Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01cafc2b-2a4e-36cb-b895-3a42b40abc1a.roa
File:                     01cafc2b-2a4e-36cb-b895-3a42b40abc1a.roa (raw, json)
Hash identifier:          FiZX27hAU3cVU2EtYrbfZI3jgMXu0j8u55YgmzZ8O8U=
Subject key identifier:   F2:06:15:CA:1F:CD:86:D5:1F:95:F4:4D:EF:7D:0E:13:0D:6F:7A:BC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E4C4AC15F484E94DB22896C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01cafc2b-2a4e-36cb-b895-3a42b40abc1a.roa
Signing time:             Sat 16 Nov 2024 02:00:28 +0000
ROA not before:           Sat 16 Nov 2024 02:00:28 +0000
ROA not after:            Fri 14 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        2600:1005:a020::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e4:c4:ac:15:f4:84:e9:4d:b2:28:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 16 02:00:28 2024 GMT
            Not After : Feb 14 02:00:28 2025 GMT
        Subject: CN=de8fe381-2a95-421d-a66e-14375282f82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cd:3c:fc:35:41:fe:eb:d2:63:a0:fa:45:8e:
                    d2:e3:99:64:56:55:9f:43:ab:42:28:77:83:2e:a3:
                    b2:37:6a:99:93:69:f8:7c:b6:7f:fe:27:86:40:6a:
                    f6:fa:c0:3f:cc:6a:65:3c:2e:d4:ba:e2:5a:dd:71:
                    9d:51:08:e9:67:d0:6d:d0:0b:e8:b6:0e:ba:bd:e0:
                    87:93:e6:b2:b1:66:98:ae:53:2d:18:af:45:82:55:
                    c5:a9:4e:d4:22:b7:12:6d:04:fe:14:e0:f0:f5:58:
                    29:98:b3:b4:71:82:b8:f9:97:63:26:a7:8a:43:06:
                    67:1c:11:67:44:0f:0a:28:25:00:36:8e:9b:bf:61:
                    8d:65:9d:2e:18:07:ee:31:28:89:bc:5b:d5:2c:a9:
                    f2:91:c2:e2:25:4d:eb:b9:02:6b:0b:96:a0:54:de:
                    26:3e:ba:95:dc:82:4d:de:a8:86:18:89:c5:58:19:
                    a9:b3:5e:0f:89:c2:a1:17:01:a7:84:94:19:22:aa:
                    a6:6f:42:fd:e0:47:a7:9a:73:04:e1:e5:40:aa:d2:
                    2e:1c:87:5b:4f:60:99:3d:92:a9:85:c9:11:c7:69:
                    e0:86:60:df:ad:5c:f1:ba:18:3d:53:02:6d:37:9c:
                    29:58:7d:f6:17:1a:b0:ce:73:f7:a1:c6:ee:36:fa:
                    8a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:06:15:CA:1F:CD:86:D5:1F:95:F4:4D:EF:7D:0E:13:0D:6F:7A:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01cafc2b-2a4e-36cb-b895-3a42b40abc1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:a020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:10:09:95:f5:07:2c:1f:f8:1b:b6:b9:23:1b:5e:c5:e6:ec:
         e6:63:48:75:8e:ae:58:69:46:c1:ba:0c:a4:73:08:66:5c:a7:
         64:35:8a:13:3a:2e:8e:44:a3:f0:e9:80:ff:fc:c3:74:f8:16:
         7e:f1:77:73:4d:57:13:2a:a3:a2:6a:b2:78:3d:64:a9:3f:4e:
         47:43:fe:6c:5b:02:55:ef:56:e4:0f:ba:9b:e0:ae:98:ed:4d:
         22:c5:a1:5a:b1:c6:1f:f2:98:af:30:9c:56:07:92:72:b7:ba:
         87:f0:5d:c7:93:66:37:94:d3:90:ba:82:f0:d3:ab:8e:cc:e6:
         11:59:cf:0d:5b:af:95:04:fd:6b:62:8d:87:5f:00:5c:7a:f0:
         10:d3:8b:61:a5:d5:1c:cf:65:dd:59:c5:e3:41:48:93:26:45:
         9c:8e:ba:3c:c0:fa:71:cc:c3:63:74:3e:95:b1:0c:6e:78:7b:
         17:28:c8:55:81:30:87:a7:33:1c:fe:3d:e1:c5:0e:f3:bb:d0:
         00:e4:54:08:c8:60:ad:de:88:9d:30:14:16:28:78:16:60:eb:
         db:9a:06:40:55:89:b1:67:d0:12:f7:3c:bf:13:ce:59:0c:ff:
         ab:ad:9a:8b:be:51:5c:12:71:2d:8e:81:92:82:b2:2c:58:8d:
         47:84:eb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:14 2024 by rpki-client on console-fra.rpki-client.org