Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca46ca63-70ac-39cf-9718-c2fd3c50bff1.roa
File:                     ca46ca63-70ac-39cf-9718-c2fd3c50bff1.roa (raw, json)
Hash identifier:          rkZj2A8kO3osuiRutsX2jN/bj9SC4PtHeUyOqN7nwJM=
Subject key identifier:   64:C0:3C:5E:80:03:A9:A1:76:7E:86:61:14:2B:D4:E0:D0:7C:86:82
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B8A2F728615F8611E9C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca46ca63-70ac-39cf-9718-c2fd3c50bff1.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        100.41.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:8a:2f:72:86:15:f8:61:1e:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=4bfd21de-ca51-481f-af62-afb51a672689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:48:ff:b9:4d:af:67:85:82:e2:b3:26:39:04:
                    18:a8:08:77:fb:80:aa:79:b1:25:63:51:1a:f3:ee:
                    19:a0:72:25:1c:d3:80:ab:a7:21:02:ef:ba:a5:fc:
                    3c:c2:af:68:c2:f5:c0:d0:b6:03:4f:a4:3a:ec:80:
                    af:90:8c:6e:e5:8f:48:8c:bf:61:87:27:02:c1:b8:
                    cb:c8:70:32:ff:4d:9f:b4:cc:75:b9:92:f9:4e:6b:
                    ae:ce:f7:7d:b5:f9:4b:77:6d:09:72:71:74:ad:c2:
                    f2:9b:4a:9a:18:80:48:01:c4:47:ae:aa:06:4e:39:
                    d4:1f:b7:51:3c:ec:fd:85:c9:fa:86:08:06:13:b1:
                    08:6b:21:35:04:72:0c:50:a6:a8:e8:9f:67:14:bc:
                    15:90:ce:1b:a5:97:9a:83:06:a7:25:42:38:81:0f:
                    f1:e6:9d:a2:66:d6:06:b8:06:3b:4f:79:be:bd:80:
                    b8:c4:b2:37:4e:d2:b6:5e:e5:c2:93:04:cc:f2:69:
                    2e:c1:5a:be:e6:5e:78:df:ef:ce:78:21:e5:0f:69:
                    02:3e:3d:b7:ca:17:6b:c0:42:23:00:65:fd:59:21:
                    0c:48:2e:70:3c:36:5e:bc:16:31:20:09:12:13:6e:
                    86:50:c5:b3:9e:5f:9f:dc:c5:e4:20:ab:bb:c7:a4:
                    84:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C0:3C:5E:80:03:A9:A1:76:7E:86:61:14:2B:D4:E0:D0:7C:86:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca46ca63-70ac-39cf-9718-c2fd3c50bff1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.41.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d4:19:c9:55:82:70:ef:a0:ef:7d:8f:87:cf:eb:c8:29:00:
         3b:f6:26:08:db:17:6d:d0:4c:3c:8c:2f:d4:c8:e6:09:52:aa:
         dd:9d:39:76:39:b0:2c:62:98:df:bc:3b:f8:c0:2d:f3:c6:84:
         dc:3e:c6:55:9e:10:32:ac:31:0d:b7:8d:69:e5:53:1d:7f:21:
         d8:fb:bb:64:ac:c9:7f:89:39:08:f5:62:bd:ea:a8:80:ec:48:
         7d:e4:28:46:f6:c1:fd:9b:56:e6:17:98:d3:05:61:c6:61:2e:
         27:ff:10:7d:58:ef:81:cb:14:03:38:81:63:b3:e3:69:df:db:
         cc:1f:80:d5:9d:b3:b7:5f:b0:e1:20:d8:64:cb:50:3b:5f:76:
         b1:92:00:bf:7d:8f:ac:b7:47:f6:c4:c7:87:6a:22:b3:c5:04:
         de:2e:22:b7:5c:4c:bf:c6:62:db:e8:8a:0f:cd:b1:8b:4b:4b:
         06:d0:f2:0e:60:a4:96:8f:d5:1e:91:b2:dc:fb:65:f7:9a:b7:
         22:ab:7c:c9:11:7e:16:76:0f:16:c1:45:da:5e:51:88:e7:b8:
         44:bd:53:a0:ab:a9:72:80:f5:2f:2a:15:75:11:83:0b:73:42:
         c7:c0:2b:a1:1f:08:ef:c8:75:56:4a:92:d5:8b:2e:88:31:1f:
         3b:51:1a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:54 2024 by rpki-client on console-fra.rpki-client.org