Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd9c6f9d-962a-3f39-9a64-c36030af5d5a.roa
File:                     fd9c6f9d-962a-3f39-9a64-c36030af5d5a.roa (raw, json)
Hash identifier:          g8J2TiDp3N+/D0pKV8SjQgyYjqORKqSEqN4IlfUznaE=
Subject key identifier:   5A:25:2A:81:58:16:33:AE:5A:08:D6:D7:E0:80:88:9D:0E:CD:7C:CA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA088C6130438D9A736780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd9c6f9d-962a-3f39-9a64-c36030af5d5a.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100e:9000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:08:8c:61:30:43:8d:9a:73:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=0fd0ea61-9643-4edb-af4e-a15e03c78762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3a:fe:49:74:56:52:1f:87:e6:4f:c9:61:51:
                    77:f5:ec:e3:f4:c0:7f:20:d5:72:1d:ae:3b:6a:d0:
                    18:96:ba:33:7c:8f:3b:18:9f:92:9a:31:30:34:4a:
                    11:e6:72:2d:35:a1:e1:31:be:8e:cc:8b:8a:dc:c0:
                    1f:c0:2d:2d:42:01:92:0e:7e:69:31:47:be:58:4b:
                    14:1d:05:ef:52:c2:34:d5:76:d5:9b:b6:5c:4f:ab:
                    8f:c1:53:76:6e:11:c7:e5:20:cf:41:33:78:7b:35:
                    c5:18:f3:99:f8:38:6e:37:07:5e:ab:46:ea:f6:0c:
                    7a:99:f1:67:3c:22:3c:61:71:98:e1:73:94:41:93:
                    57:4f:aa:9e:fe:be:f7:49:89:61:d2:7a:ca:3c:27:
                    ba:9b:b7:4d:5c:86:1f:79:be:25:4c:e0:14:22:64:
                    3c:4f:78:49:d8:0b:85:63:cf:40:a9:7a:c6:19:62:
                    b9:31:00:00:6a:8a:b0:d0:5f:10:0f:a8:3f:22:31:
                    3c:12:fb:93:9e:7b:52:ee:98:52:1e:7a:80:be:ae:
                    8d:c2:d3:44:cb:36:ef:c1:5d:1a:51:b2:8c:49:bf:
                    17:d1:d4:df:0a:45:6c:77:0e:b1:ed:28:fc:a9:e4:
                    4d:69:11:b1:35:89:de:c6:13:7e:b0:ff:2d:ce:4e:
                    aa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:25:2A:81:58:16:33:AE:5A:08:D6:D7:E0:80:88:9D:0E:CD:7C:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd9c6f9d-962a-3f39-9a64-c36030af5d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f1:7c:86:96:eb:4b:4b:39:71:a6:2f:fd:9a:72:b1:00:db:
         e1:f3:48:23:dd:76:67:17:74:df:88:3f:c4:75:24:18:f3:42:
         e8:c9:5e:cb:97:e6:de:1f:93:87:8d:fe:1b:a9:54:56:7a:87:
         09:7f:60:32:cf:95:55:14:36:18:4d:56:7c:31:36:9d:97:d5:
         0d:66:ec:6b:07:59:6e:63:7a:e8:e4:f4:76:b6:f9:82:ee:5e:
         b4:15:01:af:bf:d6:91:d5:59:52:21:c2:ed:a0:7b:84:b1:07:
         3a:06:9f:5d:30:c8:79:d1:f8:b6:cd:e7:b0:4c:f6:bf:49:5c:
         af:d9:1b:93:f6:61:7b:64:10:cd:73:76:79:2f:f3:dc:fa:17:
         bc:bb:b0:27:da:ea:7a:22:e0:0d:a9:07:2b:2e:e0:2f:45:99:
         d7:d4:1a:2d:8f:70:54:de:21:d9:29:68:58:33:f4:71:1d:71:
         a7:8f:a6:14:1b:91:ab:fe:c7:e2:c3:f1:7c:8a:cc:fc:b7:70:
         75:82:7d:8b:f2:32:53:4e:c7:7b:df:f3:88:01:68:85:5b:d1:
         4e:a6:05:b6:05:1e:d9:d8:d0:e8:a9:a8:49:c7:4e:fa:00:ef:
         76:c8:8d:ff:ce:33:14:4e:cd:ba:ea:79:5c:be:24:09:9c:19:
         46:ef:a6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:04 2024 by rpki-client on console-fra.rpki-client.org