Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4f6ae84-8f31-3a9f-9e57-6c4a50fc8343.roa
File:                     d4f6ae84-8f31-3a9f-9e57-6c4a50fc8343.roa (raw, json)
Hash identifier:          BB/3ukflWwEM3RZs3VYliydqWM4oaA31Ca+u1+ZEfqc=
Subject key identifier:   43:35:90:E2:5A:0B:FB:06:22:C8:D2:55:0D:97:2C:29:E6:71:DC:93
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D768CCEA7240A82EBA08660
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4f6ae84-8f31-3a9f-9e57-6c4a50fc8343.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1000:a121::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:8c:ce:a7:24:0a:82:eb:a0:86:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=17d51b01-592e-4679-b2da-36f2eb57b8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a8:6b:4b:ea:04:65:3a:e9:9d:51:8b:55:b5:
                    7d:9f:d2:6c:71:11:59:e0:c1:89:d9:d3:91:f6:f6:
                    a6:e9:26:83:a6:17:61:15:48:72:e4:8e:b1:4e:e7:
                    4d:ed:af:7f:37:33:01:f1:15:b7:6c:bd:fe:92:37:
                    1f:25:77:35:88:65:02:28:16:5a:a1:7f:21:54:2f:
                    fe:54:7d:5b:f0:c3:1f:59:da:d1:82:25:3b:c8:a8:
                    6f:e3:4f:9a:44:63:51:46:23:63:0f:4d:0e:33:3e:
                    4c:5e:d4:0a:cb:21:8c:dc:c0:a1:01:ff:e8:e3:2c:
                    17:7c:54:3e:26:a4:31:24:1d:ef:82:54:16:86:66:
                    fb:53:31:25:76:05:ae:a1:c2:95:b2:4e:44:38:9b:
                    64:23:d7:82:f6:9c:3e:07:46:71:80:aa:59:dc:5c:
                    3c:6c:f1:56:b5:40:4f:15:87:85:59:5a:67:bb:45:
                    a6:a4:a5:a7:6a:8c:fd:24:be:3f:7e:34:ed:4f:fe:
                    70:4a:e3:40:04:dd:14:36:c7:4d:5f:37:60:93:ca:
                    82:83:ed:da:9a:bf:d4:ab:69:c4:12:26:c1:67:f1:
                    20:54:be:2b:82:2c:d3:68:60:a7:da:e8:fd:57:cc:
                    d0:ed:e1:33:be:bb:2b:3f:05:dc:1c:83:6f:6a:cc:
                    ce:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:35:90:E2:5A:0B:FB:06:22:C8:D2:55:0D:97:2C:29:E6:71:DC:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4f6ae84-8f31-3a9f-9e57-6c4a50fc8343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:a121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d2:4e:77:cf:df:1f:8b:ea:9d:0d:27:06:4d:ba:a8:aa:af:
         d9:68:ba:3d:c8:41:84:31:7b:12:30:64:40:cb:be:42:0c:62:
         45:ed:4a:9b:a3:19:7b:e1:64:b4:e9:1c:48:ec:1a:70:35:29:
         67:95:6b:46:7a:3e:91:95:10:ef:67:00:a4:88:d3:28:ac:99:
         ad:40:8c:a4:fa:71:5e:02:ba:b9:8f:d7:9c:db:e0:e5:84:6b:
         27:58:d5:fe:21:c2:5b:15:88:70:42:53:00:bc:0f:28:69:09:
         b6:1a:19:bc:ea:a9:a0:81:c6:83:d5:84:fb:86:ea:a5:16:83:
         b2:01:c3:da:95:aa:85:e4:a2:ab:92:27:3b:e9:37:55:89:c2:
         0c:b4:95:eb:41:76:35:18:13:96:be:5b:e6:9c:0d:51:12:ce:
         da:e3:e4:2d:4c:4f:95:22:86:36:e2:05:bb:d7:aa:a2:ae:ec:
         11:1a:d5:16:e7:d2:22:26:29:70:2b:e9:fc:bd:39:ce:7b:97:
         d0:fb:7e:fc:01:bc:39:7a:f2:b4:2d:ac:d0:85:7b:90:1b:dd:
         49:dc:ca:29:2c:61:57:73:ae:cd:21:18:c6:22:2b:e1:9f:30:
         1c:53:78:19:7d:e3:30:a9:17:12:97:83:0b:cb:2a:f7:68:5e:
         cb:26:24:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:22 2024 by rpki-client on console-fra.rpki-client.org