Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78b45b9d-2617-3274-8f91-51af79780970.roa
File:                     78b45b9d-2617-3274-8f91-51af79780970.roa (raw, json)
Hash identifier:          KVIV1Ey2Vr1DoUEyEF1c0nEbyy0LqFzdDmi5lkwLS98=
Subject key identifier:   A7:B7:9B:89:4B:79:6D:0C:C0:D7:90:06:59:44:4D:1F:9B:09:5E:6F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBE2B29A4290E7CC643C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78b45b9d-2617-3274-8f91-51af79780970.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1014:b070::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:e2:b2:9a:42:90:e7:cc:64:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=523af727-4ab8-41cd-9ef1-7bfff23a317b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:fc:3a:da:83:30:43:ba:48:2c:0e:47:2d:
                    2f:a9:2e:97:f5:97:3c:56:04:87:02:42:6b:b1:f5:
                    5b:4d:ea:1b:eb:ef:00:4c:44:50:53:44:c7:ca:16:
                    07:07:fa:2f:d7:b4:4a:48:13:dd:c2:96:20:9d:e8:
                    0a:3a:4b:ce:16:88:d2:01:08:d3:79:d4:09:fb:c7:
                    eb:3b:f1:3f:11:ef:a5:52:19:57:17:f9:9a:54:19:
                    33:d0:8c:72:d8:25:30:b2:1e:24:c0:fc:46:ea:ac:
                    de:c4:6e:b3:2b:aa:bf:da:40:ed:7c:b0:7c:68:b2:
                    a4:c2:80:b9:07:79:68:3e:fb:6f:1c:f6:53:77:a7:
                    71:8c:48:bb:68:89:96:23:79:bf:a5:3b:8f:a1:4c:
                    f7:cc:0b:9c:cd:ba:38:5f:0b:08:12:b9:d9:c4:05:
                    9e:04:e0:f3:77:58:11:52:85:75:57:61:6f:21:78:
                    de:02:0f:5c:d8:1a:a3:52:ad:29:cd:b9:b3:1e:6b:
                    e5:20:2c:93:70:6d:79:34:b0:d8:a3:7d:b2:8d:f3:
                    07:89:87:f4:39:9c:2b:a8:a3:d1:7a:3c:bd:08:85:
                    ce:45:4d:e7:1f:6b:2f:5d:04:2e:45:1d:0f:17:d8:
                    de:1a:86:ae:28:6f:06:b8:dc:ec:3a:5a:82:cf:d5:
                    86:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B7:9B:89:4B:79:6D:0C:C0:D7:90:06:59:44:4D:1F:9B:09:5E:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78b45b9d-2617-3274-8f91-51af79780970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b070::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:c0:85:e5:76:e1:79:31:c8:ee:d4:6a:a1:cc:af:1d:d7:70:
         0d:6d:42:50:e8:14:61:4a:72:35:62:98:d0:34:e3:c5:c0:14:
         14:25:03:1f:96:a0:18:f3:8a:e0:35:63:52:ba:56:2b:07:e3:
         19:22:85:72:04:67:4f:25:6e:eb:eb:d6:72:d6:d3:48:fc:80:
         0e:a2:bb:d3:9b:a1:6b:0d:62:0b:0c:f6:0e:9b:0a:ea:d5:e0:
         ab:1e:13:8b:04:cd:63:a3:da:98:90:7a:f2:11:26:ab:52:a3:
         e0:a3:25:af:01:09:a8:22:28:91:1b:e9:0d:f6:0a:ca:e8:ad:
         f4:87:59:82:e3:86:9e:f6:be:5c:cd:f8:ea:15:a6:b9:7b:dd:
         05:0c:40:7f:95:10:17:87:a9:ab:54:5b:5e:6f:c7:93:1a:0b:
         ec:7f:12:6a:a5:ea:13:2f:f7:71:c8:2e:30:25:2f:48:bf:63:
         f3:60:7e:35:4b:71:b6:92:14:91:83:cc:48:56:31:58:37:8d:
         2d:df:31:80:42:ed:5a:70:28:2f:69:b4:37:ab:63:6a:a3:41:
         a5:7d:1a:65:f3:dc:af:8d:7d:96:fe:2c:4a:4a:f5:23:a6:97:
         07:18:5e:2b:f8:49:5e:ac:c6:79:e2:5e:02:e0:23:5f:b4:47:
         83:1f:38:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:38 2024 by rpki-client on console-fra.rpki-client.org