Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f4500e2-83a6-332d-adb5-40617a188d4e.roa
File:                     3f4500e2-83a6-332d-adb5-40617a188d4e.roa (raw, json)
Hash identifier:          fDxeU5L86tVXjUUjZZ+4jB8qivQkJfnKv85OpINl+I4=
Subject key identifier:   69:CF:54:50:EB:68:14:B1:93:7E:39:DE:50:73:31:6D:AC:29:B6:64
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBE71AB9E202A5E9CA9C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f4500e2-83a6-332d-adb5-40617a188d4e.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1015:b1c0::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:e7:1a:b9:e2:02:a5:e9:ca:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=6e6dbe6a-720a-427a-b2bd-65b6725d3c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:14:d5:f0:6d:3f:5c:b0:d9:3b:ce:00:a4:
                    17:83:48:1c:8a:29:d0:06:21:6d:7b:55:2e:37:75:
                    57:7b:0b:11:c6:6f:b7:d5:97:61:c3:c8:5d:c9:d2:
                    16:a7:c0:87:45:03:46:f4:2d:0f:07:b7:41:4e:a6:
                    05:0b:8d:56:1a:b6:1b:9e:52:68:56:e8:77:36:96:
                    1f:d2:fb:a7:64:92:4f:e0:26:f5:51:47:9d:17:b6:
                    a5:61:66:f4:d9:fe:06:84:34:05:11:59:e7:c2:f6:
                    06:6d:14:d2:a7:13:20:b3:83:69:b5:73:07:8c:16:
                    c2:33:d8:4b:4f:c3:c8:63:5e:7e:99:b8:85:2d:78:
                    9c:a1:d7:ba:4d:82:56:12:45:3a:21:29:73:b9:03:
                    22:a7:33:28:32:77:e1:aa:f0:a6:01:f1:2c:40:9c:
                    56:d0:52:8e:e6:3a:f4:f4:0f:59:f2:31:79:f5:82:
                    41:83:79:ef:ab:4b:8f:30:49:82:5d:dd:45:b3:1e:
                    5d:68:1a:bd:c3:78:e2:da:3a:30:ae:f0:c1:c4:57:
                    88:df:dc:5d:cd:27:95:0c:60:79:b4:5d:dc:37:cb:
                    89:df:c9:12:69:ca:59:ef:37:dd:d5:03:28:06:cd:
                    10:0b:10:87:bc:bc:e0:b5:48:ed:ee:78:5b:f2:ee:
                    65:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CF:54:50:EB:68:14:B1:93:7E:39:DE:50:73:31:6D:AC:29:B6:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f4500e2-83a6-332d-adb5-40617a188d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:b1c0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:9e:f5:45:bd:e7:16:2c:91:bf:e7:b7:9f:41:63:a7:dc:02:
         90:33:0b:f8:e0:b7:1a:34:ad:3c:9f:70:98:c5:62:ef:76:b4:
         c9:61:dc:16:25:5d:61:b7:3b:6d:62:92:1e:3b:51:a9:31:aa:
         27:76:bb:8d:43:a1:56:63:3e:99:e0:02:3f:95:cd:cb:9e:b6:
         4e:28:c0:b3:0a:28:a3:7d:53:f1:18:31:b8:11:68:9a:cc:32:
         1e:ae:f4:cf:a1:31:1f:68:7f:a9:c2:07:1f:d5:96:eb:cc:8b:
         ec:7c:fd:46:54:d2:da:c0:20:56:2d:42:d7:f5:17:35:5a:6a:
         4e:bf:80:85:f4:31:5f:63:59:bc:8c:8f:ae:c0:e9:21:a6:34:
         8b:1c:33:fd:1c:d7:ac:68:db:f8:f4:6e:3f:64:1d:27:5a:6d:
         98:55:90:a6:27:c5:c7:a3:4c:f7:2f:cf:90:bf:af:4f:c2:a5:
         f0:b9:d0:bf:0f:bb:89:be:df:da:9b:37:51:71:5c:b8:1b:89:
         e8:d3:0c:a8:a6:18:81:26:75:a1:8a:a7:fd:85:f1:10:12:d7:
         af:e5:a5:54:f5:cf:95:17:1d:4c:22:c9:e6:19:1c:d9:ba:af:
         4c:63:ae:b5:30:64:3c:ef:df:4c:f6:24:4e:69:30:42:10:73:
         ce:1f:ff:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:41 2024 by rpki-client on console-fra.rpki-client.org