Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d42ba53-9dd9-36ce-8330-9b340cf42061.roa
File:                     0d42ba53-9dd9-36ce-8330-9b340cf42061.roa (raw, json)
Hash identifier:          0Ip/xZs1qr6dOKpatdU35gaIRSnp5/vI0YIjK3OssP8=
Subject key identifier:   CA:F5:A3:D9:1E:83:D4:68:EB:89:37:DD:9D:53:E4:9B:CE:A7:75:56
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBE5FD891628AEC3675DD0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d42ba53-9dd9-36ce-8330-9b340cf42061.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1015:b080::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:e5:fd:89:16:28:ae:c3:67:5d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=5138a647-8a02-4bc0-8886-6505b10d7e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:48:e8:67:18:38:ba:57:37:eb:5a:ce:76:2a:
                    9b:25:89:80:c0:c7:c6:c8:9d:bc:1b:87:8b:ae:cb:
                    01:77:08:83:2d:e5:4e:4a:e8:7a:75:9b:56:44:8f:
                    a3:53:dc:39:8b:1c:d1:04:ed:1a:ac:16:7c:d7:ec:
                    ca:f5:e6:db:f3:bc:e8:fb:83:83:21:28:93:06:5d:
                    d0:b7:54:d0:d2:06:23:2e:77:80:36:1e:b7:69:50:
                    6c:08:50:c2:60:53:28:7c:51:7d:28:b0:38:82:ab:
                    8a:ea:af:30:e6:6a:5d:8a:b3:02:87:77:96:d9:b0:
                    78:7f:e0:e4:ec:68:b1:30:8f:45:d8:6d:b0:6d:00:
                    7f:50:98:52:d4:bb:65:04:3f:8e:5d:0b:ba:d1:97:
                    79:0c:24:39:df:fa:56:1e:b6:67:68:97:c7:3d:27:
                    cd:db:cc:d4:29:69:d4:4b:4d:7e:5e:74:20:e9:ea:
                    b2:0d:be:bb:ec:3d:5c:c1:3f:1f:fe:a9:0a:02:80:
                    8a:df:5a:c4:72:4f:bb:ba:e4:8d:02:8b:27:48:ce:
                    5c:7b:12:a5:04:ea:e2:aa:c3:6a:76:03:57:50:92:
                    eb:d4:ef:f6:db:26:22:15:7f:00:c2:8e:c4:df:71:
                    ec:4e:b1:e2:03:f7:bb:ef:f4:77:a5:b2:c8:88:fc:
                    75:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F5:A3:D9:1E:83:D4:68:EB:89:37:DD:9D:53:E4:9B:CE:A7:75:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d42ba53-9dd9-36ce-8330-9b340cf42061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:b080::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:43:17:c8:84:1c:7f:a5:7d:76:62:bf:16:3f:b2:f0:76:4f:
         0d:de:0c:7e:c7:71:3c:02:06:6a:bb:7c:70:ec:be:da:03:7c:
         bf:92:a4:a5:70:49:e5:7f:05:ff:02:bf:4e:a3:e5:3c:19:85:
         44:aa:5e:61:8c:8c:ca:aa:ef:1c:2d:b4:89:4a:ed:88:9d:55:
         c1:15:33:dc:24:12:4d:20:6e:2c:9e:6e:ed:52:40:32:b8:9d:
         3e:02:8b:61:76:11:20:1a:4f:c3:33:35:be:b4:60:4b:61:48:
         ae:08:b1:18:49:76:14:49:33:94:c1:0b:fb:08:f2:8c:ba:ac:
         02:28:b5:63:42:d4:5a:7c:07:13:b2:f6:4e:67:02:9d:49:2f:
         99:25:38:34:ed:1c:a9:ec:f0:9e:0f:24:f8:75:7e:65:a8:c3:
         16:f9:49:58:5e:be:35:a8:a5:0c:87:2d:83:be:b9:ff:b6:63:
         23:9e:47:d4:69:b9:ba:0c:f5:4d:46:a2:0d:fe:a7:1e:47:67:
         d0:25:60:92:81:c5:4a:6a:cf:24:d6:64:6c:cf:44:01:ac:ab:
         ad:6b:4b:45:1b:5d:39:76:65:94:f5:73:50:fa:91:c2:6e:82:
         fb:2f:49:dd:a5:2d:90:4d:78:bd:e6:30:bc:27:f5:8f:ce:9d:
         21:b3:a2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:16 2024 by rpki-client on console-fra.rpki-client.org