Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/491caa9d-4be9-3100-8fa5-154bc64fb2c1.roa
File:                     491caa9d-4be9-3100-8fa5-154bc64fb2c1.roa (raw, json)
Hash identifier:          ni9NQBrFFWySYcabLV6N/KyxR61Jy++5pGKpfFu0CYk=
Subject key identifier:   B2:06:08:E6:BA:F3:20:30:FF:04:63:A7:5E:5E:FE:2A:BD:FB:9D:01
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA0B283CDF1A66ABC4BC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/491caa9d-4be9-3100-8fa5-154bc64fb2c1.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100e:b150::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:0b:28:3c:df:1a:66:ab:c4:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=64b1835c-51a8-49a8-81fb-f54fe56f68bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b1:d9:e0:97:14:8c:f6:87:a4:2f:f2:66:7a:
                    f4:38:2a:32:d8:c5:e8:7e:1c:b4:9f:cd:15:9b:52:
                    a6:99:ef:10:b3:14:d6:e1:59:95:51:33:76:32:a1:
                    0c:c3:da:84:74:57:03:93:fc:5d:af:fa:4d:29:52:
                    d7:9e:b5:1c:ae:9c:0a:3c:09:76:82:7a:78:55:c0:
                    22:a9:ba:a5:34:0a:7d:fa:07:70:41:7a:16:15:7a:
                    4f:91:66:90:c5:9a:d9:84:e4:1c:79:aa:72:2a:38:
                    6f:41:c7:b3:d9:11:83:d1:d0:c7:83:45:d7:87:72:
                    59:7a:5c:8e:7d:4c:34:07:8a:ae:f5:61:3b:e2:5d:
                    a3:d4:c5:00:14:84:56:a6:a2:3e:c3:e0:d3:16:23:
                    3e:f0:27:b3:4e:c7:6b:8f:ec:46:b2:4d:1e:d2:9f:
                    89:cb:62:75:57:b6:d9:72:b8:76:0d:35:67:17:d0:
                    22:2d:ae:a4:a3:1d:23:ce:5d:53:62:d2:ad:11:cd:
                    f0:71:17:74:ac:ee:3d:f1:cd:9b:4e:76:9d:2e:99:
                    52:5f:91:84:fa:aa:af:51:03:46:fd:b9:51:90:5c:
                    03:25:71:53:eb:a6:4a:32:12:17:cc:58:99:02:c0:
                    e9:2d:69:19:92:4c:0c:62:68:35:4b:66:1a:e6:dc:
                    22:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:06:08:E6:BA:F3:20:30:FF:04:63:A7:5E:5E:FE:2A:BD:FB:9D:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/491caa9d-4be9-3100-8fa5-154bc64fb2c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b150::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:41:c9:b5:2f:1e:b8:df:bc:7b:7a:2f:6c:34:29:6c:8a:de:
         57:de:2f:e4:52:ae:20:5f:67:4a:23:8d:8a:1b:c4:30:7b:fd:
         18:ff:d2:ff:2e:2b:60:b4:b8:44:2a:de:02:b8:5a:9c:49:c0:
         08:ad:da:68:17:9b:47:5b:65:dd:60:f6:0a:40:70:7e:ce:ee:
         57:0e:00:9e:8e:59:8b:ff:ff:eb:0c:bf:47:1d:72:1b:b3:80:
         e9:00:ba:8a:cd:23:49:ca:c9:bb:66:bb:b5:07:ca:f0:3d:df:
         d5:cb:01:6c:0c:15:a7:b4:a7:e2:f1:67:0d:5a:6c:d8:7e:6b:
         d0:1b:90:ae:d7:51:ee:53:64:46:c1:5a:07:3d:19:02:03:70:
         c5:de:2c:59:b7:78:cb:40:de:e6:d1:1a:ca:12:42:09:10:5f:
         61:8d:85:41:d3:23:3f:48:5b:aa:bf:8f:f3:b7:95:93:70:55:
         b1:93:d1:c5:1a:91:da:b7:aa:02:37:cd:64:68:a8:e7:d0:a3:
         3c:65:42:c9:4c:79:cc:55:b9:f3:0a:39:7e:93:1c:8c:9a:f3:
         7c:d9:0c:d5:00:73:82:c9:74:08:6d:cb:1b:54:b3:c9:08:f5:
         dd:6b:00:8f:28:b9:d9:b8:b9:75:23:fc:82:49:83:8d:92:51:
         c9:07:4a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:24 2024 by rpki-client on console-ams.rpki-client.org