Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0923ec67-967e-3694-ba6b-dca0e7010e2b.roa
File:                     0923ec67-967e-3694-ba6b-dca0e7010e2b.roa (raw, json)
Hash identifier:          MwX9qG1KX9eHwfp2FNkWdyeSY9uUCul6sCwS1dWangY=
Subject key identifier:   C1:89:F6:8B:A8:92:B0:03:6E:57:7F:A8:26:36:F3:6C:9F:A4:3E:BE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76A64094356C01FFDEF400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0923ec67-967e-3694-ba6b-dca0e7010e2b.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1006:b098::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:a6:40:94:35:6c:01:ff:de:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=86fd7154-efa3-45ed-b72d-c413e8e964ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9e:97:c1:1d:17:c8:c6:60:e2:58:c8:cd:54:
                    74:ac:42:ac:02:77:fe:53:e9:f5:3b:1e:2d:59:d3:
                    16:e6:6b:d5:27:f7:01:59:d3:b5:87:85:0f:7c:90:
                    ae:d1:6e:b4:d1:8c:a8:68:6f:0a:5b:11:d5:7d:33:
                    28:3b:d6:16:b2:59:02:f0:d6:b4:22:c7:47:e4:ed:
                    a3:e9:2d:ad:d2:14:b5:b9:c5:db:0c:37:5c:1e:14:
                    f3:c3:36:7d:bb:e3:81:13:c3:f6:59:10:40:1c:c2:
                    bb:18:a9:f2:2c:9c:cd:83:92:4c:49:78:a5:3a:61:
                    c4:68:60:d1:42:83:79:73:01:e6:e0:8f:ef:35:82:
                    f2:42:d3:07:81:bd:1a:4a:63:5c:a8:00:c3:6a:cd:
                    a5:21:19:76:7a:0a:13:39:fa:d0:86:ba:1e:06:38:
                    9c:4e:d6:55:1f:6b:ff:7a:25:ad:be:d0:1c:f0:f5:
                    34:c3:54:1c:f5:ba:2f:07:96:87:d0:0f:25:11:11:
                    a9:28:70:ea:b1:0c:b2:0e:d0:c9:0f:18:fa:10:9f:
                    81:50:c7:71:c4:96:74:87:78:20:7b:18:37:8b:4a:
                    e8:00:cd:cb:bf:9c:8b:44:6a:6a:a8:39:95:49:89:
                    44:5f:89:aa:f9:9e:b2:5b:d2:1c:54:72:72:5c:4e:
                    67:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:89:F6:8B:A8:92:B0:03:6E:57:7F:A8:26:36:F3:6C:9F:A4:3E:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0923ec67-967e-3694-ba6b-dca0e7010e2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:b098::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:6f:1c:a3:0b:35:74:7f:5c:2f:4e:ff:e8:ef:4a:cb:7f:44:
         28:28:30:17:b4:6e:01:a6:20:46:f6:08:bc:4c:61:34:f0:74:
         25:a0:7a:86:44:19:0a:1e:db:ea:6b:3b:39:61:89:2d:42:d0:
         a4:84:74:83:6b:f1:94:41:d9:cb:9c:9c:5b:32:5e:1d:6c:e6:
         c1:13:6d:e2:29:3e:b5:bc:5f:0d:14:dc:32:8f:65:92:e8:19:
         62:d3:76:2a:ec:b1:d1:a4:ed:21:42:97:c7:57:2c:4a:f4:f3:
         5c:8c:cc:ba:f7:5c:10:89:7b:44:04:bf:27:72:6d:5c:bb:68:
         d5:d3:63:74:a4:d3:fa:e4:bf:a5:3c:3d:d1:0f:34:91:5a:d5:
         ed:e3:65:a8:c6:15:e8:c4:dc:77:22:4e:4c:f7:c0:2a:b9:e8:
         e8:c5:4e:18:54:29:35:ab:64:41:24:79:60:27:1c:1a:08:eb:
         50:a3:4d:bb:76:5c:c3:40:3b:7e:68:98:ab:b1:a6:29:7b:94:
         2f:c8:3c:d2:bb:bd:23:d2:02:57:5c:6b:a0:12:c2:55:52:e6:
         47:27:89:13:b9:f9:41:35:07:0d:e6:ea:b4:1a:c9:c8:e3:32:
         c8:b9:58:04:23:2d:85:02:48:0d:5d:7a:fb:81:89:f5:9f:a7:
         48:24:19:d5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeddqZAlDVsAf/e9AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
ODZmZDcxNTQtZWZhMy00NWVkLWI3MmQtYzQxM2U4ZTk2NGJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ6XwR0XyMZg4ljIzVR0rEKsAnf+U+n1Ox4t
WdMW5mvVJ/cBWdO1h4UPfJCu0W600YyoaG8KWxHVfTMoO9YWslkC8Na0IsdH5O2j
6S2t0hS1ucXbDDdcHhTzwzZ9u+OBE8P2WRBAHMK7GKnyLJzNg5JMSXilOmHEaGDR
QoN5cwHm4I/vNYLyQtMHgb0aSmNcqADDas2lIRl2egoTOfrQhroeBjicTtZVH2v/
eiWtvtAc8PU0w1Qc9bovB5aH0A8lERGpKHDqsQyyDtDJDxj6EJ+BUMdxxJZ0h3gg
exg3i0roAM3Lv5yLRGpqqDmVSYlEX4mq+Z6yW9IcVHJyXE5nmQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMGJ9ouokrADbld/qCY282yfpD6+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDkyM2VjNjctOTY3ZS0z
Njk0LWJhNmItZGNhMGU3MDEwZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQBrCY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGdvHKMLNXR/XC9O/+jvSst/RCgoMBe0bgGmIEb2CLxMYTTwdCWg
eoZEGQoe2+prOzlhiS1C0KSEdINr8ZRB2cucnFsyXh1s5sETbeIpPrW8Xw0U3DKP
ZZLoGWLTdirssdGk7SFCl8dXLEr081yMzLr3XBCJe0QEvydybVy7aNXTY3Sk0/rk
v6U8PdEPNJFa1e3jZajGFejE3HciTkz3wCq56OjFThhUKTWrZEEkeWAnHBoI61Cj
Tbt2XMNAO35omKuxpil7lC/IPNK7vSPSAldca6ASwlVS5kcniRO5+UE1Bw3m6rQa
ycjjMsi5WAQjLYUCSA1devuBifWfp0gkGdU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:16 2024 by rpki-client on console-fra.rpki-client.org