Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2650e404-c694-39ab-b9b2-28198fd950b0.roa
File:                     2650e404-c694-39ab-b9b2-28198fd950b0.roa (raw, json)
Hash identifier:          uneh9FnAKtV0lQnK6YqX3NXrNHU2Pz8tYqJtNowdGkc=
Subject key identifier:   B2:9F:F9:7E:3E:B3:8B:8D:83:51:72:F5:BD:4A:51:05:B1:2F:1A:53
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA0D0F03C658E62DDB2E40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2650e404-c694-39ab-b9b2-28198fd950b0.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100e:bf10::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:0d:0f:03:c6:58:e6:2d:db:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=9a55722b-e28e-4e95-9951-065b87205cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:60:70:7e:e5:0d:f7:5f:ce:a6:94:b0:85:7f:
                    bc:8f:ee:6a:87:ef:a1:64:89:0f:1c:f8:69:51:c6:
                    c2:d1:37:80:82:ec:38:86:71:a6:60:5d:2a:30:8d:
                    b1:69:50:76:ee:74:45:4f:7c:59:60:ff:90:88:1e:
                    42:cc:ed:f5:1d:fe:3d:32:69:0f:bb:8d:a9:95:ac:
                    19:b9:99:58:ee:b9:2f:52:ad:23:31:a0:a0:ac:f6:
                    3b:19:7a:20:4a:6d:c5:74:cf:75:45:f1:0f:5c:df:
                    2b:b2:45:a7:f5:d4:70:8a:c1:91:03:2d:b4:db:47:
                    8e:a1:de:3d:0f:7b:ef:8d:62:ec:6b:cd:e9:b2:18:
                    fd:0b:39:1e:40:f4:24:b4:51:df:bc:8a:9c:21:44:
                    d3:5f:07:d6:ab:e5:c2:ae:79:8f:91:a7:6b:00:83:
                    74:a4:5b:1e:0e:a8:1a:d0:26:25:72:bb:e9:f0:31:
                    a7:c6:c9:53:fc:ed:43:4c:2f:b3:59:3c:71:a4:0d:
                    33:43:e6:1d:f6:d0:31:9f:af:bf:84:eb:4e:d3:ec:
                    1d:4f:f8:f1:61:f4:8f:3c:df:70:c6:94:bf:bb:32:
                    88:68:8d:de:21:7d:f8:65:9e:33:5b:67:62:6f:67:
                    f8:41:ae:a6:87:e9:c6:d8:64:b5:d2:be:48:ee:55:
                    56:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9F:F9:7E:3E:B3:8B:8D:83:51:72:F5:BD:4A:51:05:B1:2F:1A:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2650e404-c694-39ab-b9b2-28198fd950b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:bf10::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ae:5c:a3:6b:3f:ea:25:96:14:ed:f6:de:c7:fc:5a:32:8d:
         fd:13:84:04:b5:ac:6b:d8:84:dc:e0:e8:bc:b8:49:4b:22:f6:
         1c:71:7f:04:b7:44:e9:44:aa:a5:a8:fb:1d:32:c9:fa:28:e0:
         48:94:b6:b0:85:32:ac:d8:e1:30:d1:fa:37:ca:ee:6a:c6:5a:
         4b:d4:1b:fa:24:16:67:43:59:46:68:7e:e0:6c:09:7d:2d:44:
         1b:06:82:b1:59:7c:42:e3:da:fa:fd:8e:ab:ec:f2:4e:c2:40:
         8d:3a:2b:1c:65:10:ee:cf:ad:fc:5a:39:a2:40:d0:0d:02:75:
         05:18:17:7b:f4:35:c9:d6:ed:1c:8e:af:37:57:9c:bb:ff:1c:
         4f:97:91:34:70:ee:c1:88:cd:24:cd:c9:f9:08:78:26:3f:d6:
         20:56:b4:e6:b4:12:93:fe:bb:8a:41:04:1d:87:be:35:84:ae:
         97:5d:5a:e0:6e:20:fb:e9:58:ce:e2:21:76:9c:ed:30:ff:3b:
         b9:c6:b8:79:9b:b0:e9:76:84:94:df:b4:dc:c9:ce:7c:e6:88:
         60:19:a8:0e:51:e8:d2:62:c2:24:d4:00:e4:96:e0:46:ca:0e:
         e7:61:fc:d1:f0:6d:a0:c3:ad:f5:83:ae:d3:94:76:f6:5c:a3:
         ff:ee:5b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:21 2024 by rpki-client on console-fra.rpki-client.org