Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e7608fb-88ff-3272-8705-6b9565c9d1c7.roa
File:                     9e7608fb-88ff-3272-8705-6b9565c9d1c7.roa (raw, json)
Hash identifier:          r9sDXCR1MJfj8EcVie5gh8TuY+RsVAd3z3i2XuZCmEM=
Subject key identifier:   02:50:D8:6D:CA:10:BF:F8:D4:02:E5:0C:30:49:E3:07:BC:78:86:C3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBDAAC933C747A62D4BE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e7608fb-88ff-3272-8705-6b9565c9d1c7.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1011:b088::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:da:ac:93:3c:74:7a:62:d4:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=1b628d76-6d72-4a9f-a518-4b98d835da70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:80:8a:7e:33:e9:f5:d1:c2:16:56:75:86:1e:
                    be:9c:13:26:24:1d:4a:bf:a8:58:3b:19:93:d2:b0:
                    d7:7e:97:1b:ee:9d:17:29:f7:c8:b4:d6:19:fb:9e:
                    a5:6c:75:0e:b3:9c:9e:58:7c:ce:02:71:99:e2:2e:
                    f7:40:13:00:3b:7d:b2:77:13:74:e3:e8:6c:51:cb:
                    dc:14:03:d6:5b:19:3f:3c:5d:b7:c9:0f:9d:49:b3:
                    cd:52:07:f2:ae:f3:14:19:b4:46:a5:35:65:ab:a5:
                    c1:3f:57:5a:29:ac:f7:4d:04:8e:8c:0d:1d:b4:6c:
                    26:0b:ef:c2:99:a6:7c:88:da:35:98:9c:2b:09:6e:
                    77:2f:4a:32:4a:6a:7b:a2:b5:9f:62:23:ac:6e:56:
                    89:87:81:a9:31:1d:98:14:2a:fa:c4:41:ef:76:59:
                    87:de:89:ad:c9:40:29:36:25:e5:df:4c:a9:87:c2:
                    e1:58:3d:d2:57:fd:4e:1c:06:36:41:a8:4f:b7:b5:
                    22:d0:04:86:ff:28:c0:48:f1:95:32:8c:77:6f:c5:
                    1d:72:3e:24:6a:07:d1:ca:94:21:c1:5f:6b:e0:72:
                    9f:6a:b5:9a:ff:c6:02:3b:16:5e:50:8c:01:b6:0d:
                    1c:e5:8f:18:26:bb:55:cf:eb:4c:2d:05:b7:e1:20:
                    26:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:50:D8:6D:CA:10:BF:F8:D4:02:E5:0C:30:49:E3:07:BC:78:86:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e7608fb-88ff-3272-8705-6b9565c9d1c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b088::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:22:8d:81:47:68:b3:e5:ea:94:fd:ff:be:66:24:2b:5e:1d:
         be:07:a9:00:4f:91:a3:8b:27:07:57:e8:69:bf:2f:ba:3f:e2:
         7f:fe:6d:77:43:e5:52:0f:af:e4:7e:a9:6e:db:3d:9e:72:bf:
         81:b4:a1:1c:d1:97:bc:a7:11:4a:fc:96:e0:e3:14:1a:60:f6:
         c3:20:dc:66:d1:1c:7e:80:c4:13:5e:e1:b9:a9:bf:74:e5:79:
         58:ae:b6:62:5b:cf:75:a5:b7:fd:35:a1:2d:8c:72:dc:0f:d6:
         2b:f0:74:fe:f1:d8:b1:3a:e8:ea:f8:e4:0f:ef:f5:7b:9c:26:
         05:05:32:89:a8:6a:1a:68:78:f3:3a:a6:08:3b:a3:cc:a7:5d:
         74:b9:20:5e:b7:44:db:7c:c4:51:bc:43:45:49:76:92:e6:c2:
         29:a0:75:3f:23:ed:fc:c1:3a:c8:e1:f6:09:ba:c5:7c:7a:dd:
         c9:af:22:38:94:a2:68:22:b4:06:29:8e:ac:e3:2d:7a:43:6e:
         89:63:f8:8c:34:b9:a6:9d:9e:e1:62:90:ea:13:7e:9d:35:5f:
         e4:a8:4f:51:1d:1d:95:cc:59:97:d9:a4:02:68:cf:c2:87:98:
         3d:79:ad:8b:b9:c1:c6:2c:59:4b:08:f2:e3:cd:89:c1:c5:8d:
         bd:11:4d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:08 2024 by rpki-client on console-fra.rpki-client.org