Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b65dc776-740d-3a54-9fc9-9d7742c0c614.roa
File:                     b65dc776-740d-3a54-9fc9-9d7742c0c614.roa (raw, json)
Hash identifier:          QmISZunU7lWsgQzy1doa2WGqXkxXc40yT1/bdCZaeHM=
Subject key identifier:   5A:B1:06:F0:97:73:3E:A8:CF:06:74:4F:34:9A:98:12:64:8D:D5:99
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA0B0C92498CA43B53A900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b65dc776-740d-3a54-9fc9-9d7742c0c614.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100e:b130::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:0b:0c:92:49:8c:a4:3b:53:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=0261d1bd-6a65-4308-9344-f5b4924ceca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:51:b6:fe:b6:71:b5:38:17:25:6e:ca:ff:
                    8b:b9:07:1c:e1:07:14:ad:0b:dc:12:6e:eb:49:cd:
                    c5:76:04:8b:3a:fc:80:23:b0:bd:3e:5a:05:9b:dd:
                    7a:f7:85:cb:7f:f3:63:93:d7:e1:15:c6:12:49:a3:
                    03:b3:b0:a9:b2:20:39:f0:12:6a:73:27:12:ed:be:
                    9a:45:0b:eb:06:08:61:97:65:c2:d3:48:5d:40:07:
                    d9:a7:0f:a4:12:af:48:4b:97:09:b8:be:65:b9:33:
                    90:8d:29:e5:33:0b:80:dd:3f:22:45:70:10:a8:2f:
                    95:a4:a2:64:5b:99:34:9b:65:ea:4b:10:c5:97:67:
                    6f:b2:99:26:03:6e:2e:5e:b9:bb:bb:38:ca:ef:ce:
                    6d:1e:6c:ac:8b:b0:a5:53:aa:48:ec:dc:d8:28:3c:
                    66:36:35:10:cb:74:d2:f7:c8:0e:b4:b1:c5:c6:68:
                    91:de:7a:86:6d:a1:55:f5:ac:d9:c4:d2:6d:0d:44:
                    0b:43:e1:e6:e0:e9:a4:40:e3:e3:0d:dc:3d:29:52:
                    9d:a1:08:ee:58:cd:b7:a9:93:3e:8f:ed:24:c2:bd:
                    c3:f4:fa:51:ce:d1:d3:e4:c5:cb:94:43:cd:89:a1:
                    db:f4:87:ce:d6:02:27:51:82:e8:1c:18:e8:75:f0:
                    67:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B1:06:F0:97:73:3E:A8:CF:06:74:4F:34:9A:98:12:64:8D:D5:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b65dc776-740d-3a54-9fc9-9d7742c0c614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:46:70:1e:47:2a:f7:9c:1c:08:4a:46:25:ff:23:11:44:bf:
         07:15:b1:92:bc:72:01:1a:7c:a7:5c:b3:aa:69:8a:d7:21:1b:
         39:fc:57:e5:ea:aa:4d:c6:1b:4b:d4:1d:c3:c2:19:c6:60:cf:
         17:46:4a:fb:b3:3e:cf:03:2c:73:8b:69:bd:d8:38:74:1f:c8:
         13:36:ae:1d:1f:9b:fb:d0:5e:8f:2c:b2:e6:f2:cc:71:91:a6:
         22:97:f4:14:2e:34:8a:1d:78:d4:70:6b:63:f9:5d:28:c9:d9:
         e8:71:a5:d2:b5:64:8e:64:5c:aa:eb:b2:7a:31:3c:77:9a:79:
         9c:77:05:a2:56:8a:d1:3a:22:42:d4:23:bc:65:c2:ad:a7:2f:
         c6:26:bf:69:03:90:40:e5:36:c8:ef:c7:ce:0e:0b:92:67:93:
         f8:3e:27:c4:8f:b4:26:a2:98:85:d0:e1:3f:f1:d9:65:3b:ff:
         f4:90:59:82:54:84:5a:d7:e5:6d:fb:a5:d1:b3:4b:f2:bd:af:
         f8:c4:f5:ec:88:15:b6:35:50:17:81:50:9b:6c:5b:d0:a9:d0:
         61:72:f2:fe:89:83:dd:1a:5d:2f:3d:84:d8:77:52:11:65:c8:
         af:bf:8a:1e:b8:d0:8d:af:81:ff:7b:fe:3e:82:cd:62:e5:b3:
         0a:ce:67:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:50 2024 by rpki-client on console-fra.rpki-client.org