:9a:a2:1b:36:af:0e:a5:39:f0:65:69:9c:a5:f1:
         3b:07:50:d3:ca:19:11:ae:1b:83:75:d0:d0:e7:50:ae:a9:8e:
         89:fb:90:e7:60:7b:88:14:91:c5:9e:50:a8:0c:3c:e0:46:14:
         76:0a:3c:29:4f:b1:c5:3f:1f:10:40:fc:59:f2:9a:99:a8:93:
         c3:0b:51:d2:41:bc:f1:0a:5f:d7:24:8a:68:21:e1:2a:f5:92:
         f2:a6:50:d8:c8:c9:9b:9a:47:31:44:b1:22:5d:35:e2:d0:71:
         b4:7d:f4:63:be:34:b2:cf:9f:d7:83:82:4c:d7:45:fc:56:2e:
         a7:66:e8:14:cd:ee:7b:08:0b:c5:c5:9e:20:74:20:e1:32:e8:
         bd:d7:f4:08:e4:95:6a:38:a7:8c:b2:13:75:a1:3f:99:27:97:
         93:f9:6e:b7:3e:63:0e:79:3a:0e:96:1c:df:10:47:07:79:29:
         d9:2c:a8:9a:d2:8c:29:fe:aa:25:c7:88:3a:f2:2a:3a:77:66:
         d0:31:f6:79:1c:e3:44:85:95:df:50:a3:80:36:b9:3a:f6:b4:
         6f:55:5e:0f:a6:14:f8:46:e1:d3:c7:2a:b4:6f:0c:0d:08:80:
         8b:85:4c:28:cf:68:25:ba:b9:01:04:e6:dd:32:10:78:89:b8:
         5c:c5:3a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:01 2024 by rpki-client on console-fra.rpki-client.org