Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d794b78-a2bb-3354-9ba2-0ff77468ceda.roa
File:                     9d794b78-a2bb-3354-9ba2-0ff77468ceda.roa (raw, json)
Hash identifier:          OsIMYgNWt84cepX0OoSByY7bTfQkzzUIBi2zlWOP4xc=
Subject key identifier:   FC:F7:2D:35:C6:F2:8A:8B:D7:F9:78:D0:77:94:0B:A5:55:72:B0:BA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBE17C8140C95674B4FC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d794b78-a2bb-3354-9ba2-0ff77468ceda.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1014:9000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:e1:7c:81:40:c9:56:74:b4:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=9685f9e6-0d30-477f-b6ce-d6668c27261c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:21:2a:8b:49:72:a4:67:24:5f:65:3a:9f:2e:
                    6f:fc:37:1a:4d:b4:b4:1c:81:6e:36:22:5d:33:5d:
                    e5:5a:2c:99:e9:d2:93:70:ba:7a:22:5c:46:ad:7e:
                    8b:a7:3e:cf:86:9f:1f:d6:91:8c:0a:5a:76:cd:1e:
                    fb:ba:d7:b2:d0:3c:aa:42:6c:67:03:28:d9:97:05:
                    09:ba:1f:6b:8e:3b:de:3c:63:11:b4:f5:1d:f7:28:
                    37:f5:01:59:26:31:77:71:3c:02:ea:2d:35:3c:fb:
                    e9:78:37:42:3d:de:23:73:ac:7b:21:34:57:f9:8a:
                    34:a4:f9:fd:8f:82:f9:a9:c2:d4:e3:64:95:82:41:
                    60:74:16:85:97:6b:3a:c4:0b:dd:68:06:e5:9f:82:
                    50:9d:77:89:4d:c2:1e:ca:99:8e:89:bc:02:4b:a4:
                    b9:80:00:65:13:76:56:f2:ef:c3:43:6f:9f:6d:30:
                    ad:19:6b:02:cd:98:4e:83:f8:c3:00:1b:52:bd:06:
                    56:02:3c:25:0e:e2:48:ee:42:91:cc:05:01:8a:b2:
                    c9:76:d8:34:e2:ec:c3:21:ea:1e:9a:91:5f:e7:b7:
                    a9:86:6b:ea:b2:16:f5:fa:51:a4:71:4c:89:98:89:
                    a1:74:df:b6:e4:c8:26:70:30:d8:93:ab:d1:ba:69:
                    0f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F7:2D:35:C6:F2:8A:8B:D7:F9:78:D0:77:94:0B:A5:55:72:B0:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d794b78-a2bb-3354-9ba2-0ff77468ceda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:09:42:36:1b:cb:2e:e0:0d:8e:2e:3d:a1:82:b8:34:fd:86:
         6b:06:01:5b:4a:0a:15:98:99:55:44:3b:9f:e8:40:86:75:8f:
         f9:e5:3e:43:d4:6d:a5:4a:b5:64:d6:ae:58:d5:64:f6:e4:90:
         61:4d:69:71:e3:b3:4b:25:3e:7e:f3:4c:63:ab:7a:22:dd:05:
         cd:fa:a7:f7:d7:8f:25:74:92:92:43:12:c3:99:e2:63:f2:12:
         ff:53:eb:6d:18:5f:7e:c1:62:b7:eb:b2:25:75:5b:61:98:e0:
         33:71:fb:95:9a:8b:de:04:ca:ec:6a:4c:95:7f:82:c1:b4:44:
         f9:58:88:25:f0:8d:03:1f:c3:31:18:cf:ff:6b:38:ad:7f:5d:
         30:ef:99:00:2e:b3:16:04:d4:c2:ec:67:e8:be:09:7d:5e:5f:
         cb:4c:ff:37:73:1e:cd:25:2f:38:4b:5f:c1:5e:0b:cf:ee:4c:
         c7:c9:cd:fe:f2:05:2f:41:dd:e6:4e:4d:cc:8e:5d:03:f4:94:
         09:53:eb:a1:8b:21:a6:27:a5:2e:a2:ea:3e:25:99:c6:c3:fb:
         9a:9d:25:b9:5f:e2:11:10:64:8c:13:ca:a3:61:e1:ee:69:8c:
         bb:6c:e8:ef:f1:b2:3d:2e:9c:85:a8:62:fb:d0:c5:2a:15:58:
         23:24:97:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:45 2024 by rpki-client on console-fra.rpki-client.org