Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4678c89-c355-32dc-9caa-22a3b0d8248e.roa
File:                     d4678c89-c355-32dc-9caa-22a3b0d8248e.roa (raw, json)
Hash identifier:          QabTQzXPBfP7tscFniDk7hSf2pTrzMMO+QTOb29aST8=
Subject key identifier:   83:83:45:F9:8C:77:00:7D:53:DD:66:E1:EF:4D:FC:D8:A8:90:8C:33
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846E3E1A58D528BD83D4915FEA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4678c89-c355-32dc-9caa-22a3b0d8248e.roa
Signing time:             Fri 16 Aug 2024 01:36:09 +0000
ROA not before:           Fri 16 Aug 2024 01:36:09 +0000
ROA not after:            Thu 14 Nov 2024 02:36:09 +0000
asID:                     6167
IP address blocks:        2600:100a:b010::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:e1:a5:8d:52:8b:d8:3d:49:15:fe:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:36:09 2024 GMT
            Not After : Nov 14 02:36:09 2024 GMT
        Subject: CN=af77ad58-3ba7-4e4d-a456-5ce8469e5f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:36:20:50:c3:80:03:04:36:41:54:4f:9e:55:
                    9b:3f:fe:92:36:e6:53:96:fb:6f:05:7b:32:c7:c9:
                    25:6b:52:55:c2:fb:75:d6:61:96:9f:1f:6e:34:ba:
                    58:96:8b:11:9a:a3:55:68:0d:f7:fc:80:6d:f3:3e:
                    08:e1:93:bd:2e:fb:83:5e:75:c7:42:6a:b2:a4:0a:
                    85:08:9a:34:86:a8:32:12:f4:af:4e:83:62:8b:8b:
                    9f:45:46:7c:28:ac:25:6d:aa:d5:e9:e3:a4:08:d4:
                    69:01:a6:4a:37:ff:64:fc:08:20:6f:58:90:d6:bd:
                    80:29:ca:3e:a0:b5:be:da:ff:c9:f5:e7:b0:64:ca:
                    a8:37:9c:38:9e:46:02:1e:b3:bc:35:5d:99:e0:d6:
                    6a:bc:eb:65:dd:76:f1:e0:82:9b:8f:93:4f:bf:6d:
                    35:af:44:23:63:64:d6:fd:25:d0:a8:25:40:d4:5e:
                    f9:5e:c9:ed:65:58:d0:79:f4:37:53:66:61:33:45:
                    88:40:f1:33:d2:8f:00:c2:59:6e:48:f7:84:98:f4:
                    b2:8b:ca:5e:64:79:32:9a:23:98:60:f4:7d:8b:85:
                    59:34:88:0b:25:fa:80:56:2a:c2:5e:dc:72:ac:8b:
                    cd:f6:fb:59:25:8c:bf:a3:68:fd:6c:e7:d5:61:f1:
                    d9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:83:45:F9:8C:77:00:7D:53:DD:66:E1:EF:4D:FC:D8:A8:90:8C:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4678c89-c355-32dc-9caa-22a3b0d8248e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:b010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:60:a7:75:b7:77:b3:d9:68:94:fb:ff:d9:c1:4c:82:bc:db:
         f6:6d:b9:39:40:5b:42:fb:48:ff:b1:57:1f:b8:fc:74:83:ae:
         73:58:bd:8c:0d:06:66:24:01:bd:8c:2b:5b:14:f1:94:a0:f3:
         11:db:c0:0d:33:8b:a3:eb:68:30:10:96:de:16:13:df:38:3c:
         75:21:24:06:fa:23:93:2d:88:1d:74:ad:5a:f7:89:f0:84:a6:
         3f:8c:85:39:1f:0c:22:43:81:f2:17:4c:54:cd:96:18:e4:99:
         d2:fb:61:42:25:b8:05:ae:91:a5:1e:cd:5c:96:93:a3:13:69:
         13:94:69:fa:b0:fd:7d:7f:99:e4:cf:77:7d:15:53:b4:ba:be:
         ac:c5:2c:bb:2e:b9:c4:a7:de:ce:5a:bc:49:85:b9:bf:1b:90:
         79:49:ba:c6:c7:fc:7d:02:a0:90:e7:2b:50:27:04:06:a2:2d:
         bb:94:34:09:36:63:a6:0e:ed:7a:e7:fe:f7:22:f7:d4:2a:6e:
         04:64:93:26:58:fc:22:bc:24:45:9d:15:7c:64:8f:97:7a:31:
         3a:0b:83:b7:11:26:c4:d7:ad:a6:c6:e7:2a:fb:4c:67:8d:95:
         df:50:dd:e2:5f:80:fb:e8:4b:6a:24:5f:23:98:5e:75:0f:1a:
         87:86:dc:85
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEbj4aWNUovYPUkV/qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDgxNjAxMzYwOVoXDTI0MTExNDAyMzYwOVowLzEtMCsGA1UEAxMk
YWY3N2FkNTgtM2JhNy00ZTRkLWE0NTYtNWNlODQ2OWU1ZjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjYgUMOAAwQ2QVRPnlWbP/6SNuZTlvtvBXsy
x8kla1JVwvt11mGWnx9uNLpYlosRmqNVaA33/IBt8z4I4ZO9LvuDXnXHQmqypAqF
CJo0hqgyEvSvToNii4ufRUZ8KKwlbarV6eOkCNRpAaZKN/9k/Aggb1iQ1r2AKco+
oLW+2v/J9eewZMqoN5w4nkYCHrO8NV2Z4NZqvOtl3Xbx4IKbj5NPv201r0QjY2TW
/SXQqCVA1F75XsntZVjQefQ3U2ZhM0WIQPEz0o8AwlluSPeEmPSyi8peZHkymiOY
YPR9i4VZNIgLJfqAVirCXtxyrIvN9vtZJYy/o2j9bOfVYfHZQwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIODRfmMdwB9U91m4e9N/NiokIwzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDQ2NzhjODktYzM1NS0z
MmRjLTljYWEtMjJhM2IwZDgyNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCrAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABhgp3W3d7PZaJT7/9nBTIK82/ZtuTlAW0L7SP+xVx+4/HSDrnNY
vYwNBmYkAb2MK1sU8ZSg8xHbwA0zi6PraDAQlt4WE984PHUhJAb6I5MtiB10rVr3
ifCEpj+MhTkfDCJDgfIXTFTNlhjkmdL7YUIluAWukaUezVyWk6MTaROUafqw/X1/
meTPd30VU7S6vqzFLLsuucSn3s5avEmFub8bkHlJusbH/H0CoJDnK1AnBAaiLbuU
NAk2Y6YO7Xrn/vci99QqbgRkkyZY/CK8JEWdFXxkj5d6MToLg7cRJsTXrabG5yr7
TGeNld9Q3eJfgPvoS2okXyOYXnUPGoeG3IU=
-----END CERTIFICATE-----
Generated at Tue Oct 22 21:23:06 2024 by rpki-client on console-ams.rpki-client.org