Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ef5b0e4-1a17-3e11-90a2-1d1b7d9ff2ee.roa
File:                     5ef5b0e4-1a17-3e11-90a2-1d1b7d9ff2ee.roa (raw, json)
Hash identifier:          qWmkO9GRfn2UF8DHoXI7QnUxj0okCrQPl6Tl7yQ2P04=
Subject key identifier:   9B:C7:58:89:D4:B7:26:C0:8D:A0:C7:85:14:08:F2:A6:10:A8:36:AC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA0F390C3D4362426FCB40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ef5b0e4-1a17-3e11-90a2-1d1b7d9ff2ee.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100f:b0c8::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:0f:39:0c:3d:43:62:42:6f:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=087c88ee-302d-4184-adc1-54fb91728ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:09:1f:1f:a9:66:ef:1f:e1:0b:91:80:f6:87:
                    e4:91:7c:e8:36:d1:28:61:ef:0a:35:87:47:5d:c7:
                    a2:8c:56:56:a6:03:80:cf:af:ef:b9:20:8e:3d:f3:
                    bf:33:4a:0f:e0:3a:bf:60:74:38:42:21:69:cf:b7:
                    b9:bc:8e:02:51:c0:48:a4:f1:35:63:0a:ea:3e:50:
                    f8:cc:26:75:77:70:3c:99:df:cc:50:c8:5e:bf:3f:
                    76:eb:db:d8:5e:91:f1:62:47:b3:27:30:04:bf:35:
                    b6:75:a2:60:90:7d:da:17:db:a0:b9:67:6d:07:70:
                    35:41:87:cc:f6:ed:7f:a1:a3:bf:24:cf:9c:a6:76:
                    c5:a3:a9:4f:cd:50:37:35:74:b8:db:ae:eb:7b:6d:
                    d2:67:0b:52:0a:ab:5f:fa:25:ae:ed:83:d7:62:44:
                    8c:7b:72:4b:fb:12:eb:52:ad:75:fd:2b:10:e3:15:
                    4a:b5:f1:53:ba:57:f7:db:d2:0f:b8:b4:8c:72:f3:
                    de:70:e2:9b:22:56:16:90:aa:8d:3f:4e:4c:06:7c:
                    97:6d:0b:45:bf:93:2f:cc:ca:c2:f0:b8:75:c2:17:
                    64:a8:5a:e7:79:73:e8:b4:2a:11:d8:26:22:cd:f4:
                    2e:3d:01:bc:8e:35:e4:c9:a5:ec:0d:7f:32:25:1a:
                    3a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C7:58:89:D4:B7:26:C0:8D:A0:C7:85:14:08:F2:A6:10:A8:36:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ef5b0e4-1a17-3e11-90a2-1d1b7d9ff2ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b0c8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:1f:c7:3f:d1:7c:98:45:48:7d:0e:b7:75:b0:2d:78:63:35:
         c2:3b:c8:e8:9e:a9:d0:93:73:fd:ed:f6:ed:d3:29:f4:bf:ea:
         4b:a4:56:dc:d7:bd:71:d6:2a:09:9a:7b:bd:df:8a:2c:cb:25:
         99:42:39:2d:5e:5a:af:ba:94:a7:56:58:db:e6:21:6d:74:60:
         fa:13:0c:7e:ce:62:e1:24:53:c6:71:61:1c:db:cd:65:a3:07:
         d6:36:4c:a0:d8:91:75:00:33:e6:e2:d2:72:b5:46:0f:c6:a8:
         bd:ec:82:36:61:b8:55:a6:a8:db:06:68:42:ac:bb:9d:35:86:
         45:c4:b7:7e:a6:47:3d:45:26:15:0a:1d:bf:c5:12:bc:d6:f6:
         a4:e4:03:f9:5a:98:03:09:86:29:91:90:f1:65:80:0c:51:a1:
         70:42:fc:b1:1d:70:a3:58:dc:d1:4c:a5:c1:0d:69:25:4f:f2:
         bf:24:82:e8:59:95:14:17:a3:03:07:85:8f:a7:33:a0:24:60:
         8e:c3:c3:d5:4e:fa:c3:34:69:b0:9b:cc:61:d9:24:f8:90:d7:
         f7:f4:02:7c:fd:c5:41:f5:dd:36:fd:f6:79:29:25:6b:56:f9:
         01:32:7c:5d:7f:31:a4:67:98:25:2f:16:7e:e1:44:98:08:39:
         e4:e3:53:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:28 2024 by rpki-client on console-ams.rpki-client.org