Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b85691a5-2365-3e96-8c2f-d9271a1f888e.roa
File:                     b85691a5-2365-3e96-8c2f-d9271a1f888e.roa (raw, json)
Hash identifier:          /AdYvEKNq6qNI7NMofYqbwnUOFHOyLRsxZbpzsYo0vo=
Subject key identifier:   CA:3B:E5:CF:7E:A0:21:12:B3:37:26:82:1C:6F:FE:DB:D9:5C:2B:E2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA021C615D35C059BB3600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b85691a5-2365-3e96-8c2f-d9271a1f888e.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100c:b2f0::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:02:1c:61:5d:35:c0:59:bb:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=288d2759-7597-4c42-8bca-68524aa5b6b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cf:a7:4a:f5:e0:39:b3:f3:23:6d:74:bd:46:
                    6b:e3:3c:ea:31:c6:a8:8b:f7:62:ba:21:f7:1c:ea:
                    e4:5b:fa:61:3b:07:0d:96:c8:47:38:bc:ed:20:7d:
                    41:de:77:a6:26:28:c6:b7:d3:bf:23:db:1e:42:d9:
                    d8:96:b1:25:b7:d1:b2:99:f3:35:20:4c:dc:78:c4:
                    14:ad:e2:ae:c2:fc:4c:77:16:5c:55:e8:00:fe:8b:
                    fb:cd:73:18:c3:84:8d:67:44:f7:47:20:96:86:7a:
                    cb:0e:93:87:bb:f9:a6:c7:6a:af:0b:fa:75:79:3d:
                    8f:9d:ed:75:7f:7c:b7:19:28:54:f3:d9:ba:64:3f:
                    6c:0c:53:4c:38:c0:30:b3:15:49:74:cc:f3:d9:f4:
                    69:9a:b2:b3:ee:3e:13:7a:a2:d2:3b:2c:32:19:6d:
                    7d:23:c2:83:57:b7:71:0b:2b:d5:fb:75:36:c2:46:
                    6c:98:f3:1f:a4:96:62:8f:5f:00:ab:2a:bd:d9:b4:
                    56:4d:35:29:9e:66:68:58:c3:26:d6:15:d7:81:f3:
                    23:f4:3d:d9:0c:dd:50:a1:93:bc:57:e2:b9:df:09:
                    fa:ca:69:af:df:97:44:10:62:8e:e0:25:ed:89:e1:
                    2e:2e:28:47:d3:b2:4f:c0:0e:ce:9d:d1:36:b0:7c:
                    71:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3B:E5:CF:7E:A0:21:12:B3:37:26:82:1C:6F:FE:DB:D9:5C:2B:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b85691a5-2365-3e96-8c2f-d9271a1f888e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b2f0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:d0:ed:7c:83:a8:3e:49:c3:3e:0a:99:4c:4c:1f:3c:12:ed:
         3b:b2:04:1e:97:91:65:de:49:c2:1d:fc:cf:be:6a:cf:fd:39:
         38:24:0e:1d:8f:6a:c1:37:a3:7c:43:9f:75:c1:3f:6d:3e:8d:
         b2:a8:ce:2e:6a:b7:81:c8:d2:63:85:99:d6:63:7b:bc:0c:78:
         ed:86:76:0e:66:fc:ab:80:53:6f:75:dd:9d:f0:d3:db:1e:63:
         26:5d:34:62:18:78:2e:51:2e:73:e5:11:07:0a:42:01:0b:58:
         fa:83:cc:13:2c:68:2c:12:48:de:60:77:43:d8:ab:d1:1f:05:
         77:67:e3:6b:5c:43:df:a7:81:e0:d0:00:8f:fb:6b:b4:92:b8:
         96:36:c1:75:2a:f7:94:c4:f3:f0:f9:fe:bd:a3:dc:32:5b:49:
         94:fb:e9:74:70:ef:20:df:61:48:e5:75:95:b3:59:e3:79:86:
         65:4e:a9:3c:26:5a:15:3d:6b:36:d3:ef:14:21:03:d4:2b:78:
         ee:89:56:45:0d:ab:97:59:ff:de:f5:94:29:46:32:62:d0:0a:
         b4:c4:e3:36:d3:71:c5:5c:00:2f:5b:cd:28:fb:57:c2:21:3b:
         76:f6:73:2c:47:4f:66:ba:3a:e4:3d:c7:10:50:b5:84:34:62:
         0d:f7:89:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:46 2024 by rpki-client on console-ams.rpki-client.org