Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6ae0673-db51-38d2-9be1-4015979986d1.roa
File:                     d6ae0673-db51-38d2-9be1-4015979986d1.roa (raw, json)
Hash identifier:          SMhb4/N8jvNccCqFq83ILalk3Ke5rSjgv5FjNnNKrFs=
Subject key identifier:   22:62:51:C7:F8:51:22:76:D0:61:27:A0:1A:04:94:0F:42:E1:CA:2F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBD96BA46E1EBF253F5FC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6ae0673-db51-38d2-9be1-4015979986d1.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1011:a03d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:d9:6b:a4:6e:1e:bf:25:3f:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=1a3e313f-de20-41c4-bf6f-7e7f18449302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e7:80:95:f6:62:1d:33:b9:71:c2:00:d4:5d:
                    d0:d6:1e:19:fe:50:19:dc:ac:1a:d6:d6:e0:26:bd:
                    96:ef:e0:7a:c6:ad:68:4c:9e:72:9b:d6:a7:b0:77:
                    51:57:88:70:cf:bf:3b:02:15:a2:24:9b:a3:9a:8a:
                    4e:1f:43:3c:06:69:7c:b5:6c:35:7c:7d:3e:00:a4:
                    77:a5:c9:07:6f:8a:56:22:1c:dd:c5:24:86:56:b1:
                    d5:02:9a:49:b3:b6:0c:8b:9a:cf:40:26:16:f7:68:
                    3b:8b:68:1f:0b:e3:05:d0:21:b9:2c:35:4a:f9:16:
                    8a:f2:21:0d:95:59:d6:a9:4a:ef:9d:0c:a5:c1:ee:
                    a0:6d:92:ef:03:e4:19:fe:89:68:ba:7d:87:c4:e1:
                    9a:96:8f:9c:d4:95:a3:0a:e4:46:84:c5:fd:dc:64:
                    13:68:a7:42:2e:07:c9:d6:b9:3c:95:1b:7e:df:0e:
                    a8:0c:0f:a1:31:93:83:48:dc:78:b7:82:d7:34:60:
                    b2:92:12:39:38:c6:86:a1:7c:db:76:f2:39:10:a0:
                    68:cc:30:96:63:04:30:ce:ba:e9:0c:94:ba:d3:1b:
                    07:58:ff:65:7f:5e:8d:66:6e:d9:34:c4:c0:2b:84:
                    0b:ee:dd:44:24:a6:73:77:26:d4:4f:a6:e5:a1:c4:
                    68:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:62:51:C7:F8:51:22:76:D0:61:27:A0:1A:04:94:0F:42:E1:CA:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6ae0673-db51-38d2-9be1-4015979986d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:a03d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:62:40:42:31:95:f2:32:0d:75:83:7e:db:7f:62:63:5b:bd:
         a4:13:6c:f8:af:80:90:e8:9f:db:d2:6f:88:60:8f:25:3f:43:
         1f:6e:ea:1d:ae:b5:0a:f8:75:6c:b4:a1:91:0d:b2:b2:52:2a:
         51:b2:20:f6:5f:56:4c:1f:dd:22:7a:73:56:1e:f8:d9:94:69:
         6e:1e:c6:83:39:7e:cf:70:1e:db:7b:a0:e3:7b:12:83:b6:dc:
         2b:34:89:99:46:19:38:a4:e9:2a:31:58:d0:71:99:1b:29:ae:
         7e:5b:35:b1:5a:7d:e0:95:6d:43:45:9a:30:5f:34:d5:33:e7:
         09:ee:49:bb:c3:a3:9b:9b:e9:e1:1c:cc:6c:d2:7b:6d:a7:87:
         41:87:1b:6f:c2:22:5e:96:52:7b:86:d2:50:38:ce:ee:31:f3:
         ae:c9:aa:45:e2:61:7c:76:a9:f5:10:b9:5c:1a:56:6f:dc:02:
         ce:63:43:08:26:0f:a5:31:74:01:42:11:15:70:f8:db:21:db:
         0d:93:7d:98:02:ca:7b:60:40:74:7a:49:e2:6e:65:32:2a:1a:
         02:43:5b:b8:09:d3:82:41:65:18:25:01:83:fb:8b:7a:78:ba:
         06:0f:80:fa:1f:ec:8d:9c:6a:4f:9c:3d:8c:9e:6f:80:90:70:
         7d:07:87:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:15:28 2024 by rpki-client on console-fra.rpki-client.org