Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1158d82e-23bf-3a13-8af8-8c698ca2d096.roa
File:                     1158d82e-23bf-3a13-8af8-8c698ca2d096.roa (raw, json)
Hash identifier:          2s1WurOQaSzcVy/iqJ+BZS/rQR/saW2Wlk08yGMoULs=
Subject key identifier:   15:BB:B8:4F:25:7A:DE:A8:4A:E0:34:E1:6B:B4:0F:52:FA:76:10:30
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D769175253C110E8DACB400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1158d82e-23bf-3a13-8af8-8c698ca2d096.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1000:bf04::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:91:75:25:3c:11:0e:8d:ac:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=538c87c3-e3e2-4074-9eae-6a0d49e772a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:6e:c1:fb:ba:12:14:8f:b3:2a:ba:1a:de:
                    26:3c:a5:ec:91:40:05:c2:0b:91:46:4b:ef:90:2f:
                    5f:22:c7:e0:b6:f9:4b:91:61:74:cb:f9:bc:e8:d6:
                    cb:20:63:b6:65:cb:50:ee:f6:4d:d2:18:5a:11:0b:
                    8b:69:5e:7a:7e:96:a8:ba:55:e6:b6:b2:1f:5c:b5:
                    97:ee:59:01:b3:74:5b:5e:c3:e5:46:43:f4:f1:0e:
                    a9:9b:22:91:e4:8b:f3:ac:9e:58:21:87:84:1f:fd:
                    80:d2:5a:f3:1b:4d:3d:03:81:13:c6:e7:51:5a:05:
                    39:fe:99:46:b3:95:ff:6d:bd:92:29:e6:73:73:d7:
                    82:d6:27:b2:0a:8f:14:16:6b:91:d6:15:d6:bb:a9:
                    51:37:3b:c3:91:f8:8d:36:65:9f:d8:a3:60:ae:f9:
                    28:ad:94:f1:b5:5f:c9:f6:db:1c:fc:9b:34:bb:4e:
                    be:23:3c:3c:47:ab:fa:17:7b:f0:54:70:c5:98:59:
                    25:65:f7:20:f3:b1:4a:23:20:fb:ec:b3:78:7d:85:
                    85:d3:19:67:1a:d9:40:d6:42:87:48:5c:dc:27:4a:
                    c5:92:a2:fb:29:0b:f1:70:07:17:b7:28:c5:ae:7a:
                    1b:68:67:ac:d8:cd:8c:f2:54:af:f8:47:6e:bd:fd:
                    0b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BB:B8:4F:25:7A:DE:A8:4A:E0:34:E1:6B:B4:0F:52:FA:76:10:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1158d82e-23bf-3a13-8af8-8c698ca2d096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:bf04::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:3e:ff:b7:10:76:27:b3:9d:d6:7a:30:49:4d:60:2d:30:be:
         2d:f1:78:a2:24:b9:25:97:a5:fb:cc:36:56:96:df:90:90:e3:
         bb:54:47:b8:59:99:96:cd:61:66:60:39:8e:2a:71:ea:b4:2a:
         66:db:57:a3:7a:ff:0c:10:72:fe:0d:f8:e1:d5:eb:3a:2b:a6:
         4e:4f:35:e0:f4:fc:1f:a4:0e:a8:e7:01:b9:45:80:66:11:c4:
         58:3a:29:9c:ff:0c:c6:54:4f:31:a1:1a:84:e4:3e:ac:7f:d2:
         d2:10:35:7d:fb:20:d0:5d:6e:2e:a1:48:92:3a:3c:0f:ef:d8:
         c8:d3:3b:50:3a:ab:ee:d9:f6:f6:98:7c:a2:25:2e:86:fe:b5:
         97:14:27:ab:d2:14:6d:02:8d:cb:60:b1:29:7c:8b:3e:49:6a:
         ec:c7:a3:1d:09:05:ae:01:37:62:07:a0:e4:af:5c:ca:8c:ab:
         7b:cf:f6:0f:de:02:4e:ce:f9:83:20:32:b3:68:ea:de:7e:74:
         14:22:76:4a:58:2d:69:ce:d6:3f:6c:1b:0d:cf:5e:de:de:c4:
         fe:48:ff:e2:26:57:35:0f:ca:55:81:53:e1:a1:20:b1:c6:e1:
         bf:73:cf:4c:b0:18:44:96:35:f5:7f:92:56:c8:19:93:b6:29:
         cc:c6:f8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:17 2024 by rpki-client on console-fra.rpki-client.org