Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd3b8543-b135-3d9e-892b-19af53bd05f2.roa
File:                     fd3b8543-b135-3d9e-892b-19af53bd05f2.roa (raw, json)
Hash identifier:          eEiHVQS2H8i4J+VP54fXc93hzcA8ak1C6m3gb9zuI9M=
Subject key identifier:   0C:6C:3B:FC:87:CF:10:1B:57:09:97:DD:38:48:38:38:35:65:48:98
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA07BF6ECA038C73D1D1C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd3b8543-b135-3d9e-892b-19af53bd05f2.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100d:bf06::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:07:bf:6e:ca:03:8c:73:d1:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=d1f3fc6b-5953-4b26-85a1-a941568aecbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:38:58:8e:56:95:f9:d9:9e:63:e4:97:f2:
                    2c:71:66:c7:1b:1d:18:f6:55:6e:77:c8:74:8b:bb:
                    91:fa:22:33:67:1a:e8:5c:91:10:ba:6c:50:dd:bd:
                    f3:fa:07:b6:d4:62:31:a7:49:c5:ad:4a:94:29:95:
                    8f:6c:19:da:61:05:25:58:f0:72:fd:af:c1:b5:74:
                    37:be:60:24:70:ae:4c:7d:0c:6b:fd:b4:a4:d2:aa:
                    7b:20:fe:cf:36:cf:8f:da:db:48:2d:5b:b1:b4:0d:
                    72:33:94:a2:b8:e9:7c:dc:e9:11:45:21:39:ad:81:
                    80:de:39:f0:17:8c:84:a9:6b:46:3a:ec:13:24:0e:
                    da:7e:e4:0d:a3:e4:d0:28:8e:1f:dc:ef:9c:ae:54:
                    9f:03:54:c9:f9:4c:14:a7:24:1a:37:70:aa:f2:c6:
                    b3:71:28:80:82:15:55:0a:86:14:c6:4b:9a:35:db:
                    0b:76:44:4f:18:42:04:cd:6e:00:d4:b1:42:5a:8a:
                    72:cf:26:18:07:7c:0c:1d:26:df:ae:97:81:72:53:
                    d8:79:cf:a9:72:67:f3:65:59:bd:09:c3:d3:a2:5b:
                    b5:0a:11:36:b0:4e:06:ad:bc:05:ae:d3:a5:38:0c:
                    ae:f3:a5:9b:46:de:d6:f8:a0:b6:c9:bf:8f:08:79:
                    28:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6C:3B:FC:87:CF:10:1B:57:09:97:DD:38:48:38:38:35:65:48:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd3b8543-b135-3d9e-892b-19af53bd05f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:bf06::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:06:ed:57:f7:1d:af:c0:92:d0:06:27:ec:22:78:0c:be:b4:
         1a:8f:f1:ad:ac:cf:1f:fa:ca:93:26:18:46:e1:a7:72:44:92:
         0b:7b:77:16:9c:30:46:0a:de:f9:3d:57:57:56:d4:0b:ac:78:
         53:81:7d:60:6c:a8:b8:36:70:45:7c:de:0d:82:ef:25:4a:12:
         6e:d3:93:f1:8e:32:ef:b9:e5:74:b8:88:56:05:65:2b:80:8f:
         43:9b:04:de:f2:d3:7a:b8:78:c7:e3:bc:e8:fe:c2:c9:3c:24:
         3c:1e:54:b6:58:ef:1e:c1:b0:09:7b:cd:c9:55:6a:8b:83:b4:
         a4:2d:fa:e4:ff:e9:4a:86:71:f3:0f:cc:50:cb:b3:33:d1:0f:
         6f:72:32:2b:4c:60:42:e5:42:a8:ef:90:8e:cc:99:e8:a4:cc:
         60:e0:91:13:0a:59:c6:2a:ce:1d:d5:43:c9:7c:2b:d0:4a:da:
         eb:a1:9c:1c:0c:9f:d0:2a:c8:8d:b8:88:3e:58:f8:9c:6d:ac:
         27:0b:0c:6c:e9:8c:8b:06:6e:56:f3:08:32:01:ab:03:47:e3:
         73:46:26:8c:6f:e3:a5:ad:b8:d7:2d:54:32:15:33:bc:5e:15:
         12:68:7e:e5:7e:62:43:0f:ec:a1:89:7c:c6:3f:31:6c:69:8e:
         1d:28:c0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:03 2024 by rpki-client on console-fra.rpki-client.org