Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/029c48b3-0185-3fa4-aaba-991fe6714a46.roa
File:                     029c48b3-0185-3fa4-aaba-991fe6714a46.roa (raw, json)
Hash identifier:          hKFnjqn/DBDYO/wlhIWuQgBAqPU6RRvtgmnZEBG/2xI=
Subject key identifier:   38:AC:F1:7D:6A:63:82:43:D4:F2:5F:B1:3B:E7:78:C6:C4:49:E0:BE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA092C453E5DDA50972740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/029c48b3-0185-3fa4-aaba-991fe6714a46.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100e:a100::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:09:2c:45:3e:5d:da:50:97:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=fe5f0ec4-9b7e-496a-b008-ddd2529e99e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:02:4a:b8:48:dd:62:b5:b0:76:11:d3:5e:2a:
                    f9:18:f7:63:cb:25:06:b8:4e:46:8a:63:85:00:0c:
                    36:50:7a:79:ad:fc:95:1a:28:02:6e:4b:7a:9e:d6:
                    85:95:12:78:6c:62:ea:f9:7b:42:2c:28:95:0a:46:
                    6a:9a:09:5b:46:00:2e:13:e7:93:2e:db:16:39:bd:
                    b4:f3:5c:d6:d2:60:89:ec:44:97:03:04:ec:f2:b3:
                    d5:23:ad:b8:7e:7d:fc:fd:7d:cd:9e:fa:cb:af:33:
                    71:00:9e:d5:a4:b3:22:ea:41:60:ee:21:64:1f:5e:
                    c4:9c:26:54:40:bd:b6:2e:06:b5:43:f2:56:70:01:
                    b0:ec:96:23:e8:35:ff:56:ea:0e:9c:1d:8c:a5:70:
                    21:59:94:46:8d:81:d8:f8:f3:51:63:2f:86:90:b1:
                    01:6f:f2:45:99:ec:a1:c9:28:1a:79:dc:57:0e:cc:
                    91:9b:42:93:92:da:41:57:b1:cd:9e:97:e2:8c:5f:
                    d0:02:f3:50:70:f8:e9:6c:de:5e:a4:04:36:f1:36:
                    b1:ee:38:43:c2:23:23:40:28:03:56:4b:d0:e9:2b:
                    50:95:0e:f7:c9:8e:9d:33:5d:92:47:87:f5:06:b4:
                    ea:9e:7b:e0:37:0d:cf:c9:d9:bc:1e:31:46:41:85:
                    f7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AC:F1:7D:6A:63:82:43:D4:F2:5F:B1:3B:E7:78:C6:C4:49:E0:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/029c48b3-0185-3fa4-aaba-991fe6714a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:a100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:20:f3:23:6d:d8:90:06:e7:71:0a:09:dd:5c:65:03:46:81:
         ac:de:38:d9:09:51:65:8b:df:2c:75:15:61:b7:87:6b:82:6f:
         d0:b2:2b:91:90:d5:66:37:ff:63:2d:76:14:7c:ab:91:bc:0c:
         b5:3e:d1:96:0d:0a:29:46:4e:62:05:3f:ab:62:4c:60:5e:da:
         5d:37:86:94:85:cc:75:ce:68:4d:bf:af:94:63:5c:30:8b:9c:
         7e:c9:fa:41:88:48:f0:84:e5:da:2a:ff:dc:4e:31:84:cd:df:
         33:3b:13:42:06:ea:5e:b9:6e:17:2a:0e:2b:36:ea:bf:2d:a9:
         46:ac:a9:e0:17:bd:26:f7:d3:6e:4c:32:56:d0:a5:5e:a3:da:
         1a:b6:1f:e5:65:78:54:b4:0e:21:f8:82:eb:a6:85:ed:8e:2d:
         1b:46:28:ea:c7:20:fd:ef:74:1e:23:cf:13:21:ef:a0:58:ff:
         ec:45:92:96:cd:94:28:71:1a:d2:37:14:79:93:52:c8:3a:f8:
         17:05:6a:5d:c9:80:de:58:89:44:1a:5b:f9:a1:df:55:ea:cf:
         d0:d8:1c:00:e0:a5:63:ce:03:e7:ee:1d:26:0e:c1:0c:e8:91:
         d7:3b:d2:10:68:3c:b6:d0:fd:7a:cf:d3:e2:1b:92:e6:78:eb:
         3c:df:a8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:08 2024 by rpki-client on console-ams.rpki-client.org