Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4678c89-c355-32dc-9caa-22a3b0d8248e.roa
File:                     d4678c89-c355-32dc-9caa-22a3b0d8248e.roa (raw, json)
Hash identifier:          qRa6+mlgYT1bFJdiEgbyTxt5V6itQGPwTmdEbewpSZM=
Subject key identifier:   BF:02:C2:BB:51:84:1B:B0:F9:32:5F:60:0F:84:0E:A9:A2:01:3C:8C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4A9FB5B951E54F6704D0780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4678c89-c355-32dc-9caa-22a3b0d8248e.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100a:b010::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:a9:fb:5b:95:1e:54:f6:70:4d:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=0caade4c-7201-4a62-a2f2-f4cf5cb6ade0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a0:96:5f:29:74:4b:9d:ff:c1:67:8a:b0:10:
                    3f:af:fe:51:7c:d6:34:0d:ae:09:e2:20:7c:07:92:
                    44:9a:41:c4:81:7e:a5:44:f9:5a:dd:b9:2d:d5:c5:
                    74:02:a5:58:a0:08:85:00:3e:4a:64:6d:a4:91:a2:
                    0f:7d:8f:5d:02:2a:c1:c5:6a:86:33:a7:12:2f:88:
                    71:fd:15:9e:0c:c3:73:a7:57:cb:ca:97:e8:cf:24:
                    34:2c:b2:bb:a5:ab:55:79:94:d4:cc:79:49:5f:ec:
                    b9:52:da:59:cf:29:58:a5:cb:76:52:da:24:8a:91:
                    4b:b0:c7:33:16:e5:0a:f2:aa:d5:20:da:e6:86:d3:
                    0e:86:ec:d8:e0:c7:8d:83:08:06:9c:f7:98:29:64:
                    84:20:36:91:4a:49:a4:e8:21:73:f4:d9:dc:40:ba:
                    45:9e:b1:f6:67:db:be:89:79:98:09:6f:e4:8f:44:
                    ff:07:14:b2:9d:02:78:f5:4d:a3:60:86:ae:e6:a1:
                    ba:78:35:80:6f:b2:75:2c:91:8e:b0:51:92:03:99:
                    9d:e8:98:89:e6:df:5d:a4:e1:f5:2e:d9:39:d1:9f:
                    a5:80:56:18:c2:75:c0:dd:bf:80:c2:39:cb:2b:45:
                    ef:3a:9e:e5:82:9b:75:8b:3c:a3:4b:31:63:af:2d:
                    0d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:02:C2:BB:51:84:1B:B0:F9:32:5F:60:0F:84:0E:A9:A2:01:3C:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4678c89-c355-32dc-9caa-22a3b0d8248e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:b010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a4:a0:be:a8:52:66:f9:d0:e0:a9:1d:ad:7c:08:03:c8:8c:
         9c:c5:f2:4c:1f:08:9c:45:2f:b0:69:ae:0b:2b:eb:c4:ce:f9:
         51:d8:61:2d:bb:ea:a7:c9:63:dc:97:c1:71:d0:67:ff:5f:eb:
         2b:01:61:24:8e:3a:95:07:0c:a7:85:56:aa:a0:e1:f9:af:ae:
         0c:cf:56:65:a1:5d:23:a3:52:ad:f3:29:0d:fb:64:24:79:14:
         2d:a8:d4:89:5f:b3:e0:93:12:4f:d3:52:b1:97:68:9e:e9:3b:
         7c:a2:ed:e6:cc:3d:90:0e:89:ec:4c:ab:81:55:93:88:5a:ab:
         b1:51:c9:c6:79:06:c0:43:c1:0d:78:a4:68:82:af:30:2a:87:
         05:18:8e:9c:b0:eb:b3:e7:db:b8:60:b8:e0:8a:18:45:a1:d3:
         bc:74:ec:cb:92:b9:06:67:23:b4:06:d4:5a:92:67:0a:c5:32:
         6a:c0:60:da:8a:85:4d:5f:e9:56:c0:9f:10:a6:90:c3:a6:85:
         4c:27:12:a1:5c:e1:dc:4f:bc:28:f2:46:a0:bd:68:a9:25:93:
         aa:36:f1:81:ea:ba:79:9e:9e:17:38:6c:41:15:5a:e1:ab:4a:
         6b:19:e0:75:91:6f:7a:db:4a:9a:d8:f3:32:6e:ad:64:0a:71:
         e6:11:03:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:56 2024 by rpki-client on console-fra.rpki-client.org