Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9bf2e41d-1de4-3b09-800a-5ebdac11c000.roa
File:                     9bf2e41d-1de4-3b09-800a-5ebdac11c000.roa (raw, json)
Hash identifier:          /1biYMBU4zhXjcHXG4Pu5saIxXUNgLZfmAC3LLKzTig=
Subject key identifier:   4A:0D:6C:D5:10:C0:47:DE:B6:59:98:EA:38:A9:00:9F:6D:A8:D5:34
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA0CD2D5FD0A5A875314C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9bf2e41d-1de4-3b09-800a-5ebdac11c000.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100e:be16::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:0c:d2:d5:fd:0a:5a:87:53:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=4cbf96dd-d7cd-4a42-80c5-7a4456941a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7c:14:14:7d:31:26:90:be:db:a5:68:d1:34:
                    53:f9:aa:0c:11:f4:bf:73:c6:51:0e:cf:af:98:43:
                    ce:ae:d4:93:14:0d:60:24:a6:81:ec:25:ed:43:77:
                    27:5d:fb:35:4a:28:c7:5a:9a:79:5b:0c:36:ce:d2:
                    81:f9:e7:de:eb:15:2a:ce:e2:0c:0c:22:6a:32:3b:
                    b7:72:bf:3b:85:3c:c3:51:ce:47:70:03:cc:29:38:
                    96:d4:84:f8:95:61:53:bd:68:2d:c1:6c:35:93:a8:
                    c4:df:7e:13:de:d2:2f:2b:e0:d8:1c:77:f5:0d:a6:
                    6b:92:c5:d2:e4:5f:27:44:67:5d:96:b1:4c:3d:9f:
                    8c:46:8b:84:00:09:bf:f3:29:25:49:14:e4:a8:a8:
                    9a:37:7d:29:e8:56:7a:83:a5:79:1a:94:1c:4b:04:
                    81:cc:5b:95:50:6a:dd:ab:80:6e:78:71:a4:9b:4b:
                    31:36:25:6e:50:11:2c:69:52:22:d6:e7:53:96:d2:
                    bc:a6:8d:d4:23:5a:2d:42:a1:5b:52:87:85:57:4a:
                    0c:92:b3:f1:84:76:f5:4a:ac:86:44:3d:92:52:3c:
                    9e:03:36:ee:42:1c:67:af:94:98:4e:b5:8a:56:6d:
                    b2:ae:96:7c:d4:6c:8a:6c:61:00:d3:1e:21:32:ed:
                    57:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0D:6C:D5:10:C0:47:DE:B6:59:98:EA:38:A9:00:9F:6D:A8:D5:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9bf2e41d-1de4-3b09-800a-5ebdac11c000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:be16::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:c9:e1:ab:65:51:fc:80:4d:a6:29:72:d4:f2:0e:01:8e:5e:
         4a:f3:95:5f:13:77:2a:d0:ea:d2:59:99:73:e0:bf:66:36:6b:
         a4:9f:f7:bd:f5:63:f9:3e:c6:9e:77:fe:e4:20:c1:06:28:60:
         a0:31:c2:8f:8b:e7:9f:4d:5d:72:4a:38:d3:3c:c6:59:1a:c2:
         6b:a0:14:9b:76:d1:53:eb:08:87:5b:81:fc:e7:2b:f4:8c:6b:
         74:b7:f8:d7:83:97:11:01:fe:11:f6:79:c7:e6:c1:b6:d7:88:
         f9:77:1f:ff:0f:03:08:b3:cd:58:d9:78:52:ab:28:44:f8:3d:
         4f:24:8c:27:cd:38:5f:e5:b4:46:14:17:70:79:2a:7c:c4:5b:
         5e:c7:4f:ad:7d:35:b5:71:3e:89:0d:6f:45:3d:42:10:f9:fd:
         3b:5c:c8:9f:e3:b5:4f:ba:4c:76:fd:10:60:86:55:13:23:b1:
         15:3f:96:00:86:c9:d8:fe:e0:00:b7:aa:ef:22:3a:63:ec:e2:
         1f:0c:f7:9e:3d:72:e6:5f:4c:67:5e:96:46:44:60:7d:4d:93:
         d2:3f:48:7a:07:17:5d:0e:84:4e:62:86:1a:f2:e5:ab:a9:0a:
         c9:50:b1:91:a2:1f:ab:45:0a:44:68:62:26:01:4a:18:b0:b3:
         7b:39:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:41 2024 by rpki-client on console-ams.rpki-client.org