Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2be3e4a1-ea46-345c-a23f-ae36d1a42184.roa
File:                     2be3e4a1-ea46-345c-a23f-ae36d1a42184.roa (raw, json)
Hash identifier:          vDOI6gBlhRtBdU9cRNizBy7RNVUXafhfc6EO3zb0MSo=
Subject key identifier:   B7:3D:56:F6:3E:19:D3:6E:E6:51:FA:2C:C7:83:D1:33:89:26:FC:FA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBE8068A9689B5614C8E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2be3e4a1-ea46-345c-a23f-ae36d1a42184.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1015:d010::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:e8:06:8a:96:89:b5:61:4c:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=046c46fd-f637-461a-9d30-4d74103c6481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:90:b2:cb:a1:2d:6a:44:bd:d8:89:11:15:0f:
                    1f:9a:9b:f1:9d:08:70:af:a5:f9:e8:bc:b3:4e:9a:
                    f5:c1:07:04:cc:e0:62:9d:16:bc:63:7a:d4:f2:f7:
                    ee:21:bc:d7:ca:72:75:03:b9:d6:8b:72:b9:e3:69:
                    bd:73:bf:9e:ee:8d:69:71:17:9b:a4:82:c0:93:cd:
                    0b:38:2b:f4:ec:3b:67:a0:58:f6:e1:f9:6d:c7:f8:
                    6b:0d:0f:56:86:1a:0e:87:96:7c:4e:ce:4d:d2:83:
                    ee:4d:7e:d7:29:67:dc:57:71:f7:7f:e8:0e:57:74:
                    b1:c6:96:5c:85:eb:83:a9:69:d9:2f:be:98:4a:9a:
                    0c:8a:3e:d7:41:5f:27:4d:0d:1a:5f:a1:18:23:4f:
                    25:7e:45:7b:4f:44:89:51:5e:cd:89:24:18:2d:23:
                    5d:e6:3c:6b:37:c0:d9:0d:49:5d:cb:e7:e2:8c:1d:
                    ac:c2:5c:d6:ff:2f:6a:05:6b:e3:8a:a7:0c:19:71:
                    fd:66:9f:0f:e6:ac:46:0e:24:5b:57:34:e8:cf:3c:
                    b6:ab:3c:e8:94:e2:e8:ba:45:e9:f3:8a:1d:44:3b:
                    78:6c:81:93:7f:44:e6:f8:f9:54:85:b2:82:b7:55:
                    d0:1d:9c:bf:06:e8:64:93:1a:af:b9:cb:7e:dd:c4:
                    aa:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3D:56:F6:3E:19:D3:6E:E6:51:FA:2C:C7:83:D1:33:89:26:FC:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2be3e4a1-ea46-345c-a23f-ae36d1a42184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:d010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0b:b4:49:a2:cb:64:2b:d4:2d:f8:e0:b3:18:97:6e:3e:6f:
         6e:78:09:f0:60:8c:26:c4:11:0e:11:15:86:c5:d5:44:62:9d:
         cb:1c:1f:cc:ba:b3:c0:55:64:c3:d6:5c:d2:ab:0b:b7:bf:36:
         32:87:68:02:88:f7:21:1f:1d:a4:99:3d:3f:6e:c5:97:de:0c:
         65:e5:6c:f0:e3:c9:e9:2d:61:0f:5a:5e:2c:d7:eb:89:92:3f:
         08:56:8a:51:fe:16:83:3c:ed:c6:48:30:78:85:a8:f5:ff:3e:
         c8:54:64:83:37:f1:bc:65:33:11:58:6c:fa:3a:45:4f:f0:07:
         09:e2:31:80:e8:b3:f6:5a:0e:ea:36:a6:13:12:cf:2c:03:43:
         61:b9:6c:82:97:24:f5:11:73:70:b8:a2:e4:43:52:5a:a1:33:
         a2:2c:2e:7e:49:d3:bf:60:85:63:35:2b:b0:19:61:b2:f3:89:
         71:d5:b6:a4:3c:56:b1:7d:54:e9:1f:75:a9:dc:6a:39:6c:0a:
         b2:9e:64:16:ae:40:4b:25:90:ea:e2:4d:74:94:5a:f0:f5:61:
         a8:cd:b1:dd:77:46:26:cb:18:b6:02:2b:36:68:a7:49:3f:25:
         f3:12:62:04:98:25:34:69:43:8e:71:d5:00:8f:18:ec:a8:74:
         0e:a6:55:27
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeJ6+gGipaJtWFMjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAxNDEzMDA0N1oXDTI1MDExMjE0MDA0N1owLzEtMCsGA1UEAxMk
MDQ2YzQ2ZmQtZjYzNy00NjFhLTlkMzAtNGQ3NDEwM2M2NDgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5Cyy6EtakS92IkRFQ8fmpvxnQhwr6X56Lyz
Tpr1wQcEzOBinRa8Y3rU8vfuIbzXynJ1A7nWi3K542m9c7+e7o1pcRebpILAk80L
OCv07DtnoFj24fltx/hrDQ9WhhoOh5Z8Ts5N0oPuTX7XKWfcV3H3f+gOV3SxxpZc
heuDqWnZL76YSpoMij7XQV8nTQ0aX6EYI08lfkV7T0SJUV7NiSQYLSNd5jxrN8DZ
DUldy+fijB2swlzW/y9qBWvjiqcMGXH9Zp8P5qxGDiRbVzTozzy2qzzolOLoukXp
84odRDt4bIGTf0Tm+PlUhbKCt1XQHZy/Buhkkxqvuct+3cSquwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLc9VvY+GdNu5lH6LMeD0TOJJvz6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmJlM2U0YTEtZWE0Ni0z
NDVjLWEyM2YtYWUzNmQxYTQyMTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQFdAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGYLtEmiy2Qr1C344LMYl24+b254CfBgjCbEEQ4RFYbF1URincsc
H8y6s8BVZMPWXNKrC7e/NjKHaAKI9yEfHaSZPT9uxZfeDGXlbPDjyektYQ9aXizX
64mSPwhWilH+FoM87cZIMHiFqPX/PshUZIM38bxlMxFYbPo6RU/wBwniMYDos/Za
Duo2phMSzywDQ2G5bIKXJPURc3C4ouRDUlqhM6IsLn5J079ghWM1K7AZYbLziXHV
tqQ8VrF9VOkfdancajlsCrKeZBauQEslkOriTXSUWvD1YajNsd13RibLGLYCKzZo
p0k/JfMSYgSYJTRpQ45x1QCPGOyodA6mVSc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:22 2024 by rpki-client on console-fra.rpki-client.org