Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a11898b-0b8a-3341-a3f5-489c34135064.roa
File:                     7a11898b-0b8a-3341-a3f5-489c34135064.roa (raw, json)
Hash identifier:          6QdhUC6KuO/kqOVjKPgG1VbdX6ROUQEh5nSSVxVCGeM=
Subject key identifier:   62:AE:7B:7A:07:FD:91:4D:FB:DE:CC:DC:AF:10:A5:93:D2:07:02:B3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76AB51CB102FAC6E190FC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a11898b-0b8a-3341-a3f5-489c34135064.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1008:a010::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:ab:51:cb:10:2f:ac:6e:19:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=57d067b8-eb82-47d2-ae6e-d9fb4fab5112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b6:95:73:c1:86:af:0e:23:89:46:ea:7b:67:
                    24:80:4a:7c:78:3b:43:c1:11:66:20:e0:a4:e4:58:
                    90:84:e3:da:ef:21:14:71:5f:d0:fb:3e:e7:e2:82:
                    6d:5e:d4:ae:49:64:dd:94:68:e4:27:41:81:69:c8:
                    82:1f:56:96:69:3a:ee:8c:f4:3d:b2:79:81:c0:83:
                    a4:c4:2f:f1:e5:0d:a4:d0:5e:95:1b:1a:34:08:2d:
                    98:59:a1:68:39:a5:79:4b:2d:c7:d8:56:d2:d6:15:
                    bb:54:62:a0:ba:7a:a8:1f:c0:72:65:b6:48:fe:59:
                    0a:da:09:c1:0e:ea:07:c2:42:bc:ad:2f:4d:e9:3b:
                    b6:83:36:89:f7:88:72:1f:ef:2b:b5:24:29:d4:21:
                    70:2c:5a:1e:14:a0:cb:6f:f1:fe:b9:19:74:99:eb:
                    c3:1b:ad:0e:36:04:37:37:16:9f:f1:3b:30:b8:f9:
                    43:eb:28:66:6d:9f:26:b3:2e:a8:e9:40:04:56:04:
                    e9:d2:7a:ed:ed:54:de:48:4e:1d:c3:08:b1:38:ba:
                    77:7d:93:73:ea:42:53:d1:d1:43:16:8d:06:03:37:
                    2c:a8:24:4b:14:11:1a:b0:5d:1d:85:28:92:09:c7:
                    27:de:e6:ea:83:1d:51:72:3b:ff:04:85:14:40:f7:
                    8d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AE:7B:7A:07:FD:91:4D:FB:DE:CC:DC:AF:10:A5:93:D2:07:02:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a11898b-0b8a-3341-a3f5-489c34135064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:a010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:b2:8a:e3:ee:53:9b:39:25:6a:dc:7b:f4:87:e7:93:00:ec:
         d5:8a:41:b0:0b:07:a1:e0:b4:14:11:0b:2a:7e:7e:57:84:d4:
         b0:9c:f3:d6:83:59:99:be:5d:d9:ac:08:51:ad:79:88:23:82:
         cd:9e:0d:53:3b:f3:cf:27:15:f4:84:8b:cd:89:85:3e:09:28:
         fd:2d:81:93:fc:26:e0:88:9d:5f:3a:03:73:50:3f:58:e5:e3:
         6c:aa:47:94:97:5f:11:f5:19:fc:c6:5b:f1:56:fd:c7:bb:3f:
         90:3d:be:68:df:9e:9c:37:74:ef:51:d0:4f:b3:e4:30:fe:a3:
         51:10:df:ec:1d:ef:e2:ae:c2:94:15:73:4c:8e:78:e8:2d:24:
         2b:ae:40:08:2a:f3:20:38:d3:eb:26:0f:58:f5:23:5a:b1:c3:
         24:bc:4a:70:24:a5:5e:1e:16:91:c4:c9:c4:b5:f0:2e:45:8f:
         e6:bc:87:82:f5:ae:3b:20:67:14:6c:d8:cd:f7:e3:82:ae:31:
         2b:a2:99:c4:ab:37:1f:28:0c:71:48:b4:51:d8:87:04:df:93:
         de:72:42:ea:ab:7f:68:90:06:41:95:71:9d:7b:86:4a:79:3f:
         b8:aa:f8:95:47:10:af:12:55:d0:a4:00:de:21:c5:4b:db:fd:
         d0:37:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:38 2024 by rpki-client on console-fra.rpki-client.org