Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f53f1950-5fa6-39d3-8995-f1e2f650ff1f.roa
File:                     f53f1950-5fa6-39d3-8995-f1e2f650ff1f.roa (raw, json)
Hash identifier:          soNkp92xAMn2UOpGU77c5/f5ySnLF6lAYFQ1XRlv35c=
Subject key identifier:   50:72:CE:B8:7D:DE:FF:29:E0:4B:2B:CE:31:4C:9A:03:DD:96:F1:AE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA0420F6D8CDCCA8E68728
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f53f1950-5fa6-39d3-8995-f1e2f650ff1f.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100d:b000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:04:20:f6:d8:cd:cc:a8:e6:87:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=9f05cef0-b5b8-4200-aad8-1ff07d37d80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:f0:f8:5e:81:1f:d7:11:20:94:5d:42:84:
                    e5:53:b4:32:9c:fb:3e:9f:94:d3:d2:eb:c0:06:be:
                    0f:54:84:05:af:ca:c0:37:b7:42:0f:12:13:e8:78:
                    6e:1c:db:71:6f:77:20:44:15:29:4f:9d:da:42:68:
                    b8:4e:f2:1b:40:e4:0f:fa:3d:60:8f:66:86:da:ae:
                    93:c3:46:02:ff:2d:f8:b7:44:1c:ef:39:a7:96:29:
                    46:dc:9e:f6:3f:26:6c:47:75:96:c9:e3:f0:1f:3b:
                    df:05:ea:61:26:ba:8b:14:77:a1:df:85:3f:cf:88:
                    62:e5:0c:e8:7a:49:96:77:c1:85:c8:31:29:e3:c3:
                    18:ce:86:21:78:a0:1a:c1:1f:8b:dc:db:3a:1b:53:
                    21:89:36:f0:b4:ac:27:3c:33:8b:76:0f:4c:50:96:
                    05:40:b7:db:48:46:fa:08:9e:3f:1d:26:80:21:1d:
                    9b:9a:75:bd:0f:20:56:91:d2:76:a3:e6:12:26:84:
                    f6:f1:08:ea:ee:fa:0c:b7:52:f5:23:18:c8:e6:f7:
                    f1:de:50:13:47:07:86:a3:4c:9a:56:0c:1f:a0:c1:
                    d3:27:32:22:e0:5f:28:c5:0d:7b:67:2f:b6:04:ca:
                    dc:8b:4f:79:f3:a7:68:73:f4:65:25:7c:3b:06:8d:
                    73:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:72:CE:B8:7D:DE:FF:29:E0:4B:2B:CE:31:4C:9A:03:DD:96:F1:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f53f1950-5fa6-39d3-8995-f1e2f650ff1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:1d:28:eb:4d:76:22:8a:c6:a6:2e:cc:27:9a:26:12:66:b4:
         2c:5b:4d:36:eb:96:d2:6b:3d:55:5f:05:66:a8:e9:22:ce:03:
         7e:df:4a:eb:2f:ac:0b:78:02:b1:cc:41:4e:56:c6:bf:fb:68:
         cb:58:68:5c:ab:52:b7:e7:55:a3:2e:b1:dc:59:56:dc:cf:8c:
         8c:aa:b8:8f:a5:0f:3a:fc:65:7a:6f:41:09:b6:d6:f8:bc:ec:
         27:85:4b:c1:78:de:34:bb:96:83:d5:b6:5a:d5:67:5e:ec:00:
         e5:81:87:0a:f2:99:56:b1:02:e8:4e:41:40:7b:7a:f4:36:f2:
         74:b1:a9:fe:bc:13:7c:e4:02:4b:f5:16:8f:c7:0e:f8:1d:c8:
         70:74:e5:8b:6e:81:1f:64:24:82:80:b5:d4:67:26:c8:84:1b:
         8e:6d:61:f8:69:52:d6:68:5e:c0:3b:01:83:60:12:af:0d:65:
         9d:bf:79:87:f2:15:29:36:78:b2:5a:bd:14:88:fe:26:6b:08:
         3f:68:64:0d:3d:27:22:7b:21:7b:05:71:e2:6c:3b:4b:e2:53:
         bf:a2:b1:b6:0d:10:c3:2d:b7:41:fb:cc:00:c1:76:b0:00:86:
         81:25:1f:f2:4f:f3:f2:57:ed:7a:28:7a:da:0d:f0:e4:59:f3:
         29:1e:e2:42
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfEqgQg9tjNzKjmhygwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk
OWYwNWNlZjAtYjViOC00MjAwLWFhZDgtMWZmMDdkMzdkODBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux3w+F6BH9cRIJRdQoTlU7QynPs+n5TT0uvA
Br4PVIQFr8rAN7dCDxIT6HhuHNtxb3cgRBUpT53aQmi4TvIbQOQP+j1gj2aG2q6T
w0YC/y34t0Qc7zmnlilG3J72PyZsR3WWyePwHzvfBephJrqLFHeh34U/z4hi5Qzo
ekmWd8GFyDEp48MYzoYheKAawR+L3Ns6G1MhiTbwtKwnPDOLdg9MUJYFQLfbSEb6
CJ4/HSaAIR2bmnW9DyBWkdJ2o+YSJoT28Qjq7voMt1L1IxjI5vfx3lATRweGo0ya
VgwfoMHTJzIi4F8oxQ17Zy+2BMrci09586doc/RlJXw7Bo1zPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFByzrh93v8p4EsrzjFMmgPdlvGuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjUzZjE5NTAtNWZhNi0z
OWQzLTg5OTUtZjFlMmY2NTBmZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDbAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACwdKOtNdiKKxqYuzCeaJhJmtCxbTTbrltJrPVVfBWao6SLOA37f
SusvrAt4ArHMQU5Wxr/7aMtYaFyrUrfnVaMusdxZVtzPjIyquI+lDzr8ZXpvQQm2
1vi87CeFS8F43jS7loPVtlrVZ17sAOWBhwrymVaxAuhOQUB7evQ28nSxqf68E3zk
Akv1Fo/HDvgdyHB05YtugR9kJIKAtdRnJsiEG45tYfhpUtZoXsA7AYNgEq8NZZ2/
eYfyFSk2eLJavRSI/iZrCD9oZA09JyJ7IXsFceJsO0viU7+isbYNEMMtt0H7zADB
drAAhoElH/JP8/JX7XooetoN8ORZ8yke4kI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:02 2024 by rpki-client on console-fra.rpki-client.org