Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/00878f48-08fe-380b-b1bd-2c5a3ebdfa73.roa
File:                     00878f48-08fe-380b-b1bd-2c5a3ebdfa73.roa (raw, json)
Hash identifier:          3ACJnLcAFggWbKGZccxkkue78/kP0p6FxjewJdR6Hrw=
Subject key identifier:   F1:DC:D6:D4:F8:B8:A9:1C:0A:90:A4:03:1C:E8:24:AA:7B:B9:C2:61
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76A6E55DBF9FCB644C3480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/00878f48-08fe-380b-b1bd-2c5a3ebdfa73.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1006:b140::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:a6:e5:5d:bf:9f:cb:64:4c:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=9c7776ed-1314-4a64-85c6-582a1ebf339c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a7:df:57:66:23:97:21:ad:fe:b8:a6:e1:e9:
                    7c:0d:1d:f2:f9:27:b9:42:bb:e4:e9:df:62:80:e5:
                    ba:cd:59:5c:27:b8:fb:16:c2:3c:43:ba:11:ec:a6:
                    51:ae:ca:25:1b:79:43:b0:d8:0b:9d:c9:7c:bc:80:
                    23:a0:61:f7:09:0e:50:ac:bd:92:b9:01:62:6c:ab:
                    38:16:3d:13:b5:60:e4:00:57:bd:d4:8f:e5:4a:3e:
                    56:ad:f4:ec:1b:bf:e1:7f:33:cb:84:0a:19:29:6b:
                    59:a2:57:5b:c8:f7:ba:8d:e1:bc:cb:c7:14:10:64:
                    87:48:a5:f8:f5:e0:52:11:33:ad:18:37:20:03:76:
                    99:39:9e:aa:75:94:d1:89:02:35:74:2c:32:44:a1:
                    bd:33:eb:be:96:64:9d:8a:30:ad:f5:de:04:c3:19:
                    76:d5:10:de:ee:15:e9:a2:9d:e2:e3:b7:20:ee:3d:
                    9c:3b:88:36:6a:85:d2:34:3d:e7:df:b1:0d:52:49:
                    13:49:e9:f3:01:e7:5d:3e:ec:07:32:71:01:b0:e0:
                    88:e9:d6:88:f9:f5:7d:3b:90:ee:cf:00:66:a5:43:
                    f0:15:2c:5d:5c:5a:aa:60:0e:64:fd:7c:76:8c:0d:
                    4d:a8:3d:1b:35:34:4f:44:46:95:07:f1:48:5e:aa:
                    67:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DC:D6:D4:F8:B8:A9:1C:0A:90:A4:03:1C:E8:24:AA:7B:B9:C2:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/00878f48-08fe-380b-b1bd-2c5a3ebdfa73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:b140::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:aa:97:a9:2b:ca:1a:02:c8:3c:28:24:2d:47:36:af:c7:46:
         e3:ae:52:de:97:11:c9:00:86:ae:a7:7a:a8:d2:66:05:41:e3:
         80:0e:1e:0d:0e:65:95:bc:6d:b9:64:1e:e3:b0:8f:2d:0e:10:
         98:e3:0e:b7:1f:51:1d:c0:62:bd:16:5e:ab:6e:31:53:47:4c:
         87:35:0e:dd:d6:3d:db:f1:7f:66:87:be:ad:78:97:34:73:fa:
         b3:08:f1:1a:60:bf:3a:57:e5:0a:91:fd:0a:b0:a1:32:e8:c6:
         af:79:8e:4d:fb:03:7c:3e:ef:e1:5d:1b:3a:53:40:2f:15:f6:
         97:eb:e2:4a:d5:63:fc:b9:44:8d:5f:97:41:b4:c2:ee:8d:25:
         60:20:45:b1:3b:1c:75:6b:fc:bc:51:8c:bf:57:bd:d5:d5:43:
         c2:ab:03:06:c0:6c:a6:db:72:d7:9d:35:64:69:17:52:10:69:
         73:28:b2:51:04:51:55:08:dd:94:d3:35:b5:dd:a8:14:9e:6e:
         55:1b:60:e6:3a:a9:2e:32:ac:a3:6e:5a:87:9d:85:bd:4c:48:
         d1:07:8c:28:51:00:4e:2f:7b:8f:b3:35:2c:dd:8b:21:45:94:
         e0:00:b5:aa:89:e3:9f:2f:75:ae:a0:23:da:d6:7d:59:5a:9d:
         ae:b3:4c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:14 2024 by rpki-client on console-fra.rpki-client.org