Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c1adf31-9969-3673-b38e-984ece6b6e85.roa
File:                     5c1adf31-9969-3673-b38e-984ece6b6e85.roa (raw, json)
Hash identifier:          QIab0JGxxfuLPuwNqR58yvmoQU0KZ0/BXTKNweU6B9s=
Subject key identifier:   83:CF:FE:91:CF:64:4A:8B:FB:EE:99:B3:18:F1:0B:BB:DE:16:DF:BF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA097EA6E4D3D242724920
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c1adf31-9969-3673-b38e-984ece6b6e85.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100e:b010::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:09:7e:a6:e4:d3:d2:42:72:49:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=cd36a15f-2c84-4e44-a638-0d227a60946b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d5:47:48:0e:b0:b1:d1:b6:30:41:1a:87:05:
                    6d:de:15:fb:8d:05:73:11:c1:e8:b1:f1:d5:3c:ca:
                    4a:0d:eb:a7:cf:28:4f:16:41:e5:7a:d7:2d:62:9d:
                    85:c4:6c:63:67:b8:b6:5f:2f:10:da:9f:a8:00:97:
                    20:4d:0e:1b:bf:81:02:50:8e:92:2d:bd:fc:5e:22:
                    4b:71:9d:3b:33:c7:20:b0:a8:00:87:25:89:9b:a4:
                    f8:52:fa:2f:b1:80:f2:86:da:97:91:8d:9e:2d:43:
                    01:62:28:1a:99:50:ff:da:80:05:ec:43:70:46:c3:
                    02:ac:59:08:c6:48:de:1f:d3:59:c4:84:9a:4b:07:
                    b2:89:23:2b:b0:7d:e1:7e:ef:58:f9:22:c1:a7:ce:
                    a3:b1:c3:b3:91:3e:7d:1d:12:db:cf:3a:ab:5b:bb:
                    c5:06:2a:a8:d3:8b:21:19:84:60:8b:c7:53:50:1d:
                    52:ba:03:fe:7e:c1:09:ab:46:e3:27:88:ad:30:9f:
                    79:e1:0f:74:aa:0a:fb:a8:07:db:9d:f4:b5:0b:a2:
                    3c:f5:e0:cb:a9:ac:1b:5e:ac:5a:17:67:f5:de:c5:
                    3f:c1:8a:a4:8a:a4:f6:cd:dc:0c:8e:c2:26:2b:e3:
                    99:f9:16:5f:8d:b4:c5:68:85:c7:96:97:2f:62:b7:
                    b8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CF:FE:91:CF:64:4A:8B:FB:EE:99:B3:18:F1:0B:BB:DE:16:DF:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c1adf31-9969-3673-b38e-984ece6b6e85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a7:84:1c:2e:17:53:5d:54:c4:05:50:97:f7:48:94:d3:8b:
         e8:2b:6a:26:6a:98:47:91:bf:34:58:ec:cb:6d:4e:41:7e:3e:
         dc:eb:68:76:7c:54:ac:7b:e7:2c:27:1d:4f:3a:82:eb:fa:4e:
         cf:ca:8b:bb:07:58:12:c8:d1:b3:ea:a6:f8:53:21:81:1e:c2:
         00:7a:eb:a9:6e:99:64:9c:e1:09:d1:f2:03:73:cf:2a:95:e2:
         4b:66:6c:24:8a:8a:34:fa:8a:70:69:a4:a2:fd:0e:ae:5c:ed:
         5d:8e:32:0c:74:a3:6e:ad:d7:ff:d4:48:39:af:8d:0b:4e:6b:
         31:b3:8b:8b:ba:6b:fa:01:16:b3:3f:05:18:b1:47:7d:d2:44:
         c8:6f:5c:c1:20:0e:c7:31:b4:40:f0:e7:ba:31:8d:4b:76:3d:
         62:91:fe:66:93:e0:54:44:b5:3c:07:ae:a4:3e:0c:8e:0a:31:
         75:c5:38:a8:08:ae:bd:1a:90:97:e1:f0:39:45:a8:fc:c2:f2:
         04:2d:99:fc:fb:ec:f7:03:d9:cc:64:0e:08:e3:45:89:25:1e:
         1a:41:fe:dd:74:c4:5d:a1:d7:dd:5c:8f:2a:f1:38:9c:fe:b5:
         b8:7d:d6:78:f6:3f:99:1e:a6:24:37:29:fc:1f:ce:3a:01:69:
         cc:f6:44:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:28 2024 by rpki-client on console-ams.rpki-client.org