Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98c9fce3-4d94-358c-b678-fb213b43883b.roa
File:                     98c9fce3-4d94-358c-b678-fb213b43883b.roa (raw, json)
Hash identifier:          zTI+je5sbuHVBh9hPjO3vxaX+QRk1udk1FLFJ0geSSQ=
Subject key identifier:   1C:00:F8:DD:1E:30:34:0F:A6:E7:5A:C8:98:C6:D7:79:88:0B:78:1C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76A2D480092BA9B80498B0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98c9fce3-4d94-358c-b678-fb213b43883b.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1005:b0c0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:a2:d4:80:09:2b:a9:b8:04:98:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=a751620d-5fc7-4163-a05a-a7744d1896ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d5:8b:5f:02:52:81:a2:3c:80:e1:89:be:ed:
                    0e:7e:6d:72:4c:59:8d:7e:b8:74:6c:6b:b1:c4:ac:
                    65:dc:2b:fe:45:fc:96:60:20:6b:c6:5d:d5:7b:73:
                    8e:58:a2:98:f0:ae:de:4b:33:2b:4a:9f:3d:66:db:
                    91:ba:99:1d:d7:b9:f5:8c:96:78:7c:bd:c2:e1:70:
                    ca:a8:dd:c5:99:8c:92:f8:26:de:8a:56:21:1f:e4:
                    36:7f:fa:de:04:69:4b:95:30:b4:02:b8:3c:09:74:
                    99:2f:d5:90:f9:55:f3:4c:58:c0:cc:95:3f:a6:05:
                    81:f3:47:12:b8:0f:43:45:e4:99:7f:d6:4d:99:2c:
                    6e:c6:c2:c0:e3:aa:37:2d:9a:bb:9b:33:a4:40:e0:
                    30:16:06:26:d4:95:43:70:09:38:e9:4e:d4:eb:53:
                    b1:c2:45:7b:23:cf:62:9c:c5:df:87:b1:c1:ae:23:
                    64:09:42:b9:39:23:01:b6:48:fe:ea:2c:2d:3c:86:
                    30:f0:e7:97:27:e5:17:71:68:93:a8:e1:01:e7:90:
                    e8:96:9e:ca:f0:35:68:70:38:c8:2e:0d:e2:e2:ba:
                    5c:c2:e3:54:66:19:63:0c:4d:3b:02:c0:aa:b7:7d:
                    35:fc:ac:06:86:53:73:8e:51:6c:2b:2d:37:ad:8a:
                    37:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:00:F8:DD:1E:30:34:0F:A6:E7:5A:C8:98:C6:D7:79:88:0B:78:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98c9fce3-4d94-358c-b678-fb213b43883b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:b0c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:9e:4c:b1:57:1a:09:9c:e3:a9:08:99:48:49:9d:69:c5:27:
         a7:50:ad:9d:82:5e:1a:fa:74:eb:3a:4d:0d:dc:06:76:3e:3a:
         e9:17:72:f2:b1:31:8b:51:82:76:c5:d0:78:72:f9:f5:dd:ca:
         df:d2:4a:96:6d:71:f1:e2:5e:3d:38:00:d9:a0:84:41:68:68:
         fd:c7:91:5b:6a:c2:b1:e3:df:76:78:a4:35:96:ad:23:82:93:
         a0:a0:8f:3f:35:a3:fa:02:d7:ab:6c:66:50:9b:9a:e4:e8:0c:
         bc:a6:25:7a:9c:1a:fa:ed:c1:ad:47:3f:99:07:63:86:37:a5:
         15:9d:fb:54:32:9c:1b:28:67:46:0b:99:d5:ec:fd:26:68:95:
         db:1f:62:a3:c7:54:1e:b5:ab:bb:4f:99:7f:ca:cd:b5:34:f1:
         eb:06:c9:27:b1:1e:a0:ca:ce:4a:67:87:c8:3d:fb:b8:fa:04:
         86:5f:b9:ac:81:0a:24:da:cd:b8:01:3f:42:7d:90:b3:01:c4:
         4f:bd:59:4b:28:2f:11:e3:96:4b:2d:b4:d4:b7:b9:16:bd:1a:
         fc:0e:11:07:a0:9b:0f:83:75:bb:0c:41:e2:e0:85:27:2b:85:
         d5:4e:0e:92:b4:13:ba:e4:95:dd:85:5d:ad:64:ac:16:12:6a:
         ac:77:7e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:49 2024 by rpki-client on console-ams.rpki-client.org