Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/374e5ed4-5bc1-33be-a2ed-13296a2b3875.roa
File:                     374e5ed4-5bc1-33be-a2ed-13296a2b3875.roa (raw, json)
Hash identifier:          5dCZCDan/gECvv2K1wMYs1p1bu/X5TjNhjXY5DvpCV0=
Subject key identifier:   35:D9:E3:90:7B:CC:AA:AD:3C:1B:0C:FC:E6:B6:FC:45:26:32:26:AB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBD9A1D94036005FA31440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/374e5ed4-5bc1-33be-a2ed-13296a2b3875.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1011:a110::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:d9:a1:d9:40:36:00:5f:a3:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=1d99a6bc-e54c-4ac1-b548-db3064514efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:e5:51:a4:73:68:7b:55:ae:09:dd:20:38:
                    55:5f:4a:18:3f:d8:a2:46:03:cc:71:ef:19:63:f8:
                    fa:09:70:d4:06:86:3f:b6:be:bd:c6:7c:e7:c4:7f:
                    cb:c1:6c:52:19:ea:78:c8:0a:58:7c:4d:eb:e3:ca:
                    a4:8a:4a:84:6b:c3:82:78:84:af:62:43:b2:ae:2a:
                    bd:b1:55:e5:a6:4b:a2:ad:05:68:f8:de:fa:a8:a8:
                    6b:b3:fc:bd:fd:2c:d4:2e:99:a6:01:b7:cd:32:1c:
                    93:a5:06:95:09:c2:d0:51:0e:4d:e9:cd:cf:b4:63:
                    2c:0d:05:95:51:90:07:cc:3e:0b:80:6c:72:f2:e2:
                    08:27:f0:51:6c:d5:16:ef:9c:b4:ea:b1:30:1e:d3:
                    99:d9:87:52:a1:ad:b7:cc:96:85:69:eb:cb:7a:ec:
                    f5:29:26:82:b6:d0:27:48:75:b7:2c:2a:9d:b4:e6:
                    1d:2c:9a:74:6f:51:5a:15:2d:c9:61:96:ba:b7:f3:
                    57:c8:eb:60:a2:fc:72:94:61:93:f5:66:b5:a6:c0:
                    1c:cb:f1:3b:b4:72:d4:e0:ce:b9:bb:67:29:0a:1a:
                    d3:06:87:fa:55:d5:c4:f1:be:9d:5d:27:68:47:7f:
                    b3:98:48:d1:af:f0:0d:cc:d0:25:65:ee:3b:65:d2:
                    d8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D9:E3:90:7B:CC:AA:AD:3C:1B:0C:FC:E6:B6:FC:45:26:32:26:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/374e5ed4-5bc1-33be-a2ed-13296a2b3875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:a110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:56:c0:fc:17:84:23:da:2d:8c:96:d3:7f:83:d5:cc:a4:02:
         13:d8:f2:99:c6:9c:2d:7e:af:50:c0:a4:cb:25:69:1b:fb:41:
         5e:5c:e8:e9:42:48:5e:8d:89:cd:b8:11:0f:ac:6f:5b:44:ff:
         a9:b6:30:fa:58:57:11:d2:07:4b:6f:de:f9:d1:1f:89:6d:54:
         fb:e3:de:4a:0c:7a:3d:21:e0:7c:23:1e:47:58:c7:a7:ab:7c:
         07:fc:9f:9c:02:7f:b9:c0:b6:0e:e2:00:45:ad:54:c0:6d:fa:
         c6:07:d5:5d:17:78:85:fa:aa:c8:68:51:90:ba:43:81:d1:a6:
         5e:dd:35:91:29:d2:ad:43:e9:db:1a:88:d4:24:a8:fe:2a:5e:
         9a:77:6d:b5:a1:39:8e:1f:01:66:a1:1d:ac:7a:9f:bb:82:19:
         c1:19:02:3e:22:db:4f:6a:6a:7f:f9:a7:49:21:1a:fa:3a:52:
         f7:e9:f2:ad:76:1d:65:1b:6a:ed:80:81:97:94:ee:e5:33:40:
         46:ff:78:48:23:59:76:46:e5:fb:7f:eb:f5:70:13:ff:a6:52:
         7f:f8:a7:69:3c:76:ea:f4:16:74:62:73:76:47:08:08:c0:e8:
         c1:3f:9e:9b:fe:1c:59:b9:cd:32:7b:f5:fb:33:cf:5d:8c:a4:
         c5:9c:97:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:25 2024 by rpki-client on console-fra.rpki-client.org