Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86460ec0-a761-31f1-aba8-788b78054c3f.roa
File:                     86460ec0-a761-31f1-aba8-788b78054c3f.roa (raw, json)
Hash identifier:          nqi1urDf8OH8pDytxWeb22csjBemQ2VOIkXG2SqFehw=
Subject key identifier:   DD:CB:DF:14:F9:89:4C:43:84:A6:37:C9:52:5C:75:8D:1E:A4:C8:97
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D7695CCF3121DD8267E5200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86460ec0-a761-31f1-aba8-788b78054c3f.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1001:f100::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:95:cc:f3:12:1d:d8:26:7e:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=0175fc12-8f5b-4d06-9fd5-9a96b78f96ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:01:79:41:61:b1:db:b7:37:18:64:84:da:bc:
                    38:e8:5c:02:1c:04:fa:58:f7:98:42:ae:0c:73:bb:
                    a2:6b:a2:cb:17:6d:97:48:44:19:2b:a1:3f:ea:fe:
                    67:97:34:85:95:cf:e1:cb:89:c2:8e:c4:7e:f4:28:
                    66:e6:38:df:74:15:cf:a5:3a:bf:41:66:fd:01:37:
                    5a:a2:b3:d0:7d:1b:4b:68:c9:9f:a7:0c:19:42:9b:
                    77:e8:f1:05:cd:75:f6:c9:fe:b2:da:02:6a:7b:10:
                    88:6c:53:19:5f:15:32:05:6e:66:26:f2:8f:fb:be:
                    07:f6:34:6c:67:16:e8:80:5a:19:f1:fb:60:38:a1:
                    5d:27:4b:d8:92:f2:35:25:f5:b2:36:d7:9b:ac:29:
                    84:e4:aa:04:bd:15:1a:95:92:3f:c2:e9:59:07:08:
                    1f:96:23:aa:d4:9b:3d:35:0e:df:23:5d:91:6f:e3:
                    a4:8e:d8:fb:ba:0f:98:90:59:87:d8:ea:0f:cf:74:
                    80:4f:e4:f0:aa:de:4b:b2:4b:4c:dd:3d:d5:e3:84:
                    1b:85:c5:e1:01:1d:d6:31:22:50:a1:e0:b7:94:e8:
                    6e:42:49:56:e2:97:48:20:35:04:b0:c2:a2:72:ef:
                    20:b7:6d:c0:7e:18:58:94:ac:81:25:40:d5:be:03:
                    97:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CB:DF:14:F9:89:4C:43:84:A6:37:C9:52:5C:75:8D:1E:A4:C8:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86460ec0-a761-31f1-aba8-788b78054c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:f100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:f3:63:b9:b6:ee:31:d8:ae:d2:33:60:cb:bb:55:78:7b:77:
         3e:06:c4:84:7f:4f:68:21:be:af:44:e9:0d:a4:86:75:6b:a0:
         9c:b6:16:df:ce:c4:67:59:32:04:31:43:e7:fb:cc:ba:5d:a1:
         f7:24:13:69:53:ba:2a:cc:22:3f:3b:7c:b0:1d:d4:74:a0:ce:
         f1:30:55:e3:3b:aa:95:5c:de:04:3a:84:40:a2:36:3d:96:28:
         05:a9:fc:95:0c:44:25:61:56:41:37:af:d1:d9:54:df:03:5a:
         c4:c9:7f:99:c5:ff:e2:b7:e0:6f:f5:8b:8e:77:ed:c3:82:fc:
         e8:83:9e:d5:a0:c2:05:98:6e:17:b4:f7:5e:ab:5b:64:87:65:
         52:58:6c:b2:71:a2:3b:e0:d7:2b:66:9e:6d:c9:9e:4f:76:6a:
         9a:7d:65:3c:84:88:8b:b9:6b:bf:06:bf:55:b8:e9:48:aa:49:
         17:89:38:76:42:6a:84:99:8d:f4:04:a2:d5:51:23:3e:91:b3:
         f8:61:82:f4:5a:90:bb:0d:69:88:04:63:41:93:c4:8a:49:19:
         07:47:56:7c:3f:1f:04:8c:76:b2:ea:15:ec:ba:53:00:a3:14:
         f9:a6:47:fe:b0:b6:08:f8:af:07:ea:1c:70:36:59:cd:7b:16:
         1f:ec:e3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:43 2024 by rpki-client on console-ams.rpki-client.org