Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aef7cc73-647c-3991-9eaa-9e60029072f6.roa
File:                     aef7cc73-647c-3991-9eaa-9e60029072f6.roa (raw, json)
Hash identifier:          wdKOwBWEUGm4/S7likuLLyqu0XF0fN0FL3e4aZEJZ9M=
Subject key identifier:   1A:65:46:7B:BB:0B:9A:35:93:23:FA:77:1B:A5:96:7B:8E:BD:2F:38
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBDB7B14D88BA7F5DE4DBB
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aef7cc73-647c-3991-9eaa-9e60029072f6.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1011:b180::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:db:7b:14:d8:8b:a7:f5:de:4d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=986d238f-267e-4af9-aacb-96ce286cbf1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e7:3a:f8:a1:8e:0c:c6:29:c2:28:75:37:32:
                    bc:9b:be:23:fa:e8:03:2e:94:a8:a1:67:9f:29:76:
                    d2:38:4f:9a:2b:2e:44:8c:5b:47:0a:9e:f0:68:50:
                    19:51:60:d3:c9:6c:0e:91:47:89:7c:77:44:3f:4e:
                    54:ef:25:13:eb:c0:b0:ae:ad:52:72:44:0b:8a:9d:
                    f9:ea:82:3e:06:be:66:81:e2:a9:b4:47:61:89:80:
                    bb:ce:79:39:1b:09:ee:11:29:42:79:f8:21:6d:93:
                    a9:c1:d3:c8:45:a4:9d:38:79:fc:61:11:57:d7:fe:
                    c4:c0:69:ab:ee:59:7d:ca:e3:d7:1e:09:ae:9c:7f:
                    da:a1:0d:15:0a:5b:2b:74:3e:9d:10:97:64:02:d8:
                    42:01:75:02:28:c2:3d:6c:f5:3d:f1:d7:76:cb:f7:
                    47:e5:0a:72:f4:b1:b2:28:3a:e8:1e:cf:7f:3f:ec:
                    73:eb:8c:dd:2f:3b:14:37:7d:69:f9:fb:c1:e7:b1:
                    3c:c5:b7:d4:b7:17:67:a7:f9:7c:8a:70:64:46:a3:
                    e4:d1:19:88:35:3c:1c:43:5d:a6:61:e0:90:64:eb:
                    41:73:8d:b0:18:d3:cd:fa:4e:3b:49:d8:00:9a:a3:
                    c9:da:c5:13:c5:4a:99:69:fb:8f:87:cd:ef:fd:30:
                    60:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:65:46:7B:BB:0B:9A:35:93:23:FA:77:1B:A5:96:7B:8E:BD:2F:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aef7cc73-647c-3991-9eaa-9e60029072f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b180::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:d2:8f:f5:ea:f5:dc:f8:b5:dd:00:52:a5:e7:94:71:71:46:
         94:db:c5:13:93:41:eb:fe:74:d1:a0:bd:a2:96:0a:6f:fd:69:
         64:86:68:b8:96:76:9e:3d:ea:28:e3:a5:fe:03:cd:2f:b0:3d:
         13:f0:84:ca:b6:71:56:15:5b:49:dc:3a:71:42:dd:72:7e:a0:
         be:d2:c8:89:36:6c:e3:0f:b0:79:db:b1:4a:b2:da:95:58:4f:
         ed:cc:03:87:73:83:cc:4f:9e:81:4e:2d:ec:24:d2:d3:b2:11:
         1c:9b:35:27:b4:b7:9a:3e:99:52:ed:bf:51:a3:82:f9:99:fa:
         fe:03:28:a1:e1:24:e8:64:7f:46:b6:7c:3b:6c:95:84:42:99:
         0e:4a:99:7f:7b:c6:fd:de:dd:65:d9:4c:e3:ba:fb:73:a1:e4:
         fd:ab:bc:a5:78:81:0a:fc:e9:dd:e7:16:e4:13:ab:ac:ec:e3:
         96:75:0f:b4:a8:d7:d2:0e:51:fc:8f:24:a3:68:05:da:c3:f7:
         22:c1:f9:cd:e2:04:cc:7d:e9:9b:a2:a2:fd:9d:c7:5b:d8:78:
         97:03:4e:3b:e7:82:bf:b0:27:ca:03:47:be:6c:58:71:41:ec:
         32:26:60:0d:d4:b5:a0:a7:83:b0:4c:31:22:26:c4:d0:a7:15:
         ba:11:06:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:48 2024 by rpki-client on console-fra.rpki-client.org