Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70b60e3b-ac9c-3c65-9c39-ea579851132b.roa
File:                     70b60e3b-ac9c-3c65-9c39-ea579851132b.roa (raw, json)
Hash identifier:          bV9bZhCMuPd+LWuLVQINgPE+vocPqFHsY8YpuGGrI0Y=
Subject key identifier:   DE:C5:5B:7D:71:AC:B9:9E:E7:2C:F0:76:C6:13:D9:E0:39:87:0D:8B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA049F49D42D58E08AF100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70b60e3b-ac9c-3c65-9c39-ea579851132b.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100d:b070::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:04:9f:49:d4:2d:58:e0:8a:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=fb6fb8fb-1697-4411-ae8c-d9e77adec86c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1c:fd:48:6c:5a:cf:98:e3:c5:00:ba:8c:3d:
                    41:99:45:4b:8c:1e:90:6e:bf:1d:f5:6d:42:6e:5f:
                    2f:9d:44:4a:f5:e2:79:c0:98:69:9e:42:82:fe:66:
                    60:ca:3e:52:7c:14:d2:2d:f7:db:5c:0c:49:ce:4a:
                    a5:03:94:ee:7d:5b:6f:98:54:7d:d4:f4:cc:60:ca:
                    b3:65:87:6e:2b:7f:06:7e:f6:cf:53:fd:97:0b:9f:
                    fe:0c:14:7f:c9:9e:cc:3f:a0:63:6e:4d:d2:58:6f:
                    4d:ce:2c:d8:b7:6f:d4:6d:c4:4f:cf:54:34:a4:36:
                    89:fc:20:d3:47:d5:1e:ad:bf:a7:59:5b:76:c5:ff:
                    f7:6b:5e:2f:99:f2:fc:9d:fd:4b:08:78:e8:46:28:
                    0c:da:a7:ef:d9:28:55:91:49:0f:a8:e9:fb:6c:a7:
                    76:71:42:a8:20:12:b6:3d:52:a9:fa:67:16:a0:da:
                    b9:1c:ed:2b:91:90:7e:45:20:a5:b5:56:0a:6b:06:
                    83:df:06:0a:6e:ea:59:18:86:76:fb:8e:af:b6:68:
                    73:d9:49:97:96:74:e3:fb:c6:b9:e0:46:5d:59:82:
                    12:d3:fc:60:93:22:e1:dc:1c:9f:c5:c0:e3:4f:bb:
                    80:93:0b:1a:1a:fd:23:e6:b5:8f:36:f4:44:15:b6:
                    28:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C5:5B:7D:71:AC:B9:9E:E7:2C:F0:76:C6:13:D9:E0:39:87:0D:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70b60e3b-ac9c-3c65-9c39-ea579851132b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b070::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:aa:9f:15:2c:89:eb:47:38:c2:c6:0c:3c:83:2f:d1:05:da:
         34:55:9e:d3:ec:f0:16:11:fc:11:2f:5c:99:d0:85:ff:7d:0c:
         cc:e6:d8:49:42:76:35:aa:42:8f:41:60:83:54:4f:aa:2c:fe:
         2d:98:3a:e8:b5:7f:23:a8:85:ee:84:6e:ea:3c:4d:2a:ab:3b:
         ea:c6:72:e0:24:49:e9:e9:30:04:f9:14:d4:b0:b0:d5:b0:ca:
         30:a4:58:c4:2c:60:37:c4:3a:11:84:e9:76:53:f3:30:9e:b8:
         7d:1c:f2:b1:35:ad:8c:21:14:34:fe:58:15:63:64:80:f9:c0:
         fe:54:fb:09:ed:c2:db:2f:5a:e6:11:77:36:0e:78:22:58:8a:
         eb:96:12:f4:07:df:43:66:ed:44:89:8a:cf:01:c3:8d:8c:8b:
         ed:7e:81:25:bf:50:0c:6e:de:83:5f:71:cd:39:95:09:98:78:
         c0:b5:69:3b:20:c7:01:84:53:29:32:c8:5c:52:43:5c:20:9d:
         83:d0:3b:1b:49:a0:29:ee:4e:cd:e6:62:d7:d9:79:cd:4d:8f:
         6c:13:1a:b5:91:fe:33:95:09:24:5e:2b:ad:be:ee:c4:50:76:
         c9:6c:ec:93:ae:f0:bd:9f:23:21:30:29:8a:ea:cd:7d:1b:18:
         e1:f2:8f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:36 2024 by rpki-client on console-fra.rpki-client.org