Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa82f97-aa82-3df0-ae11-71b9a7f25673.roa
File:                     3fa82f97-aa82-3df0-ae11-71b9a7f25673.roa (raw, json)
Hash identifier:          BiflufbJ7oB3tiyGDfI9YZPj22XxlpPn7thKK7BCEgc=
Subject key identifier:   58:5A:D8:E7:51:27:24:F2:79:A5:49:6F:27:1C:41:B7:B1:60:C5:B1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D768BFB3CB897015F347F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa82f97-aa82-3df0-ae11-71b9a7f25673.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1000:9e00::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:8b:fb:3c:b8:97:01:5f:34:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=41d3ed66-a00d-47de-9282-551f6fa9e312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:80:0b:51:05:3a:f4:a9:47:b2:62:74:7d:e9:
                    7d:2f:ce:8a:2e:77:60:4c:40:15:b0:84:a4:0c:a0:
                    e7:bf:8b:92:8b:4a:ca:3a:69:5d:4d:de:a0:a9:35:
                    95:3c:f8:60:35:40:d2:64:95:c0:58:f9:f6:93:2e:
                    bc:32:ab:d2:47:aa:b5:93:c5:76:2c:bf:5a:61:b8:
                    2d:9a:e7:bc:43:25:fc:e8:69:a7:36:38:9f:78:ed:
                    cd:b4:ca:31:6f:03:8f:b5:d5:ef:2b:f9:8c:ef:05:
                    f3:37:65:e6:b5:aa:38:24:89:f8:7c:01:f7:8e:2f:
                    aa:43:bc:bd:02:77:36:d5:4d:ae:59:5c:3f:5f:c0:
                    76:ef:1e:27:1b:79:ff:e4:3c:e9:31:76:2a:b6:96:
                    0f:d5:48:51:92:da:6f:66:dd:ae:6b:43:0b:8a:33:
                    22:fb:47:fb:ec:90:bd:c8:02:12:0d:4a:a4:fb:fa:
                    1e:a1:6b:68:05:e5:11:98:db:10:52:e4:ad:91:44:
                    df:47:32:97:5f:a3:df:03:02:dc:90:5f:17:aa:08:
                    2f:20:15:6c:27:a6:60:4c:96:cd:20:95:9f:c2:f8:
                    8f:e4:35:0a:99:8d:be:1e:42:d8:5b:ed:a2:51:c9:
                    59:8b:40:a2:4b:ff:2e:c7:a6:06:86:84:d4:16:36:
                    a7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5A:D8:E7:51:27:24:F2:79:A5:49:6F:27:1C:41:B7:B1:60:C5:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa82f97-aa82-3df0-ae11-71b9a7f25673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:9e00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:99:6c:79:6c:2e:fa:60:74:c8:8a:8f:44:bf:3a:d0:7f:96:
         49:76:91:4e:2e:8b:b0:50:59:61:4e:5c:05:57:59:e4:37:7b:
         56:25:8d:c9:61:a8:c3:ba:db:2c:f3:2c:62:34:ec:8b:56:cb:
         91:1f:bb:76:bd:99:c2:ac:f8:68:cd:d2:d1:6a:ab:de:4a:18:
         03:9c:40:50:5a:e7:a0:c0:0b:78:ce:74:ff:de:13:41:14:e8:
         ae:e4:54:f4:42:89:9d:0f:49:88:32:41:3e:f2:1d:8c:49:3c:
         4b:0f:fc:43:c7:b3:39:1c:f5:00:48:f9:50:a2:7d:98:18:0f:
         11:4b:67:b3:d9:42:c9:a2:5a:01:71:71:62:2a:ae:18:79:ef:
         eb:3c:2c:01:34:14:32:6b:13:91:9e:c0:36:b9:72:9e:1f:cc:
         da:6d:b7:c1:66:8c:fb:07:26:a0:92:12:a8:19:b3:6a:e4:02:
         ca:e0:51:d5:27:09:72:2f:45:21:50:0c:04:b2:9e:34:73:45:
         5d:1f:e2:c3:20:52:89:e8:31:c1:0c:9a:c5:22:93:8e:4a:a5:
         a1:c5:f2:02:d6:2b:63:27:5a:d5:fa:85:65:f9:b5:20:d4:4b:
         0d:5c:d9:29:2a:23:0b:d8:85:04:02:55:a9:bf:8f:7b:d6:f8:
         7b:13:1d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:26 2024 by rpki-client on console-fra.rpki-client.org