Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3eb61daa-066e-3ff4-a9ad-0b4e78c44f0e.roa
File:                     3eb61daa-066e-3ff4-a9ad-0b4e78c44f0e.roa (raw, json)
Hash identifier:          WJ2Id94zO7tN04//V5vjQtMEwOHCcSe6uJQomGsOuYc=
Subject key identifier:   25:51:33:27:2D:0B:83:68:72:E8:21:48:EB:74:DA:39:26:7A:26:70
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D643D819D661F85C12FD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3eb61daa-066e-3ff4-a9ad-0b4e78c44f0e.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     22394
IP address blocks:        2001:4888:8012::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:43:d8:19:d6:61:f8:5c:12:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=6138f754-9146-4d0a-a1fa-1becf887130f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a8:41:08:43:06:87:a1:7e:59:93:c8:5b:b2:
                    0b:ab:db:7b:6d:a9:55:86:77:20:2c:da:b0:8c:e2:
                    64:fc:d4:ac:1e:c2:0b:0e:d6:d4:dc:e2:cb:95:06:
                    9e:d2:0b:c3:43:8a:31:b9:c3:f6:8b:1f:e2:02:39:
                    e2:d3:ea:f8:09:9c:bf:e3:3a:fe:07:16:c2:72:3f:
                    85:77:fe:ac:40:a3:aa:e7:71:7c:2c:d1:dc:6f:b3:
                    74:2c:26:72:d0:d8:fc:e7:87:a5:6c:96:26:ad:a4:
                    e8:0f:29:6a:74:ab:aa:0e:5b:45:54:25:3e:13:50:
                    b0:6d:89:53:58:37:6a:03:af:71:30:6f:75:28:3d:
                    db:59:33:3f:da:66:c7:00:26:6c:33:3e:a7:16:72:
                    3d:f7:e2:45:be:aa:33:78:ff:58:75:4a:26:d1:49:
                    1d:de:c4:22:71:db:43:b2:f5:f4:c8:36:86:42:97:
                    3d:da:05:77:a6:37:73:b4:4f:b1:25:fd:3c:f9:31:
                    cc:22:17:21:63:c6:1f:4f:e7:6b:56:ba:49:66:57:
                    31:df:f6:1d:e5:b6:ee:bd:40:2b:7a:24:73:5c:0d:
                    bb:d1:40:86:bc:8b:fa:42:35:23:e0:ff:f9:bc:71:
                    b0:16:0d:f6:e1:c3:f2:92:f9:df:0f:c5:2f:23:27:
                    da:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:51:33:27:2D:0B:83:68:72:E8:21:48:EB:74:DA:39:26:7A:26:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3eb61daa-066e-3ff4-a9ad-0b4e78c44f0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8012::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:b8:93:f2:bf:6d:85:d8:95:bf:5e:91:f5:1e:ea:7e:92:a5:
         92:bb:18:09:49:9a:15:ce:fd:88:d6:b5:ae:08:3f:e7:09:05:
         3e:0d:2f:5b:ee:bb:e0:b8:ae:48:2b:14:4e:e8:0d:0f:91:59:
         f6:89:d7:96:96:66:95:64:29:4d:76:a9:1f:1b:37:5e:13:c0:
         e1:cc:f7:0b:83:f7:cc:82:d4:95:b7:24:d1:43:db:3c:bf:80:
         ff:80:0d:32:b3:c5:a2:83:9f:cd:8e:a8:d2:38:c9:75:e6:49:
         ad:08:e8:85:ff:a9:dc:5e:f8:90:e1:d8:83:09:53:91:8d:41:
         a2:aa:28:37:9d:04:d4:5c:04:63:45:bd:8d:35:3e:32:ee:d0:
         05:ae:03:fb:e6:71:17:ba:64:71:8c:d1:a6:d9:6c:7e:c8:93:
         a4:c1:7d:1c:27:66:7b:49:3b:22:5c:f3:05:a6:0e:1c:82:4b:
         c7:6d:af:e8:ef:7b:64:ac:f2:ee:c7:c7:f8:af:6d:0d:34:0c:
         a1:4a:08:df:33:c6:98:7e:a4:e8:df:89:fc:d0:6b:4d:94:ec:
         25:c4:37:76:f4:db:62:fb:d8:30:76:7a:c5:14:3c:92:ca:bb:
         97:95:ad:32:df:c2:76:e7:f9:45:fd:ee:72:3e:b7:90:37:af:
         2e:f0:2a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:26 2024 by rpki-client on console-fra.rpki-client.org