Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5565172-8c33-3399-a5ce-39948b4790f3.roa
File:                     a5565172-8c33-3399-a5ce-39948b4790f3.roa (raw, json)
Hash identifier:          kLtqYhSe4rbbwqJ1kbKSnMgoscNLhzo3tblYBLZyq7Q=
Subject key identifier:   54:70:3E:46:B3:8D:1C:8F:FA:46:3D:74:FE:E3:03:56:16:90:3D:3D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846E3E18F2CF9C04B644EC37000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5565172-8c33-3399-a5ce-39948b4790f3.roa
Signing time:             Fri 16 Aug 2024 01:35:59 +0000
ROA not before:           Fri 16 Aug 2024 01:35:59 +0000
ROA not after:            Thu 14 Nov 2024 02:35:59 +0000
asID:                     6167
IP address blocks:        2600:1009:b040::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:e1:8f:2c:f9:c0:4b:64:4e:c3:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:35:59 2024 GMT
            Not After : Nov 14 02:35:59 2024 GMT
        Subject: CN=4e97966c-6186-4177-8691-ee6785a20769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:84:94:0c:c6:47:f5:33:28:e3:9e:3d:97:ad:
                    f0:db:26:65:a9:d4:89:a7:0b:aa:42:aa:d1:3f:4c:
                    97:f0:50:1f:94:01:48:4c:14:f0:5a:31:b0:44:14:
                    37:b0:42:be:da:64:9b:31:7f:9e:34:0e:86:60:96:
                    00:04:d0:11:cf:6d:93:87:3d:7b:da:b9:38:94:a2:
                    c6:6c:b9:71:49:11:3a:e1:54:3c:c6:b4:25:ec:64:
                    28:53:5f:2b:ab:60:4c:61:1d:88:09:0c:12:82:25:
                    ca:74:ea:95:cf:62:fc:3c:ab:33:ed:98:4b:a2:14:
                    ff:9d:b8:d0:7e:e5:f7:3c:cf:a5:7b:e1:db:a6:95:
                    d3:93:36:e7:81:e4:4e:06:8b:7b:c7:f9:c6:56:cb:
                    90:ce:9a:e5:37:c3:8c:ff:0b:8d:35:c1:5f:24:ee:
                    5d:00:c9:d5:a8:70:c2:d7:7c:44:f8:10:12:27:02:
                    39:56:3f:c2:0d:7f:9b:c0:43:6d:18:ae:37:40:4e:
                    11:b9:db:1b:d0:d6:cf:a4:7b:b4:68:ab:4e:5f:95:
                    68:f3:75:92:ea:e6:c5:ad:27:95:13:af:58:1a:37:
                    a7:98:23:da:ef:db:b5:81:8f:df:12:ae:e5:c4:c9:
                    78:b2:48:96:45:95:c7:06:cb:af:af:81:3b:62:1a:
                    e3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:70:3E:46:B3:8D:1C:8F:FA:46:3D:74:FE:E3:03:56:16:90:3D:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5565172-8c33-3399-a5ce-39948b4790f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ed:bc:b0:fd:7e:dc:d7:13:7c:2e:c0:2c:e6:91:f7:7b:e6:
         c8:bb:d0:12:1a:64:f2:66:9c:80:10:19:40:60:b0:3f:a8:03:
         34:e8:ef:72:2c:bb:b1:69:0b:61:3d:4b:f8:6c:de:ce:6c:d6:
         14:ca:24:f3:ea:69:dc:c8:cc:9b:4a:d1:02:c4:0c:4a:d7:30:
         21:09:f1:cf:a8:df:b0:76:21:13:23:d4:8b:76:d1:25:58:d1:
         39:37:0b:ae:0e:e2:cc:ac:6b:e4:3f:11:8c:b2:b9:b0:98:ca:
         c0:60:8f:c6:e5:37:88:a7:35:f2:7a:96:e8:22:1c:c5:bd:60:
         e7:27:fa:50:18:0e:78:9d:05:dc:f6:e4:45:61:ef:85:9a:7f:
         0d:60:a4:22:a5:0c:8c:6f:b1:ef:09:f7:df:fb:2b:3b:79:be:
         a2:43:f0:bf:b2:09:7a:b6:b9:6a:74:b9:c1:d3:8a:46:b7:a1:
         2f:6d:49:eb:2b:83:1a:6f:54:b1:89:47:b3:8d:84:6f:0c:1f:
         15:e0:ca:60:ba:a8:1d:d5:84:86:98:00:f0:93:a5:6a:fd:27:
         2a:e1:6b:0b:c1:69:9c:82:47:ae:f2:4e:8b:2a:a4:64:4a:28:
         3f:af:16:01:25:23:f3:d1:c2:3d:46:b1:73:4f:5d:67:07:fd:
         d2:28:77:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:52 2024 by rpki-client on console-ams.rpki-client.org