Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bac7482-a473-3cec-a04e-60eba21eeb9f.roa
File:                     2bac7482-a473-3cec-a04e-60eba21eeb9f.roa (raw, json)
Hash identifier:          FgEZZhxwW0jcE4a6rNjtFPqj+GrZpj7AvvwTsBKanow=
Subject key identifier:   44:81:DA:31:D5:7B:45:AE:35:60:65:FA:61:3A:C4:27:1E:24:9E:50
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBE9FC8585EF19EE2A1100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bac7482-a473-3cec-a04e-60eba21eeb9f.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1016:b150::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:e9:fc:85:85:ef:19:ee:2a:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=0ea3ff83-a0a2-486b-9d67-b400e4f0960d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8b:b1:81:6e:9b:e1:ff:2d:90:24:de:2d:77:
                    0c:87:21:04:41:9d:72:fc:b9:fd:e9:30:09:af:90:
                    a5:68:a9:80:6f:e0:e6:9b:ed:16:3e:d7:08:80:37:
                    db:35:62:db:fe:09:63:ee:92:3c:22:e6:fe:c4:00:
                    b6:05:5f:39:e8:0a:cc:b0:76:72:12:06:e7:f7:39:
                    e6:4f:60:ce:c5:98:13:f0:05:e2:3b:6f:56:02:4b:
                    6e:92:16:60:ee:b9:2e:ac:2f:87:4e:6c:19:c1:1d:
                    f1:96:48:75:50:b3:d1:8b:27:bf:71:cd:67:ea:40:
                    35:a6:69:96:e6:1e:d0:93:fa:26:df:83:12:e7:90:
                    f6:7d:1d:5d:54:1c:23:67:84:2f:c2:da:6d:01:12:
                    02:88:9f:73:06:62:12:00:b6:4a:5d:51:ad:f9:4a:
                    63:3d:fb:9c:07:90:d9:8f:f6:c4:ff:02:7f:5b:e3:
                    44:d3:8b:b2:a7:02:65:24:b5:fa:b5:62:85:1e:ea:
                    37:f4:48:1f:20:45:da:09:67:a4:3e:f6:a6:ad:37:
                    f2:0a:c9:4d:fb:a7:ea:73:9f:3d:42:90:e7:23:e0:
                    ba:64:00:63:5f:23:89:9a:cf:09:3e:ea:0e:b9:2c:
                    f3:0d:53:ff:3c:57:77:39:e9:46:99:90:4e:bf:70:
                    50:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:81:DA:31:D5:7B:45:AE:35:60:65:FA:61:3A:C4:27:1E:24:9E:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bac7482-a473-3cec-a04e-60eba21eeb9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:b150::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:97:cd:7b:76:20:39:b8:ae:8e:4d:d8:b3:53:bb:83:62:21:
         59:29:95:67:a8:9b:74:0b:8a:00:a9:65:ab:21:7f:5d:e0:e8:
         38:a2:f4:30:6a:d4:58:0c:20:a5:0a:fd:05:32:7b:07:d0:d3:
         c2:90:7d:aa:7d:ab:a9:90:e6:8d:7e:55:d5:be:5c:6e:e9:cd:
         0b:13:b5:af:cc:df:39:d2:2c:ba:b0:c3:18:fb:dc:8b:b3:a4:
         db:db:bf:13:43:80:2e:dd:9b:72:4d:8d:09:0f:4c:1c:53:e1:
         04:cb:1e:a8:5e:55:d0:76:91:37:0f:f9:32:1c:dd:be:72:1f:
         a4:e0:5e:bb:0f:d4:f8:b3:58:9c:4c:eb:52:64:7c:73:12:13:
         a3:3b:5a:f4:51:0a:b7:a0:28:5c:30:12:3f:cb:0b:91:9b:8d:
         34:74:39:03:d5:51:6b:ab:16:92:31:95:1d:96:53:1f:50:b0:
         2e:1e:84:80:0e:d4:bd:da:ec:80:d5:57:80:15:96:c9:90:e2:
         f2:2f:54:e6:10:f6:40:73:61:5b:81:84:77:28:1f:a9:e0:5c:
         81:86:97:05:be:6c:f9:27:c8:7c:c7:89:eb:22:3d:e8:a7:4b:
         cc:00:13:90:00:23:ce:4e:fb:0e:b5:f2:10:c6:55:1b:d1:00:
         2d:fb:08:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:13 2024 by rpki-client on console-ams.rpki-client.org