Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5accb97a-6da4-3790-adf7-41be749b87e9.roa
File:                     5accb97a-6da4-3790-adf7-41be749b87e9.roa (raw, json)
Hash identifier:          ZT5dAPpAP/viw7YegknpXkzwe2a2UEDD8pfVI861ZEs=
Subject key identifier:   26:A2:AE:4B:87:E8:21:13:0B:CF:64:25:84:6D:F0:4C:73:3F:2A:6E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4A9FDA8E0B686E7E28B1F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5accb97a-6da4-3790-adf7-41be749b87e9.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100b:b010::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:a9:fd:a8:e0:b6:86:e7:e2:8b:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=58e3d4a4-62ad-4afa-a5c8-e86b01226a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e4:51:3d:8c:de:b2:d6:c6:58:92:53:bf:03:
                    d5:b7:e6:11:45:b0:1d:d0:dc:1e:3a:70:28:d3:a1:
                    e3:8a:e8:c2:16:49:db:59:25:f3:aa:af:9f:90:b5:
                    f1:b2:38:e9:a7:7c:07:f8:bf:fc:c0:28:6c:27:33:
                    db:45:08:9d:ad:dc:b2:5e:b1:03:c7:61:9f:a6:f3:
                    51:0e:60:1d:e6:4d:b5:a6:00:fa:43:d1:28:55:af:
                    06:4a:72:da:9f:f3:01:da:0c:e9:58:de:b1:ed:2a:
                    b2:bf:23:3d:3c:81:c6:be:ef:8f:cd:c6:5c:e9:be:
                    c5:23:e1:58:41:c3:ce:66:87:0c:06:fd:8f:29:70:
                    4b:4e:f4:3c:b7:58:c4:d1:b1:84:f9:98:08:ce:6b:
                    9e:08:12:20:92:97:b7:53:30:ec:c4:bd:ed:87:63:
                    24:08:2f:e9:7a:ee:fc:9a:eb:25:4c:3c:d7:3d:1a:
                    d7:ce:54:81:f8:a4:37:e4:9e:4b:2f:13:05:a1:bf:
                    3d:a1:78:db:58:7c:cd:94:ac:b0:d5:75:be:9a:91:
                    7f:fc:f9:d4:a2:b7:5e:1b:8f:61:dc:f1:ff:4e:ca:
                    a0:08:34:7f:d8:a2:a8:fa:a0:a2:aa:82:ee:00:e9:
                    27:15:db:e3:e2:23:ea:7d:01:93:dd:83:1a:7f:75:
                    e1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A2:AE:4B:87:E8:21:13:0B:CF:64:25:84:6D:F0:4C:73:3F:2A:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5accb97a-6da4-3790-adf7-41be749b87e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:b010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:46:5c:c0:97:d8:85:8a:d7:00:bf:59:ba:b7:ab:0d:c5:ca:
         fc:95:3b:da:c8:41:16:1b:56:03:56:92:00:b9:96:c0:89:25:
         3b:9d:11:0b:e0:36:de:98:8d:25:6c:00:b8:30:41:d4:69:0b:
         79:b7:a7:68:dd:51:e4:33:05:e0:a7:42:34:6c:e6:c0:89:a9:
         6e:1f:9f:56:39:3f:a5:39:ba:00:6a:57:ba:75:c3:99:79:05:
         6a:b2:a4:27:9c:5b:ea:59:41:dc:a5:bb:db:d4:9b:33:6f:b8:
         2b:0b:bf:4f:b8:07:fa:16:ac:24:d7:a4:b5:63:0a:e0:97:ed:
         71:6f:49:8b:1d:36:25:60:9c:13:a8:6c:1f:9d:05:ae:2d:b6:
         92:ad:0f:5f:21:90:3c:c1:c4:55:74:5f:63:83:d9:3b:94:2c:
         d5:c7:e6:8b:0d:7a:29:00:54:a5:53:65:b0:77:7a:b2:a5:5f:
         20:8e:14:27:04:3f:49:c9:b4:87:41:e1:d0:51:a5:b3:52:02:
         80:b9:eb:b0:85:a1:34:01:ad:bd:5a:03:e2:b0:2c:f8:7f:89:
         76:b8:ac:4d:51:a6:7e:1c:d2:29:2d:63:6e:f8:06:55:e4:18:
         1b:f1:79:ad:8a:dd:f0:a5:a6:c8:ae:77:13:d5:c9:d8:59:59:
         bf:ee:51:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:32 2024 by rpki-client on console-fra.rpki-client.org