Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8768933b-2072-32c9-9d86-8c66c1aab801.roa
File:                     8768933b-2072-32c9-9d86-8c66c1aab801.roa (raw, json)
Hash identifier:          6MCbWan3kw4H42QoXfyYU54XgNcRtIy27Y6UDurWdyA=
Subject key identifier:   E0:D4:AA:24:C1:C4:5F:ED:F1:77:50:07:5F:4E:81:30:8B:3F:29:F7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D769B5831D967660EB506C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8768933b-2072-32c9-9d86-8c66c1aab801.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1003:b4f0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:9b:58:31:d9:67:66:0e:b5:06:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=145a253a-f610-43b3-9f52-048f1458d95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:68:bd:56:2a:67:db:c2:d6:8b:c0:78:28:56:
                    43:06:b5:a6:b4:af:d8:40:7b:e0:ef:3c:ce:b9:59:
                    6e:03:50:e5:d8:bc:8c:4a:4a:b1:8f:1c:73:9e:cc:
                    ab:4c:b1:f7:e4:7c:6e:69:c9:9e:0d:4f:27:24:a4:
                    67:80:99:89:9d:ac:4a:f7:92:d4:8f:26:42:c5:dd:
                    42:b7:ff:0c:d2:73:e2:70:e1:28:da:c7:cc:99:0b:
                    d5:50:ad:c5:12:d7:51:6d:40:1d:9b:81:a8:54:c9:
                    69:36:17:e7:44:93:77:0a:7a:78:89:04:59:c6:52:
                    e0:49:ca:cf:91:34:4c:51:06:64:a3:ea:54:2e:48:
                    a9:97:93:99:6e:8f:ba:ca:82:55:5a:df:5f:95:53:
                    49:d6:b7:f4:8b:67:73:f6:73:e6:cb:cd:bd:8b:d2:
                    e9:c9:42:9f:69:a9:ff:2a:e0:76:a0:13:39:6e:dc:
                    f0:9f:7a:d2:59:39:e1:85:77:fd:e8:93:92:d7:c0:
                    98:f7:ba:38:d9:6c:db:90:dc:9e:43:e6:8f:b6:57:
                    86:bb:25:13:b7:1d:00:5e:f9:14:b7:03:a5:ba:23:
                    26:9b:49:b4:a2:79:3d:5b:82:19:e8:73:10:76:e0:
                    85:0d:b4:76:88:ad:aa:ab:0a:e7:4f:aa:5c:32:d7:
                    b8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D4:AA:24:C1:C4:5F:ED:F1:77:50:07:5F:4E:81:30:8B:3F:29:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8768933b-2072-32c9-9d86-8c66c1aab801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b4f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c7:e7:4c:78:29:26:02:16:05:6b:a5:fc:e2:8a:5a:f1:ad:
         5f:56:1c:4c:b9:b8:70:06:99:cb:e0:bc:f6:b4:ba:93:ec:0e:
         1d:e0:2f:da:ac:5a:b9:84:c2:68:1e:2a:61:be:28:d0:a4:bb:
         69:a1:2b:17:7d:3b:32:b8:b5:65:b9:0e:24:ae:87:76:5d:2f:
         7e:e4:f5:1e:e8:2c:d7:ac:f4:6b:42:02:c1:ec:22:68:c7:ed:
         f3:e4:52:a2:07:9e:f2:91:34:ed:73:56:d0:f2:73:fa:3b:ca:
         c0:d4:da:52:8a:29:6b:b3:6a:a6:0d:88:4b:9e:4b:d6:31:8e:
         62:a1:2b:62:c3:e2:c9:64:f2:82:6e:ee:56:6f:12:50:84:36:
         5a:29:ee:ce:7c:2d:4b:78:b8:5f:88:7d:b5:a3:05:41:27:88:
         cf:42:c8:c4:8f:ad:b0:df:c0:7c:c5:9e:b4:62:59:d2:eb:04:
         df:8f:5a:75:d7:47:8f:0e:99:dc:f3:90:4a:ba:73:ce:2e:fc:
         9d:ac:37:ce:b4:c7:10:68:2b:c8:28:03:f7:f7:50:ba:2d:3c:
         86:ac:3e:13:f7:4e:fd:20:c1:bd:2b:59:81:0c:f1:bd:74:7c:
         8a:3f:d2:96:82:24:95:69:89:15:98:05:f7:71:9f:c0:17:95:
         c3:13:53:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:41 2024 by rpki-client on console-fra.rpki-client.org