Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c230577-6c2e-328f-aa47-bd3c9c46a36a.roa
File:                     5c230577-6c2e-328f-aa47-bd3c9c46a36a.roa (raw, json)
Hash identifier:          oON9uZgOWewTCZokHArsIW+IMlfK+j88paugiI9/oyQ=
Subject key identifier:   81:24:12:03:F0:73:68:DF:4C:C7:30:82:3E:FB:DE:F6:0B:9E:31:F4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4A9F68A5468C3C09E0F5640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c230577-6c2e-328f-aa47-bd3c9c46a36a.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:1009:a110::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:a9:f6:8a:54:68:c3:c0:9e:0f:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=d82cfdb8-2177-4c41-a6fb-39b309c00563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b1:9f:c0:ca:3a:6e:95:12:a8:23:f4:ac:53:
                    d3:bc:2f:bb:93:68:95:f1:21:33:cf:35:91:4f:89:
                    0d:32:11:49:80:84:04:47:ad:6d:ed:65:59:08:a2:
                    0b:d4:92:ed:46:c9:09:34:9b:50:c8:bb:eb:c9:9f:
                    0a:fb:2d:16:59:db:cd:d4:51:b5:a5:a8:b8:10:36:
                    99:4d:fb:42:c2:dc:91:b2:1c:30:66:3a:4c:9e:f0:
                    a7:47:45:b0:10:64:80:a3:c4:52:7d:49:4d:c7:1a:
                    fa:7e:04:59:4e:0b:60:0f:bd:de:fd:c8:34:38:66:
                    98:92:f8:4b:c3:72:05:0d:cd:fd:0e:38:6c:dd:d1:
                    39:9b:cf:74:42:15:93:53:53:4d:d9:df:34:88:6b:
                    4a:ff:94:45:4d:ac:bb:f0:29:0c:79:40:e1:68:8e:
                    00:c7:ac:d7:d6:5e:38:5f:09:3d:fb:9c:fa:35:e4:
                    79:30:b2:a8:8e:97:1b:24:30:28:bf:66:33:a9:a8:
                    95:e2:68:b3:82:02:68:a7:75:cc:63:91:c8:aa:85:
                    36:c9:1f:f4:ef:00:ae:86:7f:c5:d2:93:d1:10:fa:
                    f4:4b:ea:f0:ef:88:de:48:4d:30:9d:ce:79:ac:e2:
                    70:46:dd:32:d8:00:85:cc:50:27:29:86:0e:69:ac:
                    cb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:24:12:03:F0:73:68:DF:4C:C7:30:82:3E:FB:DE:F6:0B:9E:31:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c230577-6c2e-328f-aa47-bd3c9c46a36a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:a110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:68:07:cb:ae:b0:ee:d8:fe:e7:ad:7c:12:9a:f9:6d:f5:11:
         b2:81:3e:0a:c8:34:e7:25:ba:97:da:60:42:52:1f:47:36:46:
         4e:d1:36:49:6d:cc:bd:0a:12:1a:f7:0e:d4:1b:1f:14:f2:90:
         08:6b:a3:2f:38:e7:65:a8:08:a9:84:d0:c6:31:c0:c5:e1:d2:
         29:a9:ca:46:56:9e:04:b2:0a:d3:44:cf:7c:73:29:bc:96:70:
         64:27:e4:74:ab:86:5e:0a:c0:da:6d:6d:5d:04:5b:45:c6:37:
         68:a3:4d:16:63:9e:f6:5c:1f:2d:05:80:df:7c:aa:91:db:ff:
         6a:12:23:12:9f:8d:d9:33:8c:83:de:06:24:31:c4:64:b7:a5:
         85:23:cc:53:34:f9:83:cd:8e:b4:87:28:93:bc:72:35:62:39:
         9f:6a:e6:0e:9f:1c:3a:0d:00:ec:93:35:cd:c4:b0:dc:39:dd:
         cc:a6:b5:af:e2:9e:b5:bd:16:b7:72:c2:ab:fa:b5:25:aa:14:
         5a:9c:93:f2:bc:27:95:d4:28:c2:50:6d:6c:a3:46:93:8c:d2:
         a8:1d:f5:62:1a:09:54:22:fd:83:aa:04:a8:0d:8b:14:90:4a:
         d9:15:09:05:c6:86:0a:31:9f:e2:b4:0d:27:20:68:3a:4d:17:
         47:a2:39:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:28 2024 by rpki-client on console-ams.rpki-client.org