Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1720ba0b-e532-38a4-bd56-a826b3badac7.roa
File:                     1720ba0b-e532-38a4-bd56-a826b3badac7.roa (raw, json)
Hash identifier:          EuoY7rjnDLZEfO+24HDwWqbMaQ7CT0u402oq1/vQhDs=
Subject key identifier:   8A:1B:08:E4:D1:91:61:C0:6A:AB:FB:F8:C4:C8:6D:58:CB:B7:A4:BB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76A561BF0CB2E099F00880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1720ba0b-e532-38a4-bd56-a826b3badac7.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1006:a120::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:a5:61:bf:0c:b2:e0:99:f0:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=ffe6a16c-52da-4e46-af97-9cf0aa09f148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c9:67:75:67:3f:3b:1b:92:9f:b5:a5:68:a0:
                    83:0d:4b:2e:45:ec:07:8e:75:1b:d2:5a:d7:29:03:
                    cb:9f:7b:ba:8d:f7:98:46:a6:fc:5e:b6:20:78:10:
                    89:91:c1:71:52:03:30:7d:39:9a:05:7f:5d:3f:d1:
                    bd:42:b7:2f:d8:4f:ab:58:32:e5:ff:7b:5c:dd:51:
                    4c:1e:d8:f1:f2:a1:48:47:61:1d:a1:7f:f6:6a:3e:
                    f5:28:af:ec:6e:e4:51:8a:66:b5:e1:2d:03:1f:be:
                    32:e6:66:9f:59:6e:e0:a0:21:22:e6:e3:84:45:9c:
                    7b:a9:b2:60:8a:6b:4d:f2:ae:1a:b4:9b:23:e9:2f:
                    0d:f9:73:d5:97:f4:83:1f:e7:81:df:fe:34:e2:6c:
                    c2:b6:ef:a2:63:1b:c6:a1:38:a5:2e:5f:71:32:9e:
                    26:a8:c2:9d:89:8d:96:8d:de:84:ce:5b:39:c8:a1:
                    90:06:01:b0:70:ce:a9:0f:c0:6a:e3:26:9b:f4:99:
                    66:b5:f6:08:63:12:d9:77:6e:80:47:42:32:92:c7:
                    83:44:4b:35:bc:5b:cb:29:10:58:ca:e6:64:22:b2:
                    b3:96:f8:6a:35:4f:f8:a4:af:51:a5:15:cb:5f:e1:
                    62:4f:db:7c:62:f5:f9:d3:11:f2:8f:3f:95:de:e1:
                    bd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1B:08:E4:D1:91:61:C0:6A:AB:FB:F8:C4:C8:6D:58:CB:B7:A4:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1720ba0b-e532-38a4-bd56-a826b3badac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:a120::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:5d:88:e9:4f:0b:f6:df:2e:ec:26:40:90:d8:79:98:07:0b:
         b5:d8:a2:22:a9:fd:a4:40:82:79:b0:b0:9c:8b:45:b8:f7:04:
         d4:8f:bb:80:a4:a0:45:6b:8f:73:ff:f3:60:ff:1a:df:23:b4:
         52:2d:61:b5:16:b3:35:96:2f:93:2b:68:18:fe:3b:cd:89:9f:
         37:fc:2c:f2:1e:21:67:21:95:cb:eb:58:38:38:aa:63:e7:97:
         31:50:51:bd:42:a2:b7:3d:31:4a:b4:38:f3:96:36:94:61:81:
         ed:ed:a8:54:e3:6b:90:74:1e:3a:91:0a:0a:1e:e4:0f:94:7a:
         53:e2:34:0f:bc:fa:4e:7f:f4:35:c3:d9:ed:06:3e:6d:d3:ac:
         f2:83:79:86:ac:18:f6:33:42:9e:98:63:88:f1:70:9f:a6:a4:
         e5:fd:ef:c8:9a:9c:81:a3:2d:fb:fe:1c:db:e8:22:72:a4:be:
         69:e4:4b:9b:74:9a:1e:4c:7e:58:fd:38:65:89:0a:bd:5e:27:
         e5:00:4e:7a:32:26:0b:35:3b:94:c1:ba:3a:d3:0c:83:8c:bb:
         93:cf:db:ef:28:78:42:d0:33:41:f3:d2:1c:8c:b4:79:e8:f2:
         45:08:64:23:15:d4:9e:1d:51:9c:fa:3f:4e:27:66:60:f4:1c:
         7b:7c:0a:de
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeddqVhvwyy4JnwCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
ZmZlNmExNmMtNTJkYS00ZTQ2LWFmOTctOWNmMGFhMDlmMTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApslndWc/OxuSn7WlaKCDDUsuRewHjnUb0lrX
KQPLn3u6jfeYRqb8XrYgeBCJkcFxUgMwfTmaBX9dP9G9Qrcv2E+rWDLl/3tc3VFM
Htjx8qFIR2EdoX/2aj71KK/sbuRRima14S0DH74y5mafWW7goCEi5uOERZx7qbJg
imtN8q4atJsj6S8N+XPVl/SDH+eB3/404mzCtu+iYxvGoTilLl9xMp4mqMKdiY2W
jd6Ezls5yKGQBgGwcM6pD8Bq4yab9JlmtfYIYxLZd26AR0IykseDREs1vFvLKRBY
yuZkIrKzlvhqNU/4pK9RpRXLX+FiT9t8YvX50xHyjz+V3uG9tQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIobCOTRkWHAaqv7+MTIbVjLt6S7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTcyMGJhMGItZTUzMi0z
OGE0LWJkNTYtYTgyNmIzYmFkYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQBqEg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJddiOlPC/bfLuwmQJDYeZgHC7XYoiKp/aRAgnmwsJyLRbj3BNSP
u4CkoEVrj3P/82D/Gt8jtFItYbUWszWWL5MraBj+O82Jnzf8LPIeIWchlcvrWDg4
qmPnlzFQUb1Corc9MUq0OPOWNpRhge3tqFTja5B0HjqRCgoe5A+UelPiNA+8+k5/
9DXD2e0GPm3TrPKDeYasGPYzQp6YY4jxcJ+mpOX978ianIGjLfv+HNvoInKkvmnk
S5t0mh5Mflj9OGWJCr1eJ+UATnoyJgs1O5TBujrTDIOMu5PP2+8oeELQM0Hz0hyM
tHno8kUIZCMV1J4dUZz6P04nZmD0HHt8Ct4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:18 2024 by rpki-client on console-fra.rpki-client.org