Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/341c4026-b621-3967-b82c-79af6c49b476.roa
File:                     341c4026-b621-3967-b82c-79af6c49b476.roa (raw, json)
Hash identifier:          UaCIebkS10I3z3gpSOwU16tA+ZkQwJq/79+9Kyv8FLE=
Subject key identifier:   20:AD:87:D4:BD:34:E9:84:AA:35:1E:F7:D2:37:B1:8F:C3:46:6E:8F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBEAAC2513A3D60A655180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/341c4026-b621-3967-b82c-79af6c49b476.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1017:a100::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:ea:ac:25:13:a3:d6:0a:65:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=77bf7d82-7a50-47c8-825e-58850c865d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e0:e6:43:a8:4d:f4:1d:d1:68:63:92:7e:9c:
                    f1:67:c4:6c:6b:46:d0:1c:f2:3b:e0:f9:d4:b3:a4:
                    08:67:71:48:33:e1:68:91:b7:c7:2c:20:a5:4b:7e:
                    52:7e:3d:51:a8:bd:7e:37:38:04:af:ee:48:86:39:
                    ec:94:ab:7f:31:75:d8:ae:db:85:b2:e2:f4:a7:a6:
                    a4:95:d2:51:d6:a8:f3:ae:91:37:67:0b:7b:c9:0f:
                    ba:7b:b6:da:1d:c2:a0:84:d7:00:d9:12:6a:54:8f:
                    18:d8:01:3d:8e:b9:b9:d2:6e:f7:57:ee:d9:a5:71:
                    4f:34:d4:81:94:ef:19:54:7e:7f:d3:f7:c0:fa:9f:
                    a4:83:66:1a:6c:05:ad:2a:62:c9:f8:b1:8d:98:0a:
                    a0:77:ef:c0:a9:b2:46:7e:14:27:81:13:04:5b:0a:
                    1d:71:fa:8b:91:97:a9:fc:71:6d:8e:e2:84:a8:12:
                    92:de:d8:94:90:25:61:72:ea:7b:4f:a7:de:81:ce:
                    79:77:d1:02:2d:5a:59:ea:fe:29:52:83:de:71:2b:
                    7c:88:3a:ae:75:1c:19:ad:26:d9:01:dd:89:63:45:
                    1c:a0:31:64:fb:89:1b:bd:58:d3:79:95:80:44:ce:
                    72:2e:7c:db:93:d4:6c:ea:a0:d0:43:54:9f:3d:94:
                    c0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AD:87:D4:BD:34:E9:84:AA:35:1E:F7:D2:37:B1:8F:C3:46:6E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/341c4026-b621-3967-b82c-79af6c49b476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:a100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:04:e7:a4:23:ab:75:a4:f0:b1:25:8c:fd:b0:b6:82:53:13:
         a3:59:60:49:8b:2e:49:28:93:87:66:19:0f:54:a5:c5:31:b9:
         eb:91:d1:e7:b7:9d:52:73:14:17:4d:81:2e:d0:07:a8:bb:89:
         58:db:b7:fe:01:d0:25:39:65:d5:59:6f:4a:b8:2d:c9:23:08:
         6a:6d:4a:82:fd:72:6c:85:bf:5c:01:fb:48:83:2f:79:e7:d0:
         2a:e9:13:8a:e0:a2:d3:cd:9b:fb:08:b5:63:9c:bc:c3:8c:a7:
         72:93:2c:4e:ba:04:32:65:5c:5e:a6:74:ce:d8:70:ff:ea:4e:
         c8:4b:4b:7b:07:77:27:8d:b4:3c:a3:d4:f6:21:c4:cc:47:98:
         46:83:a6:ee:9a:cb:0b:ba:14:14:95:80:c6:d2:18:2f:ad:76:
         2e:42:d9:30:76:09:cc:ff:01:af:20:12:68:c3:a5:a5:c4:3e:
         08:26:db:64:d1:5d:c3:e1:0e:ff:e4:29:01:27:a8:c5:1d:c5:
         32:43:65:85:0d:65:91:63:3a:90:60:e5:26:7b:be:06:ed:4e:
         25:e9:fe:2d:af:de:5c:6b:29:59:11:28:a5:e7:49:a9:b2:ad:
         61:7a:b3:cc:c4:32:9c:24:5d:bd:68:ee:15:65:52:40:81:21:
         38:e1:bd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:37 2024 by rpki-client on console-fra.rpki-client.org