Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6af3399-af56-36fc-a443-43b5b2f73158.roa
File:                     f6af3399-af56-36fc-a443-43b5b2f73158.roa (raw, json)
Hash identifier:          9Ivm+06vCu4N+FKGov9X9PdS726bVKvahaoYWoq5Ra8=
Subject key identifier:   0D:E6:54:18:6C:5F:98:24:76:00:EA:96:D3:E8:81:CB:46:B7:B0:56
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846E3E1C2525860A8067C343A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6af3399-af56-36fc-a443-43b5b2f73158.roa
Signing time:             Fri 16 Aug 2024 01:36:23 +0000
ROA not before:           Fri 16 Aug 2024 01:36:23 +0000
ROA not after:            Thu 14 Nov 2024 02:36:23 +0000
asID:                     6167
IP address blocks:        2600:100c:d240::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:e1:c2:52:58:60:a8:06:7c:34:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:36:23 2024 GMT
            Not After : Nov 14 02:36:23 2024 GMT
        Subject: CN=cf9abc39-b3b7-4b19-9f6a-205acdbfb533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:64:2d:8a:81:5a:fd:72:4f:be:74:de:70:59:
                    49:9f:13:e9:3e:05:b3:80:1e:9c:82:60:24:7f:9d:
                    78:ae:1d:c8:ac:eb:93:d6:42:30:41:a1:2d:7f:2e:
                    25:f2:cf:95:af:0f:c4:04:d4:5f:16:17:63:6d:a5:
                    fd:53:47:68:19:f4:49:ce:84:00:a8:16:dc:12:a9:
                    bf:ca:8e:c3:f4:87:5c:0c:bd:59:55:c7:cb:ee:df:
                    21:7b:be:2e:b6:c6:44:51:72:c0:55:af:8b:80:f7:
                    5b:ad:c7:0e:43:76:be:d7:49:43:96:a0:e4:e2:3d:
                    30:f7:08:b3:19:2c:a2:68:fd:61:db:14:a9:2a:57:
                    f7:5c:45:a5:b3:c6:48:69:2b:6b:a4:e3:43:56:6e:
                    be:54:c5:2b:f6:fe:35:6b:6b:54:21:12:e3:8a:9b:
                    c5:9c:58:7b:fb:53:08:a0:5b:d3:93:53:75:67:b2:
                    65:2c:ba:d4:50:64:13:5c:e5:41:8c:77:ae:bd:f6:
                    5a:24:c6:e3:59:8b:55:ab:f3:92:53:a7:3a:a5:3f:
                    0b:cb:23:b5:4a:71:e9:1b:2f:10:4a:d4:28:53:f1:
                    5c:fe:57:63:c5:fb:8f:a0:8c:68:0a:63:7b:0c:38:
                    5a:ee:87:7c:f3:a2:b4:56:4f:7f:9e:2b:4c:89:e0:
                    bd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E6:54:18:6C:5F:98:24:76:00:EA:96:D3:E8:81:CB:46:B7:B0:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6af3399-af56-36fc-a443-43b5b2f73158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:d240::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:2b:64:da:02:97:5a:4f:0a:ad:50:ed:ac:81:21:be:14:70:
         3e:29:b6:a6:a3:30:1a:36:e2:ee:86:ad:a7:ed:4d:23:26:54:
         00:7d:4d:4a:7c:ab:91:b7:a7:e4:6b:7e:62:45:81:47:a8:a8:
         e1:94:33:8b:a2:62:4a:9b:9e:f3:5a:41:7d:80:8f:09:0f:1e:
         15:de:44:af:92:1f:3e:2a:9b:99:ff:92:8a:87:15:10:f7:e9:
         b3:4a:1d:41:78:2d:ff:9c:35:61:62:54:b0:c4:e4:27:e5:9a:
         9a:a4:a6:7c:6a:4e:91:89:68:2a:43:d9:48:bc:21:8b:3b:87:
         3a:ea:c5:11:df:1e:41:a8:68:59:2e:85:b6:80:28:f9:b3:3c:
         c9:c8:b1:72:ed:28:ee:14:49:95:07:e0:08:1f:57:af:19:da:
         df:99:68:85:c6:93:16:12:9a:5d:e6:e6:1a:cb:15:68:00:49:
         08:37:63:c3:5a:1c:9f:47:dd:5e:55:20:0b:e6:98:b1:ae:70:
         d8:1c:6a:ca:76:fb:94:eb:77:2d:d7:11:65:e9:0f:58:59:ff:
         ce:19:4e:cf:0f:f1:9f:45:0b:41:67:2f:ce:a8:80:d2:f5:a7:
         07:fe:78:71:46:c9:97:9e:ee:0c:f4:8f:cf:2b:c3:04:00:00:
         68:34:6e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:23:17 2024 by rpki-client on console-ams.rpki-client.org