Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fcfddccc-0638-3d43-a05d-9807222a79c5.roa
File:                     fcfddccc-0638-3d43-a05d-9807222a79c5.roa (raw, json)
Hash identifier:          XuM78mlNqicQAX3WdzMGHbIkzXxW4YZxlA4lNcGE69k=
Subject key identifier:   28:E1:E9:2F:3A:FA:1C:1B:75:FF:FF:45:4D:9F:E4:0D:2A:E8:B4:AA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846E3E1D27753906F549D806B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fcfddccc-0638-3d43-a05d-9807222a79c5.roa
Signing time:             Fri 16 Aug 2024 01:36:31 +0000
ROA not before:           Fri 16 Aug 2024 01:36:31 +0000
ROA not after:            Thu 14 Nov 2024 02:36:31 +0000
asID:                     6167
IP address blocks:        2600:100d:9000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:e1:d2:77:53:90:6f:54:9d:80:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:36:31 2024 GMT
            Not After : Nov 14 02:36:31 2024 GMT
        Subject: CN=6282a257-22a1-44ff-8675-99794e8d6184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f3:9e:bb:c9:1a:fa:2a:92:f7:20:ad:c4:68:
                    f6:ad:0e:a0:3e:e2:8d:dd:f5:93:0b:b3:5c:b9:33:
                    a0:53:5b:eb:e0:82:75:9c:38:0e:ee:48:1c:ea:93:
                    0a:78:7c:82:8b:90:47:ef:9d:8f:1d:04:9d:7d:cd:
                    60:bf:d2:86:b3:84:10:68:d9:4d:d6:11:b3:13:ca:
                    c6:d5:76:13:28:28:4a:87:e2:e2:52:c1:eb:ee:25:
                    d4:a6:78:ca:42:1c:a5:4d:5e:29:9f:9b:18:86:7b:
                    26:a5:93:68:bb:65:30:c7:bf:0a:df:72:46:51:c7:
                    32:0b:45:d5:f5:37:21:1c:6b:c1:77:23:d3:fd:a9:
                    34:11:95:0c:56:6d:aa:c7:7c:c7:d5:e3:bf:58:c1:
                    20:3d:74:1a:b4:53:60:8f:2c:ff:34:7f:7f:4c:62:
                    1f:b2:e9:b3:d6:20:03:bc:22:97:d1:cf:f3:05:33:
                    43:75:35:61:e7:1f:2d:55:38:bf:e7:cd:14:b7:6f:
                    46:a3:5c:69:2f:81:34:d9:be:03:d6:e3:22:a1:d1:
                    75:2b:43:04:7f:55:92:d2:b8:58:eb:0d:ef:61:75:
                    12:7f:ee:b7:7d:9a:93:4f:9f:2e:c6:13:67:68:e1:
                    5b:e9:20:97:2d:35:ad:21:96:cd:04:ed:53:ee:f9:
                    39:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E1:E9:2F:3A:FA:1C:1B:75:FF:FF:45:4D:9F:E4:0D:2A:E8:B4:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fcfddccc-0638-3d43-a05d-9807222a79c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:c1:a4:53:b8:1a:f6:cc:75:fb:02:83:d5:aa:86:2f:94:79:
         10:db:85:8d:1b:e1:cf:9f:76:c7:e9:a8:04:49:fb:9c:db:79:
         0c:f2:da:2f:1d:e1:de:2e:09:3b:24:6b:27:0d:10:9c:2d:15:
         0c:b4:b4:8e:ef:4a:82:a5:d1:a2:6b:b3:56:f9:c9:d2:27:3e:
         a0:a1:a7:d6:f1:c8:ab:4f:d9:c1:db:a3:ec:8f:81:78:6c:ef:
         cb:5c:0f:d8:9f:a0:cd:50:a8:83:4f:03:93:ff:7f:0f:8e:7f:
         bf:31:ac:68:65:dc:24:98:4d:39:dc:2b:f1:cd:2a:43:aa:17:
         81:28:1a:09:47:c7:7a:60:ae:65:2d:2f:4f:a1:d3:56:cd:20:
         cb:89:ca:d4:25:a4:99:47:e7:12:60:81:7b:21:a8:37:b3:a6:
         38:3d:a6:c0:f9:c0:88:3c:08:a2:b5:2d:81:40:df:f8:b3:ee:
         be:c0:b9:75:fa:d8:f7:30:08:e8:f8:cb:1e:53:e4:a4:3e:1c:
         14:ee:fb:5f:bc:65:0e:78:99:87:45:43:d1:35:46:25:fa:c2:
         fe:09:0a:d9:d7:5c:cf:dd:8f:52:30:28:53:74:cc:fa:0e:71:
         d5:24:6f:b6:3a:31:93:a8:2e:61:ac:f1:fb:d7:dd:6f:a0:40:
         92:ee:c9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:34 2024 by rpki-client on console-fra.rpki-client.org