Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d4e7979-0ecf-3c08-947a-3adccfcb24c0.roa
File:                     0d4e7979-0ecf-3c08-947a-3adccfcb24c0.roa (raw, json)
Hash identifier:          XU+bg0GlOOZCsGiz71lmjNl/Swjwo0Uq7XTnj758gr8=
Subject key identifier:   0C:06:7F:91:76:07:E2:E8:DE:AC:3C:DC:24:8E:24:C3:93:7D:0C:4A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA0A6486BA57D5208E25C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d4e7979-0ecf-3c08-947a-3adccfcb24c0.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100e:b0e2::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:0a:64:86:ba:57:d5:20:8e:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=e72dd2d3-84c4-44b0-b10f-bb7c0ce7f45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dc:91:9a:b1:fb:e0:92:53:39:7a:9f:bc:58:
                    5d:dd:e5:07:ff:19:5f:25:f6:65:67:67:39:25:ec:
                    9f:ed:36:89:cf:07:99:70:b8:d3:7b:f8:a3:94:93:
                    a6:87:19:a8:e9:eb:21:07:99:8d:be:cb:1f:6d:d7:
                    c3:03:13:35:f0:21:09:15:3a:e4:e4:5b:20:9f:9e:
                    3a:c7:d8:30:20:35:9a:97:bf:ce:31:4f:c9:2e:75:
                    9f:53:e5:e7:ef:b4:5f:51:4e:08:ac:a3:76:be:f7:
                    db:8d:b2:a5:63:a7:71:98:28:df:d9:d9:13:f4:61:
                    70:7b:19:7c:65:e5:02:fd:94:ad:a7:30:b1:83:e7:
                    12:ec:54:bc:c2:4d:63:3b:d0:b8:7f:93:65:c4:43:
                    32:70:de:68:94:9a:90:ce:d6:3e:57:e3:e1:6e:24:
                    b0:35:38:69:cb:ee:da:41:30:86:75:23:7a:e2:a4:
                    7b:c1:20:3e:ea:e4:2b:17:4c:36:05:98:c0:35:50:
                    c1:d2:8f:d1:d6:7b:69:f6:4f:47:b3:9f:23:5a:aa:
                    98:1c:22:28:b6:9c:44:31:92:10:28:42:22:9c:d6:
                    49:9e:4f:5b:3e:89:c7:52:fc:69:d9:17:44:e0:e7:
                    ea:f9:5f:c3:72:c0:46:c0:9a:29:60:e9:df:18:8f:
                    d1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:06:7F:91:76:07:E2:E8:DE:AC:3C:DC:24:8E:24:C3:93:7D:0C:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d4e7979-0ecf-3c08-947a-3adccfcb24c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b0e2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:0e:a8:2c:55:e1:15:14:79:29:02:b4:13:6d:9d:1f:19:56:
         e5:ff:9a:63:ff:e3:24:5d:c9:15:f3:58:ce:e1:2c:ef:42:42:
         2f:95:47:b7:cb:8b:3c:55:e0:91:61:9c:d3:ae:81:03:86:80:
         f3:9a:54:71:5a:0f:d4:25:81:b8:bc:28:d0:27:a3:da:10:ba:
         83:4d:64:4d:c6:07:42:01:94:af:cd:08:da:1f:be:89:f6:0d:
         9e:1a:72:0d:d5:75:60:da:35:84:4d:33:96:3f:96:2d:a6:33:
         c8:8b:76:9c:f5:19:1e:34:ed:df:23:c0:4d:1e:10:c8:9e:8c:
         ba:ba:ac:1f:0c:12:d7:1c:44:ae:42:0c:0f:7a:8f:71:9d:04:
         a0:d1:6a:6d:56:db:7e:cd:1f:c6:03:af:54:9d:26:f2:f5:c1:
         67:ee:aa:c6:93:59:03:40:c3:57:56:bf:db:17:1c:e8:51:49:
         ff:87:48:9b:5e:31:2e:91:41:ff:6f:eb:77:7d:9a:b7:7e:d9:
         ba:ea:e6:77:34:17:6b:c4:5c:d7:d2:ac:09:9a:8b:43:ce:80:
         9b:6e:a6:dd:ef:54:04:24:7c:f2:42:1a:04:20:97:31:bb:47:
         aa:14:f0:e3:1f:b4:1d:a4:9f:d1:35:ec:1f:da:b6:cf:bd:48:
         02:a3:81:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:17 2024 by rpki-client on console-fra.rpki-client.org