Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b1a68a7-7618-33c8-9c20-416977329cd8.roa
File:                     2b1a68a7-7618-33c8-9c20-416977329cd8.roa (raw, json)
Hash identifier:          ZfnX3CO9NTP3H0NbdVxvfgNnl77iCQwAO253OfI0hHQ=
Subject key identifier:   69:60:AB:E7:A3:67:AC:96:F7:AE:26:34:C2:10:3A:14:CD:7D:08:37
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D7691E2A069A103B4C5D240
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b1a68a7-7618-33c8-9c20-416977329cd8.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1000:d020::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:91:e2:a0:69:a1:03:b4:c5:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=92d19fd7-1dad-45d0-b6f8-4aaab3ec5216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1d:9d:79:a8:82:b8:af:ad:ed:0e:b8:d5:28:
                    6e:af:c3:15:22:48:af:97:de:5b:d9:6e:e5:d9:4c:
                    3d:58:a4:f9:5d:89:14:db:c9:65:f3:39:83:94:82:
                    0e:3e:de:d3:3e:14:6b:f5:89:ea:26:af:ef:b5:95:
                    42:0d:68:b9:bb:38:08:58:68:bb:6a:35:8f:c0:8e:
                    4f:55:aa:e5:ba:64:2f:80:1b:61:b4:63:52:c5:e7:
                    fa:69:35:16:9b:2f:ea:aa:6a:4d:d5:7c:d2:0d:90:
                    f6:d9:51:62:17:06:a4:95:fa:11:6d:93:ff:ad:96:
                    af:6b:eb:6e:c3:a6:7b:77:29:5f:b3:7c:31:0e:f9:
                    ca:e2:83:b7:a8:3e:cd:eb:70:11:e4:36:11:f1:07:
                    37:98:e5:84:8b:f2:86:04:ca:95:cc:8a:02:0e:b2:
                    81:21:a8:1f:99:bb:6f:b2:20:95:f1:e8:c7:0e:8e:
                    ab:d5:66:91:69:3c:68:75:e0:b9:92:b4:35:ff:cf:
                    92:d5:11:ed:e6:3f:8e:e8:28:68:0e:91:b3:37:14:
                    85:40:14:3a:19:32:c9:ea:e3:94:7e:e5:42:d3:c2:
                    70:a0:6f:ff:16:ba:a4:a1:0d:c1:cb:9c:0a:cb:91:
                    6b:a2:ed:e9:78:3b:40:99:75:07:27:6b:73:a7:01:
                    b7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:60:AB:E7:A3:67:AC:96:F7:AE:26:34:C2:10:3A:14:CD:7D:08:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b1a68a7-7618-33c8-9c20-416977329cd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:d020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:cb:80:dd:86:9b:e5:c4:be:aa:ca:71:da:aa:53:ef:4c:2b:
         01:2b:72:6e:e1:2d:c0:cc:71:09:b9:64:e9:99:95:5b:1f:3d:
         bd:d9:7a:0c:4a:f4:af:1a:a4:29:5e:7e:49:f5:d2:13:1f:dd:
         5d:c7:31:0c:5a:fb:14:7a:08:80:c8:62:c0:0e:4c:f2:fb:66:
         eb:62:18:9e:d2:a8:19:31:f8:13:b7:03:1d:be:54:b2:8e:08:
         9d:a4:4f:a7:f6:c9:de:13:90:11:74:7e:72:72:2d:a1:f3:fe:
         39:ed:ea:b0:79:6c:3e:a7:99:af:46:81:d6:53:34:d1:fc:b8:
         52:17:de:22:c8:7a:bb:43:3d:06:1d:0d:f1:8f:06:3f:4a:ba:
         9d:24:85:82:77:53:35:b2:6a:55:e7:bd:0b:f9:17:e0:20:2e:
         d8:6b:3e:cf:17:3d:f4:d0:70:25:6a:6c:89:a6:9d:cc:15:26:
         5d:ce:b3:22:72:d3:ff:ba:22:2a:a7:e7:d9:46:3c:e8:76:ac:
         ed:3e:5c:68:b3:5f:32:d0:27:a1:73:99:b0:6f:35:fb:ed:6e:
         55:1d:fc:d8:a7:8f:ee:a9:06:a7:e5:9b:05:d8:a7:da:55:d5:
         4f:51:ee:38:13:28:34:ef:2b:3d:19:1c:cd:71:e2:a3:69:30:
         36:12:5c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:12 2024 by rpki-client on console-ams.rpki-client.org