Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/13bd6417-e631-3548-aedc-388d2a811f6c.roa
File:                     13bd6417-e631-3548-aedc-388d2a811f6c.roa (raw, json)
Hash identifier:          zMvNnWxw+TgzYx8cgM0BMqERbIraM4qECyuTyaif2+Y=
Subject key identifier:   3F:61:1E:A1:85:B5:A2:D4:FB:A9:FF:A1:FA:FA:07:E0:C5:34:65:8F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D7698D4B92D49107E58A300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/13bd6417-e631-3548-aedc-388d2a811f6c.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1003:9000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:98:d4:b9:2d:49:10:7e:58:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=cce6eb93-5498-49d0-9eb1-d5ddcd831549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1c:3c:7f:d9:b4:59:ee:d7:b3:25:19:f7:35:
                    7d:56:28:1c:7f:cf:5c:bb:4b:1f:1f:05:d5:9f:e4:
                    7a:0d:48:ff:47:0e:25:e6:7e:0f:f2:38:f4:d2:48:
                    e7:d8:1a:dc:5b:a4:b9:18:9c:a3:40:37:5b:16:1a:
                    07:e5:0d:42:70:50:ee:81:75:7f:1a:ac:08:4f:b6:
                    88:b0:f5:73:fd:be:3b:fc:41:c7:ef:e4:18:1d:28:
                    17:da:90:25:64:26:7f:b1:b8:e9:62:0c:af:be:f1:
                    ad:2c:55:3f:b3:6e:58:dd:29:d1:47:f6:00:ab:47:
                    69:c5:d0:f1:c7:17:a6:6a:35:44:b7:60:27:85:b8:
                    28:45:43:d9:0f:99:bb:96:f7:79:74:a6:39:4d:f9:
                    f7:5a:55:67:19:d0:c8:fb:8a:eb:75:e0:c2:84:fa:
                    30:c5:9e:19:73:f6:b5:1f:6c:b7:a6:f5:a3:cc:a2:
                    b3:73:57:6b:4b:54:02:bb:5e:ba:d4:0b:f9:f4:75:
                    e6:48:4f:be:ea:b3:2a:5d:40:4f:60:f8:0a:65:11:
                    5b:fa:54:8e:1c:93:3b:15:1f:14:df:42:f6:b6:27:
                    97:a6:8e:d4:4b:be:50:5c:20:5f:42:59:b8:e9:8e:
                    d6:7b:f9:02:f8:89:cb:90:d1:73:c0:6e:4d:86:1b:
                    c2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:61:1E:A1:85:B5:A2:D4:FB:A9:FF:A1:FA:FA:07:E0:C5:34:65:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/13bd6417-e631-3548-aedc-388d2a811f6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:a4:9c:a3:a5:a4:19:d6:9e:87:0a:f7:20:79:59:f3:8b:b9:
         6f:1b:ff:ab:43:d5:2d:54:bc:5a:53:cc:b3:64:34:f6:31:a3:
         d8:fb:1d:69:f7:80:9b:12:eb:9e:bc:71:2c:59:37:de:4c:9f:
         da:88:f3:63:66:6d:47:09:7b:1c:6a:79:ed:fe:cd:ce:9c:32:
         03:4c:be:de:ff:bf:26:1f:0d:a2:a2:51:05:29:9b:8d:36:ef:
         54:f3:c3:76:68:55:9c:9e:52:d9:21:d5:87:13:cb:8e:6c:b1:
         a2:9c:9f:e4:7e:e1:42:42:02:5e:2d:d5:4a:9a:b3:b5:7e:af:
         fb:3f:9e:6e:a8:70:71:93:57:be:45:1a:99:27:0d:ef:ae:e6:
         97:0d:32:c8:97:88:2a:ed:63:52:cf:b8:ff:bf:bc:0b:b0:cd:
         8c:b6:c6:e3:62:e0:3e:1c:1a:4e:95:29:a6:a9:18:fd:d7:ef:
         6b:b4:bb:a0:98:4f:4c:f7:5e:be:db:bf:9b:7e:06:cf:37:51:
         cd:58:39:58:7d:69:9f:7c:93:04:13:b3:ca:a9:51:ca:80:52:
         90:c9:0a:18:33:b6:2b:36:41:47:bb:6c:7e:a6:f6:08:8e:2c:
         e6:ef:8e:00:c9:38:b8:cf:93:fe:43:21:50:f2:ea:11:7d:61:
         ff:d1:52:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:05 2024 by rpki-client on console-ams.rpki-client.org