Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6b48090-329f-3dbb-93de-affde5d0f98d.roa
File:                     f6b48090-329f-3dbb-93de-affde5d0f98d.roa (raw, json)
Hash identifier:          Uz0FktHhi5PJNRQiEbACgjC7jIFRyUI46m8/xHs4q1Q=
Subject key identifier:   94:12:03:55:2A:00:6C:A4:E7:CE:30:40:59:91:A3:26:F9:90:2D:A5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D768E1D202BB4733961D5A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6b48090-329f-3dbb-93de-affde5d0f98d.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1000:b070::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:8e:1d:20:2b:b4:73:39:61:d5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=0a35315f-a0a0-4212-8e2b-291e0ea741d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d5:1a:6c:cf:5d:52:ac:68:7f:3a:09:c0:82:
                    d4:18:f5:d2:1c:d4:cd:7a:97:39:b5:49:6a:cd:1d:
                    46:75:0d:aa:97:81:0b:b8:07:e2:ba:db:88:8a:98:
                    5d:cf:23:7b:44:72:01:77:28:02:e7:40:2b:e7:f9:
                    8a:52:c4:32:f6:f6:c3:cc:af:07:2a:85:89:92:36:
                    c6:ba:52:87:8e:e5:4b:61:f7:02:15:87:74:c4:e1:
                    db:93:99:dc:49:c1:88:c6:c5:bd:d8:cb:94:9b:86:
                    e3:2e:00:65:a4:51:a6:bf:1e:2d:10:8a:bb:83:9d:
                    4a:8b:21:d5:49:70:3d:24:97:d8:32:82:0f:f8:96:
                    f9:69:a8:8d:3c:32:f7:6d:32:39:65:22:84:6b:f5:
                    03:8a:dd:80:7b:15:d6:f2:a1:eb:3b:20:4d:78:c8:
                    c2:ac:e5:49:9a:f5:4e:35:40:d5:b8:b5:51:82:53:
                    ad:9e:7f:cb:86:9a:ec:76:da:4d:33:2e:e5:44:ca:
                    58:5c:02:35:13:a3:ba:d2:80:db:91:5e:b8:ad:d8:
                    f6:e5:f3:02:e5:96:17:6e:0a:9e:ed:6a:0a:b2:0e:
                    a2:70:06:95:df:49:86:b2:79:da:3d:7a:7d:b5:8e:
                    18:9a:db:a6:2a:19:93:ba:ee:f8:e2:ac:a9:2b:8c:
                    95:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:12:03:55:2A:00:6C:A4:E7:CE:30:40:59:91:A3:26:F9:90:2D:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6b48090-329f-3dbb-93de-affde5d0f98d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:b070::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0a:2d:33:bd:9c:de:83:30:97:3b:32:6b:00:69:93:46:c3:
         5a:57:0e:18:4b:d5:ad:5b:c4:58:14:31:b2:ae:36:60:35:84:
         6b:f4:e6:f5:62:7a:58:fa:0e:e4:f2:37:a1:97:13:13:66:17:
         ae:65:da:10:54:8c:ef:88:74:05:d7:e3:2c:9f:6c:37:61:c5:
         ea:d8:b4:68:ab:95:c3:44:ec:22:e6:e3:6b:d5:99:f1:5a:a9:
         d9:72:ed:81:2e:8f:14:f7:26:fb:42:dd:e2:8c:2b:66:61:a9:
         e9:a2:f0:04:c8:c2:dd:93:ae:d2:ea:d4:59:78:aa:16:50:2e:
         47:09:44:2f:d0:35:14:8a:e1:54:61:45:67:44:f7:4a:b2:d3:
         b8:fd:33:66:52:15:38:9c:9a:ec:35:68:8d:bd:ec:04:59:ad:
         c8:df:2b:c6:23:ee:f9:27:6c:b8:fd:69:f6:47:25:db:94:a3:
         e8:5f:9e:28:56:cf:27:cc:62:18:37:9c:6f:ec:b7:e5:93:ba:
         e6:40:33:0b:25:4c:94:6a:dc:19:1c:47:7b:68:6d:e2:e8:f6:
         be:f0:d0:cf:62:10:3a:de:01:21:eb:c6:67:3f:66:aa:2e:f9:
         13:0a:34:bc:35:73:c7:7f:7f:98:ad:eb:10:dc:13:f5:f7:89:
         f2:77:d9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:32 2024 by rpki-client on console-fra.rpki-client.org