Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ca328e4-ba7c-3c8e-b2f9-a17871f0a638.roa
File:                     8ca328e4-ba7c-3c8e-b2f9-a17871f0a638.roa (raw, json)
Hash identifier:          EkKZXOeZGfytzP3OVzXbeRS6sR1BAAF9M27JeIcblSw=
Subject key identifier:   56:2D:5C:C3:31:4F:76:62:4F:27:0D:4D:2B:ED:E2:AA:3D:35:93:6B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4A9FCB9C790B3F4B659DBD0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ca328e4-ba7c-3c8e-b2f9-a17871f0a638.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100a:d000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:a9:fc:b9:c7:90:b3:f4:b6:59:db:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=67d4bb26-d0d1-450e-bace-a02d71b5cda9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4f:0b:41:36:78:47:77:03:8e:56:70:96:89:
                    33:ec:91:14:7b:0e:ab:05:9e:a0:d3:35:a8:41:69:
                    c1:8b:34:eb:1a:3b:a6:cb:b4:2b:c6:52:f1:5e:29:
                    35:66:50:80:45:ee:5f:d8:7a:b8:60:05:67:37:0d:
                    75:7a:56:c1:c7:95:4e:2b:5a:46:c1:b1:df:cc:e8:
                    30:98:9f:7e:b8:19:99:a1:59:b9:67:bb:83:13:2d:
                    83:b7:f9:c7:31:0e:0d:43:c2:d1:28:c1:bb:2d:be:
                    e2:49:9f:99:16:bd:16:8b:05:3a:8b:d8:af:ab:4c:
                    e5:43:bb:bf:d2:6f:f5:a2:a3:27:aa:b0:68:09:ee:
                    2b:26:12:ae:8b:7c:88:c7:ff:45:b8:f6:2e:1a:36:
                    02:33:c5:3b:58:96:83:66:9f:4b:6c:ee:b1:e6:7d:
                    89:c5:a9:ab:cd:0b:7d:dc:a8:65:00:bd:69:0d:0f:
                    d1:13:3a:b3:1d:dc:20:e9:d0:fe:85:b8:2d:07:80:
                    ec:26:dd:43:bd:ff:24:66:f5:5f:4a:d5:36:15:8c:
                    26:60:fe:a0:c7:35:86:61:48:7d:1d:89:49:01:6d:
                    25:42:a5:8c:94:8e:a4:51:29:45:dc:cf:10:b6:34:
                    da:e5:07:9f:83:56:0a:fb:0e:4e:2f:c2:51:28:12:
                    ab:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2D:5C:C3:31:4F:76:62:4F:27:0D:4D:2B:ED:E2:AA:3D:35:93:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ca328e4-ba7c-3c8e-b2f9-a17871f0a638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:5f:5c:c6:df:35:0f:95:83:50:ea:d8:bf:42:5c:c0:53:30:
         89:83:4a:3c:29:b6:a7:78:a0:52:da:57:ef:29:3f:37:17:8f:
         2f:a0:ec:9d:79:9b:a6:e8:05:c4:2c:8d:81:5b:50:a9:f4:7b:
         52:75:de:42:5b:9f:9f:e7:39:0e:b0:07:0f:b5:4b:c8:3f:2e:
         b1:a5:8f:b2:ef:2d:3a:06:fa:3b:b8:1c:13:ae:ac:74:b3:4e:
         4a:a0:7d:e3:85:64:03:c3:a5:e9:cb:dd:5d:1f:a1:d3:56:b1:
         eb:27:45:a0:8e:29:56:83:27:f0:77:88:00:2e:a2:b8:02:ff:
         5d:1a:91:ca:9d:8d:27:b4:cf:0f:54:3a:c9:2e:c0:ee:c6:c4:
         59:05:85:dc:ac:76:fa:d5:a1:d9:66:fd:04:67:a6:ab:8a:41:
         25:4c:07:11:ca:be:86:e9:de:14:2c:59:2a:17:82:1a:41:82:
         47:c7:a9:a8:28:b1:9a:4c:68:4f:d3:ee:85:2c:48:d2:a8:76:
         17:50:4b:29:af:10:96:2e:bc:07:55:a9:d7:e9:19:71:e0:63:
         f8:88:b2:03:65:cb:c5:c2:7d:4e:e8:3d:44:2b:cb:18:9e:8f:
         2a:94:b0:fa:0a:13:d9:bb:34:10:d7:1f:0e:05:cb:2f:65:12:
         45:79:e7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:38 2024 by rpki-client on console-ams.rpki-client.org