Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8673df9d-224d-37e4-b01e-a25f9764f356.roa
File:                     8673df9d-224d-37e4-b01e-a25f9764f356.roa (raw, json)
Hash identifier:          yvVk72Cm9Jzky+yx0m+qPoy/N6Rq/SjYc+SyTzTCjzg=
Subject key identifier:   E5:66:F4:C7:E8:7A:A4:1F:24:AE:79:38:2C:08:21:2B:9F:DB:DA:C9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBD866E881B0A9E6088100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8673df9d-224d-37e4-b01e-a25f9764f356.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1010:d120::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:d8:66:e8:81:b0:a9:e6:08:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=4ac891e9-3aad-4a6d-b805-b20389c2b7e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6b:cc:b4:64:5b:39:17:41:f3:59:56:6b:06:
                    c0:58:74:66:e7:c7:31:8b:48:4a:6c:e5:36:b5:5b:
                    64:8c:4c:b0:6b:f4:f3:88:d6:44:2d:1f:2f:7f:c1:
                    34:dd:c1:7f:7d:dd:ea:d0:1a:c1:37:ef:0c:c7:35:
                    78:c1:b0:20:fc:ab:47:05:34:6b:ef:12:61:55:ea:
                    9e:ed:14:17:90:35:99:f4:12:8d:78:ca:71:d0:78:
                    f6:2d:2a:b2:78:6a:38:cc:84:81:74:14:d3:c9:22:
                    58:f2:ed:0c:ba:2e:2f:46:c6:9e:b0:a9:a8:84:00:
                    dc:86:31:63:b2:b6:01:c5:09:47:47:d8:a3:27:c7:
                    b8:3c:3d:3c:10:07:21:4e:f0:c4:37:b7:a3:38:fc:
                    fd:a2:67:9c:26:e0:b0:2d:55:3e:4a:d9:b2:37:e6:
                    a9:5f:ed:a7:37:37:e4:8a:60:07:90:39:03:0c:15:
                    3d:02:e5:63:e6:aa:74:e1:7a:33:d4:eb:a7:27:a3:
                    81:58:d5:9e:8a:72:42:62:76:3c:e7:0d:8b:ff:b4:
                    8f:dd:5a:7d:d5:9b:ca:b4:41:b5:77:c5:a1:42:f4:
                    d0:06:18:ae:5b:85:14:a4:96:25:56:27:72:87:c8:
                    41:09:96:fe:82:ac:a5:52:de:12:9b:ea:fe:93:92:
                    78:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:66:F4:C7:E8:7A:A4:1F:24:AE:79:38:2C:08:21:2B:9F:DB:DA:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8673df9d-224d-37e4-b01e-a25f9764f356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:d120::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:57:08:f1:49:91:06:62:f9:5b:4a:42:bd:0e:eb:36:47:cc:
         94:9e:25:13:18:06:11:84:c7:14:b7:d5:53:de:f7:8c:2d:29:
         e6:8d:af:45:ba:29:15:72:8c:84:e3:27:8c:b8:8c:dd:61:10:
         29:b4:da:ac:77:36:ba:60:b8:10:d5:bf:ed:5c:5a:75:a4:e6:
         4c:ac:5f:d6:97:3c:66:ea:20:73:aa:8b:64:dd:47:c7:e2:e9:
         62:77:e4:e8:9d:61:6d:44:0c:00:51:2d:cc:c5:e7:99:ea:04:
         90:90:30:37:6c:14:43:72:0d:ab:12:fc:e1:a4:a9:2e:29:18:
         da:2a:24:11:4c:21:fc:7b:b7:7e:db:fa:bf:9c:82:b1:36:79:
         2e:55:4f:92:90:15:d0:b5:dd:2f:78:ce:c3:09:d0:5c:e8:82:
         a8:72:8a:93:12:1e:8a:0d:40:4b:f3:12:76:af:54:e3:56:fc:
         1f:11:c8:cd:24:2b:c5:f1:b6:1f:91:c8:14:de:8b:12:59:84:
         a4:9e:b3:e3:df:30:4c:bf:ad:ca:33:ad:b2:68:1a:68:40:df:
         8e:8b:73:c2:a6:ce:86:28:1a:65:1c:4f:f3:8c:c5:cc:4e:2f:
         97:c9:ac:02:3a:7e:6d:26:76:b2:ad:1f:d6:2f:43:bf:f9:bb:
         12:9a:0d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:40 2024 by rpki-client on console-fra.rpki-client.org