Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80a469b8-5f2b-305c-a57c-93cdc38a3206.roa
File:                     80a469b8-5f2b-305c-a57c-93cdc38a3206.roa (raw, json)
Hash identifier:          afc6+ASUpyO0P62H15mTKfw2UG//Arg9QEi2p4JP1Y4=
Subject key identifier:   7F:40:3B:75:9D:AE:9C:FD:BF:6D:1C:BC:ED:57:69:76:52:0F:72:0F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA0EB91BF004A6A8349A40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80a469b8-5f2b-305c-a57c-93cdc38a3206.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100f:b020::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:0e:b9:1b:f0:04:a6:a8:34:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=526c699e-d5dc-43b4-8f3b-65c7dbe7f052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:15:9d:15:d3:93:b3:84:6f:12:3c:9d:99:90:
                    83:26:11:21:3f:9f:15:97:78:44:41:34:ce:21:36:
                    d9:6f:e4:c8:b6:8f:e0:d2:14:ed:88:73:38:59:16:
                    2c:88:fe:b8:a0:59:fd:45:94:c4:30:66:97:16:3b:
                    4a:ac:01:d1:cc:43:b4:48:80:38:5f:97:b5:d3:ef:
                    9c:1c:1d:e9:0e:7a:d0:fc:8b:b7:04:1b:40:b2:65:
                    a7:37:49:ff:d8:bf:64:21:9f:9a:80:c0:d0:9d:da:
                    dc:da:91:f4:8c:50:42:f3:3f:f2:c5:6e:d3:4e:80:
                    6a:98:7e:36:da:27:f0:30:bf:fb:8f:3b:e8:72:d6:
                    b7:1c:e0:2b:67:78:4f:cd:5c:a7:b8:d6:1a:32:3c:
                    0a:5d:6d:7f:cf:63:f9:84:eb:33:ab:00:54:95:45:
                    42:bb:5a:8e:2c:dd:03:05:cb:31:58:bb:f6:96:c7:
                    41:ce:13:0c:4d:9b:7d:8e:00:e5:0e:5f:b1:7a:5f:
                    d1:db:b7:66:81:7f:2e:f6:68:43:4c:29:c4:bf:ee:
                    c7:bb:ad:f2:12:74:d8:d8:5d:d7:fb:9a:86:b8:81:
                    4c:b8:44:7a:ea:30:1d:ad:cb:eb:41:ae:e4:53:6c:
                    90:03:0c:b3:09:86:30:dd:06:f0:18:3f:0c:66:fd:
                    ca:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:40:3B:75:9D:AE:9C:FD:BF:6D:1C:BC:ED:57:69:76:52:0F:72:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80a469b8-5f2b-305c-a57c-93cdc38a3206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f1:73:c4:ed:91:3a:81:1a:57:b8:32:7d:ef:98:f1:ee:58:
         5d:ed:ab:17:44:70:17:9a:31:d4:69:bb:ef:e8:06:a3:b4:76:
         57:a5:fb:81:fc:82:e6:44:5b:72:d4:0c:6a:f6:ff:e2:45:5a:
         71:0c:1f:77:cb:59:fe:94:6d:38:2b:17:f5:14:d4:49:91:2c:
         a6:99:0c:c3:23:95:b8:0e:40:dc:66:bc:a9:2f:71:d0:14:b3:
         0c:30:01:d0:98:a2:80:7d:03:d7:9e:1d:af:a4:52:cf:89:89:
         35:07:1d:a8:72:dc:83:04:2f:71:c0:38:73:5a:82:5d:2a:42:
         9e:5d:bd:a8:46:89:25:c5:fa:26:09:9a:c9:ec:8f:7b:2d:cc:
         05:92:c6:d9:7f:4d:80:38:ef:c2:fb:66:54:b7:c2:63:a8:75:
         96:b8:09:f4:45:10:7c:99:6a:a7:48:6b:74:09:1d:d4:02:6a:
         86:2b:74:c8:48:90:a3:69:87:b6:46:bc:be:dd:5c:ee:18:58:
         12:87:91:56:85:d0:75:c7:b0:d0:d8:10:5f:00:5e:77:06:f8:
         53:4c:b2:2d:01:58:cc:57:d9:01:5f:be:e5:60:28:05:ce:95:
         28:63:0c:0c:75:af:60:e6:99:b1:8c:31:07:c1:86:42:d0:da:
         98:97:9b:f8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfEqg65G/AEpqg0mkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk
NTI2YzY5OWUtZDVkYy00M2I0LThmM2ItNjVjN2RiZTdmMDUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxWdFdOTs4RvEjydmZCDJhEhP58Vl3hEQTTO
ITbZb+TIto/g0hTtiHM4WRYsiP64oFn9RZTEMGaXFjtKrAHRzEO0SIA4X5e10++c
HB3pDnrQ/Iu3BBtAsmWnN0n/2L9kIZ+agMDQndrc2pH0jFBC8z/yxW7TToBqmH42
2ifwML/7jzvocta3HOArZ3hPzVynuNYaMjwKXW1/z2P5hOszqwBUlUVCu1qOLN0D
BcsxWLv2lsdBzhMMTZt9jgDlDl+xel/R27dmgX8u9mhDTCnEv+7Hu63yEnTY2F3X
+5qGuIFMuER66jAdrcvrQa7kU2yQAwyzCYYw3QbwGD8MZv3KvwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH9AO3Wdrpz9v20cvO1XaXZSD3IPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODBhNDY5YjgtNWYyYi0z
MDVjLWE1N2MtOTNjZGMzOGEzMjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQD7Ag
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADnxc8TtkTqBGle4Mn3vmPHuWF3tqxdEcBeaMdRpu+/oBqO0dlel
+4H8guZEW3LUDGr2/+JFWnEMH3fLWf6UbTgrF/UU1EmRLKaZDMMjlbgOQNxmvKkv
cdAUswwwAdCYooB9A9eeHa+kUs+JiTUHHahy3IMEL3HAOHNagl0qQp5dvahGiSXF
+iYJmsnsj3stzAWSxtl/TYA478L7ZlS3wmOodZa4CfRFEHyZaqdIa3QJHdQCaoYr
dMhIkKNph7ZGvL7dXO4YWBKHkVaF0HXHsNDYEF8AXncG+FNMsi0BWMxX2QFfvuVg
KAXOlShjDAx1r2DmmbGMMQfBhkLQ2piXm/g=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:36 2024 by rpki-client on console-ams.rpki-client.org