Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0eeaa64-8318-3f47-9215-091ed186df18.roa
File:                     b0eeaa64-8318-3f47-9215-091ed186df18.roa (raw, json)
Hash identifier:          mGtWDXdwvSaOQMN2IjbWIXEWm5Uc67sRRzehq0N0RUM=
Subject key identifier:   F8:E7:13:D2:B8:D0:FA:63:A4:F2:68:D9:5D:38:62:A5:3C:3B:2E:52
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBE244001B7C41C4BDE5C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0eeaa64-8318-3f47-9215-091ed186df18.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1014:b010::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:e2:44:00:1b:7c:41:c4:bd:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=29169554-b432-4547-acf2-da3eae483eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bf:7a:0c:f4:88:53:5f:2d:fa:f2:c1:20:62:
                    b3:ed:34:02:b9:69:46:5b:8d:e3:f5:9d:c0:bb:40:
                    d6:65:96:88:d2:5b:b5:7d:18:ac:75:ad:8e:3b:2e:
                    08:93:59:bd:38:a5:f1:ef:15:6b:40:91:b2:02:87:
                    ab:cf:60:71:fd:dc:e6:5d:9c:13:81:df:ed:3a:ad:
                    af:12:56:80:dc:62:63:69:58:40:c4:6a:43:cc:ee:
                    58:fb:bd:7b:0d:55:2e:dc:bf:da:32:d7:ba:2c:a1:
                    86:78:94:2f:f6:61:ec:2a:b4:52:5f:b4:29:cb:59:
                    e0:5e:4d:56:8c:ee:ab:09:92:42:f7:a3:81:bd:0f:
                    7f:7e:62:2f:44:8f:90:3d:d1:90:67:b7:44:b7:ab:
                    da:4a:28:10:03:03:52:6e:09:41:4b:47:5c:dd:98:
                    6c:ed:e6:ec:5f:b9:b8:f1:74:17:a7:2d:89:01:19:
                    26:62:76:a0:e9:dc:ae:50:f7:45:09:4b:84:7f:fa:
                    72:a5:aa:7e:87:e5:7f:84:af:b2:35:13:27:93:70:
                    f0:f5:b7:30:a9:72:a8:88:92:9c:05:8d:62:d0:78:
                    67:7b:f8:1c:6b:9b:da:88:9d:8b:ab:db:91:99:37:
                    34:ad:99:9c:38:0b:a9:cf:02:38:13:d8:70:36:a8:
                    3b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E7:13:D2:B8:D0:FA:63:A4:F2:68:D9:5D:38:62:A5:3C:3B:2E:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0eeaa64-8318-3f47-9215-091ed186df18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:91:94:09:11:62:3d:87:49:0b:8a:18:ae:28:df:a6:8b:dd:
         2d:ea:4f:f3:3b:c1:b4:10:be:e3:93:e6:31:db:be:c9:18:e5:
         c7:b0:85:88:c0:80:2a:64:b7:cf:22:43:2f:12:9f:8f:65:bb:
         47:02:4a:32:97:8d:77:b5:cb:65:b4:ed:f5:26:8c:27:47:10:
         da:1d:92:3f:28:5f:47:06:68:95:f8:72:a7:f6:89:4e:a3:4c:
         78:bf:99:cd:05:76:37:8f:9e:f4:a3:55:1d:8a:9d:e7:d3:44:
         d1:28:27:82:4c:7d:e0:4a:5c:ca:27:49:e6:c4:aa:da:19:47:
         1e:e9:34:72:e6:dc:a4:2c:47:63:a7:ed:91:ca:7e:5b:15:ae:
         4a:48:df:e5:cf:9b:43:c4:84:a1:20:8e:0e:f6:45:50:4a:4b:
         13:8a:6f:ac:8d:df:47:d7:82:31:4b:ae:49:51:fd:06:dd:48:
         a9:fc:74:6c:96:b8:83:17:e2:c2:1f:e0:6f:63:18:2e:12:be:
         f8:fa:1c:6f:dd:5d:8f:d6:88:45:60:5b:76:b0:ab:e3:ca:df:
         0c:25:9a:09:71:b7:bf:e9:4c:37:ff:03:f7:ff:72:8f:db:c3:
         dd:a9:a1:f3:75:cc:92:e8:81:d1:82:76:51:29:5d:cb:96:9c:
         01:98:cd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:44 2024 by rpki-client on console-ams.rpki-client.org