Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/49f9246a-2612-3f8e-bf39-f0720311fcac.roa
File:                     49f9246a-2612-3f8e-bf39-f0720311fcac.roa (raw, json)
Hash identifier:          3KxU+WE2JA3kgNoUel3vvgwTxRV1K08qMvnJCqHkdt4=
Subject key identifier:   CF:C9:C9:DA:19:2B:E5:63:DD:69:7A:73:8E:E4:CA:D9:8E:6F:65:B6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA066DB5EC79F9AF76D100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/49f9246a-2612-3f8e-bf39-f0720311fcac.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100d:b1c4::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:06:6d:b5:ec:79:f9:af:76:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=0d540e3b-1613-44f7-87e5-df4be5a41d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8a:48:53:54:ae:a8:6e:53:29:23:d5:3c:1c:
                    8c:2e:67:bd:b0:b7:66:6c:9e:d8:4e:0e:e0:3b:fc:
                    ce:2a:49:d9:4e:48:46:59:19:06:84:41:5f:aa:33:
                    70:da:de:c3:3d:4f:76:27:c7:eb:56:f5:23:ce:20:
                    2c:80:3b:74:57:fb:2b:2d:2c:99:fc:25:79:6b:64:
                    92:22:75:1c:c5:a8:1c:fb:b0:88:29:dc:f7:5e:a4:
                    65:80:40:26:f4:c8:22:83:fe:55:4c:a1:f0:f4:24:
                    e7:26:f9:4c:74:db:e8:e4:e1:cd:03:97:f9:36:45:
                    14:16:81:7f:fc:33:95:fa:59:7d:c2:47:e4:97:8a:
                    89:d0:07:ba:40:0f:1b:84:5a:95:f7:d4:c9:c2:b8:
                    a6:92:28:c8:8d:80:9e:3a:62:0a:3c:7c:15:fa:7a:
                    d5:52:6a:b6:83:b6:a2:70:af:53:3a:33:92:26:40:
                    39:52:94:6d:50:f5:a3:e4:16:0d:5e:30:c1:c8:07:
                    7f:51:75:8b:ca:7f:3f:4d:4a:f1:55:ae:99:c7:ae:
                    99:cd:8b:78:01:cf:be:52:f5:af:0b:24:14:ae:ea:
                    b3:df:2f:a4:8c:7e:cf:35:51:1f:97:0d:27:09:9f:
                    19:f3:d2:31:91:02:02:bc:e1:21:9a:1b:7d:58:28:
                    eb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C9:C9:DA:19:2B:E5:63:DD:69:7A:73:8E:E4:CA:D9:8E:6F:65:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/49f9246a-2612-3f8e-bf39-f0720311fcac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b1c4::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a9:f4:02:1f:42:92:47:3d:c1:82:fb:f1:84:78:d2:3f:6c:
         75:26:0e:2c:31:02:d4:32:ec:83:ee:94:3e:7f:62:f7:8b:ac:
         4d:75:e0:94:f9:b3:33:a7:5b:c5:9a:75:8d:46:e9:38:0a:62:
         e3:e4:f3:b0:5a:2f:6b:e8:bb:ec:32:88:06:62:13:48:63:86:
         1f:9f:d6:4f:22:bd:bd:60:07:5f:93:f2:12:9d:7d:6a:cb:fe:
         2e:c3:0d:f3:e4:e2:8c:bc:6a:fc:f6:a2:09:1f:5b:e5:61:21:
         9a:d9:0e:b1:0e:49:86:51:28:9f:11:62:d8:43:44:bd:bb:ff:
         43:df:63:95:9e:f9:16:87:e2:f3:f7:59:26:db:e3:4f:89:d6:
         99:ec:ad:5b:cf:ea:73:af:84:29:92:ed:35:a1:71:e1:cf:8a:
         10:3f:8e:e1:88:91:ee:68:60:43:38:90:e2:ab:3a:d3:50:fd:
         ad:a5:9c:e1:e7:85:be:c5:f1:1d:34:2f:aa:76:ee:2b:59:9f:
         c4:60:00:7e:4f:34:44:72:01:1b:dd:84:81:01:19:ef:c2:8a:
         1e:eb:83:cb:80:54:91:67:be:94:a9:fe:c6:46:a7:8f:67:5f:
         71:7b:93:f6:ef:e2:3d:a3:53:02:84:e6:c1:5e:1d:0f:24:12:
         aa:ee:b5:26
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfEqgZttex5+a920QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk
MGQ1NDBlM2ItMTYxMy00NGY3LTg3ZTUtZGY0YmU1YTQxZDg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YpIU1SuqG5TKSPVPByMLme9sLdmbJ7YTg7g
O/zOKknZTkhGWRkGhEFfqjNw2t7DPU92J8frVvUjziAsgDt0V/srLSyZ/CV5a2SS
InUcxagc+7CIKdz3XqRlgEAm9Mgig/5VTKHw9CTnJvlMdNvo5OHNA5f5NkUUFoF/
/DOV+ll9wkfkl4qJ0Ae6QA8bhFqV99TJwrimkijIjYCeOmIKPHwV+nrVUmq2g7ai
cK9TOjOSJkA5UpRtUPWj5BYNXjDByAd/UXWLyn8/TUrxVa6Zx66ZzYt4Ac++UvWv
CyQUruqz3y+kjH7PNVEflw0nCZ8Z89IxkQICvOEhmht9WCjrlQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM/JydoZK+Vj3Wl6c47kytmOb2W2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDlmOTI0NmEtMjYxMi0z
ZjhlLWJmMzktZjA3MjAzMTFmY2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDbHE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABSp9AIfQpJHPcGC+/GEeNI/bHUmDiwxAtQy7IPulD5/YveLrE11
4JT5szOnW8WadY1G6TgKYuPk87BaL2vou+wyiAZiE0hjhh+f1k8ivb1gB1+T8hKd
fWrL/i7DDfPk4oy8avz2ogkfW+VhIZrZDrEOSYZRKJ8RYthDRL27/0PfY5We+RaH
4vP3WSbb40+J1pnsrVvP6nOvhCmS7TWhceHPihA/juGIke5oYEM4kOKrOtNQ/a2l
nOHnhb7F8R00L6p27itZn8RgAH5PNERyARvdhIEBGe/Cih7rg8uAVJFnvpSp/sZG
p49nX3F7k/bv4j2jUwKE5sFeHQ8kEqrutSY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:28 2024 by rpki-client on console-fra.rpki-client.org