Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96a66cb2-8b7e-3575-9697-75ac716ca56e.roa
File:                     96a66cb2-8b7e-3575-9697-75ac716ca56e.roa (raw, json)
Hash identifier:          Z3WPUG+NzzR+R+gjlr1WW7FwHAEKXWYlzcODNKN2KDk=
Subject key identifier:   BB:59:8C:6E:F0:97:B0:BA:0E:32:99:30:30:D5:00:BD:DB:D3:76:89
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E4C4AD284ACC0E727F215B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96a66cb2-8b7e-3575-9697-75ac716ca56e.roa
Signing time:             Sat 16 Nov 2024 02:00:28 +0000
ROA not before:           Sat 16 Nov 2024 02:00:28 +0000
ROA not after:            Fri 14 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        2600:1011:a03e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e4:c4:ad:28:4a:cc:0e:72:7f:21:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 16 02:00:28 2024 GMT
            Not After : Feb 14 02:00:28 2025 GMT
        Subject: CN=058c4b36-1d26-45b4-9506-0ef205ed5c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:82:25:ad:ab:b7:34:80:84:cd:a4:dd:c1:ce:
                    99:e1:d3:26:16:6a:30:32:a0:27:28:6a:47:21:8f:
                    4e:8d:3f:25:8c:35:28:14:a1:80:87:b6:cc:0f:34:
                    41:f0:8e:26:05:a4:7d:69:c3:98:9d:1d:5c:d2:1e:
                    6a:20:9a:40:84:f0:63:1e:d4:70:fd:ae:05:d9:69:
                    6c:00:d8:55:96:c3:7d:97:43:f2:0b:97:56:3f:53:
                    3f:fa:cb:2f:f3:31:65:54:16:ff:75:02:e0:7c:0e:
                    a7:48:cc:1b:60:5d:6d:6f:71:59:93:19:4d:a8:61:
                    95:7c:84:cd:c9:3c:b0:08:0a:58:da:04:6f:b0:f8:
                    b3:44:d2:2a:9f:fd:22:85:98:ef:68:11:19:4d:1e:
                    8f:4b:5d:c0:5b:1d:01:59:b2:83:62:91:dc:33:72:
                    66:07:e1:c5:f6:b1:e5:33:dd:ba:85:21:47:cc:12:
                    23:ea:f7:91:3b:b1:c3:50:ef:d7:9c:22:36:0b:be:
                    76:5e:4b:7f:68:80:ab:e1:30:76:a7:61:33:6d:61:
                    da:5a:55:de:2d:a9:e3:8b:7d:64:0a:e1:c2:04:9f:
                    84:4d:e2:72:4b:f6:d8:1c:28:ec:19:12:43:69:89:
                    a1:82:32:20:4a:e9:c9:3e:2e:73:2c:28:6c:52:fd:
                    be:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:59:8C:6E:F0:97:B0:BA:0E:32:99:30:30:D5:00:BD:DB:D3:76:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96a66cb2-8b7e-3575-9697-75ac716ca56e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:a03e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a5:1d:fe:01:66:d1:82:66:53:48:70:cb:dc:db:be:e3:a9:
         81:99:e1:28:b8:5a:44:01:8e:a5:82:6b:3d:43:fd:4e:73:ae:
         d8:72:e5:c7:f7:49:55:fc:e2:98:0f:36:bb:eb:83:05:da:d8:
         ba:91:d2:d9:ee:ec:75:e2:f5:79:d1:e4:7e:a0:98:d2:87:e9:
         f9:5f:81:62:0d:7f:5a:c9:28:a3:0a:b9:c8:13:40:bb:86:a9:
         71:db:a8:63:cb:cd:9f:72:4f:a0:a1:7c:24:56:59:f3:e0:fd:
         02:2b:94:cb:a7:60:c9:13:6a:6b:08:1c:e8:94:21:1a:96:11:
         c6:8c:89:56:41:e2:42:53:77:28:ba:90:d0:4e:9c:9c:ad:d8:
         21:12:a7:c8:d4:b2:8d:67:41:d5:38:44:14:89:c9:84:b4:eb:
         c4:e6:b4:e3:e5:ba:53:8e:bf:7f:f2:06:ec:72:b1:c0:4f:a7:
         f8:df:e4:e2:b1:5a:f3:aa:d2:10:a0:48:39:45:1d:ea:b6:1d:
         52:d6:0e:f7:b2:11:f8:2c:b6:bd:ae:c5:15:a4:41:9d:b9:f6:
         04:b7:bd:a7:5f:9c:46:56:de:6f:03:8a:3a:b0:84:ff:ad:a1:
         5b:74:9c:1c:f7:bc:09:d3:12:1c:ab:2d:dc:b4:bc:53:3f:9f:
         24:ed:3b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:40 2024 by rpki-client on console-ams.rpki-client.org