Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b74126e9-5b9d-362b-9a6a-b4c360d25411.roa
File:                     b74126e9-5b9d-362b-9a6a-b4c360d25411.roa (raw, json)
Hash identifier:          +LcD8UVdyupCkc+rLkSjm8TOuZSUZ5M6m9zk0yQCYD4=
Subject key identifier:   58:61:69:97:6F:F5:ED:E0:3B:10:F9:78:CC:82:F4:5D:C8:D6:B6:90
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846E3E21D41C12ECFC47B7533C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b74126e9-5b9d-362b-9a6a-b4c360d25411.roa
Signing time:             Fri 16 Aug 2024 01:37:06 +0000
ROA not before:           Fri 16 Aug 2024 01:37:06 +0000
ROA not after:            Thu 14 Nov 2024 02:37:06 +0000
asID:                     6167
IP address blocks:        2600:100e:bf12::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:e2:1d:41:c1:2e:cf:c4:7b:75:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:37:06 2024 GMT
            Not After : Nov 14 02:37:06 2024 GMT
        Subject: CN=a23e47f2-1cd4-4674-b6c8-6289b8186b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ba:8f:4c:c6:4f:83:65:66:e4:83:5c:d3:fa:
                    b8:22:db:93:22:96:9b:04:3c:9b:58:93:b7:67:aa:
                    50:69:46:f2:f2:9d:8e:6b:ab:ee:15:10:6d:4d:d0:
                    4a:bb:a2:7f:df:5a:8e:b1:35:51:db:af:e3:40:df:
                    09:2c:08:84:35:69:f8:89:8f:36:89:f6:c8:7c:c5:
                    8a:2b:bc:6e:11:ab:c2:c3:61:8a:ca:76:f4:47:88:
                    0d:28:f1:27:ab:b1:be:04:bb:2d:08:a3:a7:bb:1b:
                    a6:1e:2b:50:63:86:9f:48:b9:ac:8b:63:4f:7e:74:
                    97:8d:09:e2:63:8a:f6:df:31:d9:fb:98:b4:77:80:
                    5d:1b:c7:d1:af:b1:b3:95:04:bc:91:d2:3a:5a:7f:
                    15:00:64:d8:2a:42:49:25:65:8f:2c:4f:e7:0a:1c:
                    2f:43:cd:71:b8:84:9d:06:c2:92:d0:c3:7c:f8:f9:
                    0c:4f:34:c2:8c:4a:67:74:95:f2:a1:ca:ed:99:be:
                    9c:99:f3:38:d5:41:3f:62:fe:d7:a5:a3:0c:c5:0a:
                    a7:78:12:e4:29:7c:af:28:54:e2:3e:d4:31:1c:a3:
                    e0:d8:97:95:d7:0b:e4:f5:a7:58:3a:5e:1b:b8:a6:
                    63:3b:e4:68:7b:13:b1:8b:29:23:fd:10:89:aa:08:
                    50:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:61:69:97:6F:F5:ED:E0:3B:10:F9:78:CC:82:F4:5D:C8:D6:B6:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b74126e9-5b9d-362b-9a6a-b4c360d25411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:bf12::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:54:01:a9:21:7f:4f:ab:f2:28:a0:25:10:84:f2:93:3e:50:
         d7:7a:ac:b7:bd:b8:b7:ac:fe:73:df:81:f7:b4:5a:b5:95:f1:
         52:b7:25:cb:c5:48:9d:a9:e9:d7:40:33:c3:aa:a6:d4:4d:1f:
         ef:63:82:50:9c:1f:81:56:33:1a:a0:f5:57:c4:3c:1c:82:9b:
         2a:9d:3e:dc:5c:ca:ad:dd:62:15:8d:8a:42:af:48:b5:6f:3e:
         c4:d7:bd:0e:50:70:05:7f:b4:e8:f6:5e:a7:c6:0b:a4:56:29:
         dd:19:dc:8d:24:6c:72:58:4e:9b:5b:2f:06:27:3a:f3:c7:07:
         d1:c6:73:e0:eb:48:b2:8e:6c:06:f9:ec:65:63:a1:95:32:05:
         d2:99:9c:6f:35:9e:1a:c6:ba:f0:bb:ad:ec:58:cf:36:5a:75:
         6f:81:34:41:65:f0:a6:d8:90:4b:bf:c8:93:fc:ef:fc:a9:9d:
         27:2e:6f:a3:19:f1:bc:e9:19:62:50:43:5d:f1:07:06:7e:80:
         18:7e:c3:42:72:1d:14:bb:d7:d5:8f:87:42:f5:45:a8:21:df:
         12:e4:1d:ac:f2:4b:50:68:8f:1e:0a:b5:41:4b:b1:bf:a1:af:
         dc:db:03:bd:64:aa:ab:93:1d:86:2c:f0:76:25:01:9d:bb:27:
         78:97:12:00
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEbj4h1BwS7PxHt1M8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDgxNjAxMzcwNloXDTI0MTExNDAyMzcwNlowLzEtMCsGA1UEAxMk
YTIzZTQ3ZjItMWNkNC00Njc0LWI2YzgtNjI4OWI4MTg2YjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLqPTMZPg2Vm5INc0/q4ItuTIpabBDybWJO3
Z6pQaUby8p2Oa6vuFRBtTdBKu6J/31qOsTVR26/jQN8JLAiENWn4iY82ifbIfMWK
K7xuEavCw2GKynb0R4gNKPEnq7G+BLstCKOnuxumHitQY4afSLmsi2NPfnSXjQni
Y4r23zHZ+5i0d4BdG8fRr7GzlQS8kdI6Wn8VAGTYKkJJJWWPLE/nChwvQ81xuISd
BsKS0MN8+PkMTzTCjEpndJXyocrtmb6cmfM41UE/Yv7XpaMMxQqneBLkKXyvKFTi
PtQxHKPg2JeV1wvk9adYOl4buKZjO+RoexOxiykj/RCJqghQ7QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFhhaZdv9e3gOxD5eMyC9F3I1raQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjc0MTI2ZTktNWI5ZC0z
NjJiLTlhNmEtYjRjMzYwZDI1NDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDr8S
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ9UAakhf0+r8iigJRCE8pM+UNd6rLe9uLes/nPfgfe0WrWV8VK3
JcvFSJ2p6ddAM8OqptRNH+9jglCcH4FWMxqg9VfEPByCmyqdPtxcyq3dYhWNikKv
SLVvPsTXvQ5QcAV/tOj2XqfGC6RWKd0Z3I0kbHJYTptbLwYnOvPHB9HGc+DrSLKO
bAb57GVjoZUyBdKZnG81nhrGuvC7rexYzzZadW+BNEFl8KbYkEu/yJP87/ypnScu
b6MZ8bzpGWJQQ13xBwZ+gBh+w0JyHRS719WPh0L1Ragh3xLkHazyS1Bojx4KtUFL
sb+hr9zbA71kqquTHYYs8HYlAZ27J3iXEgA=
-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:15 2024 by rpki-client on console-fra.rpki-client.org