Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbc025c4-535e-3a91-a779-7b3f4376a8e4.roa
File:                     dbc025c4-535e-3a91-a779-7b3f4376a8e4.roa (raw, json)
Hash identifier:          LJWAG3ZqCBdLRjoPgc+8ByuWhX8qjAIWMn5VIKUO4dw=
Subject key identifier:   AC:41:6E:CD:4C:CD:67:00:0F:B5:1B:B0:4E:41:FE:3C:23:0A:D7:AC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846E3E2228B68BF2B19F3530180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbc025c4-535e-3a91-a779-7b3f4376a8e4.roa
Signing time:             Fri 16 Aug 2024 01:37:08 +0000
ROA not before:           Fri 16 Aug 2024 01:37:08 +0000
ROA not after:            Thu 14 Nov 2024 02:37:08 +0000
asID:                     6167
IP address blocks:        2600:100f:b070::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:e2:22:8b:68:bf:2b:19:f3:53:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:37:08 2024 GMT
            Not After : Nov 14 02:37:08 2024 GMT
        Subject: CN=968e96a2-7789-4f3e-a1ea-f589f87efbe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cb:a0:10:5c:f3:8d:24:7a:7f:29:25:7a:57:
                    b2:e2:d3:3d:15:c5:d3:b4:87:08:cc:b6:dc:a9:1c:
                    cb:de:b2:03:3d:f2:cd:bf:a4:72:b1:c9:2e:06:d1:
                    0e:78:a8:9d:b0:94:7e:f3:41:14:70:2c:01:a4:a4:
                    37:77:99:7e:da:bd:7e:af:a7:a7:f1:b3:ee:4e:a8:
                    5e:69:77:e8:59:db:4c:83:0f:b5:fb:1e:82:1a:fa:
                    27:90:6f:88:7d:60:a2:44:f9:40:0d:dd:f4:fb:ca:
                    36:32:76:29:4a:6d:51:b5:b3:6e:50:c6:e0:25:fb:
                    e5:85:dc:e0:27:eb:79:3b:f1:dc:27:26:04:87:64:
                    d5:eb:82:79:95:21:06:d1:80:43:5d:75:52:1f:a7:
                    c6:a1:34:2a:e6:2e:a4:4f:be:49:a7:2b:c7:d9:b8:
                    84:97:63:c5:5c:92:a9:c2:49:62:4c:d7:c4:f7:38:
                    79:ff:a5:ff:0f:dc:ef:fc:d2:f3:3f:63:97:0d:f2:
                    38:09:1d:9e:27:43:68:5b:6c:d5:28:e5:9a:79:b8:
                    70:58:b7:cf:cb:0d:12:7c:5f:52:1f:f2:ff:a2:df:
                    23:7e:c4:08:c9:26:05:02:46:11:b1:f3:3c:3f:dc:
                    e4:6a:cd:87:6b:90:5b:f3:3a:3f:9a:4c:c8:44:59:
                    ec:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:41:6E:CD:4C:CD:67:00:0F:B5:1B:B0:4E:41:FE:3C:23:0A:D7:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbc025c4-535e-3a91-a779-7b3f4376a8e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b070::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:b1:db:9d:46:94:c8:d9:ed:08:5d:db:10:77:d0:99:41:81:
         8b:8a:7c:9d:4e:55:04:81:54:e4:90:32:39:73:53:38:86:3c:
         e5:b0:73:e8:da:ea:42:33:76:c7:de:0c:92:d4:8f:bd:4d:b6:
         36:58:ba:30:9f:c1:f5:5b:90:86:f3:c2:52:1c:39:0f:ce:99:
         75:5d:84:6c:9c:a6:db:29:23:9f:1c:f4:b7:8f:e9:a4:d4:14:
         1e:49:c9:c0:fd:89:ef:20:ce:95:c6:bf:91:5c:2f:9e:f3:b6:
         21:70:ad:f4:df:22:3f:bc:a3:32:57:89:e8:65:e7:aa:0d:2c:
         1f:e2:60:2b:c4:35:a5:09:bb:f7:b8:de:dd:21:04:e8:ac:50:
         02:81:a4:5c:51:27:2f:f3:43:5f:1c:e8:da:79:3a:6f:f3:3c:
         f8:11:d4:99:78:78:b1:6e:b8:a7:72:a2:a6:98:9d:50:ba:e8:
         b8:0f:5e:83:2e:89:f5:a9:0e:49:43:d9:9c:06:7f:d8:4c:40:
         77:2a:e2:67:62:48:1b:4a:5b:6c:d2:68:ec:44:9b:9e:3e:1c:
         41:0a:8a:1a:b5:e2:7b:ae:81:4d:47:ab:2c:36:3f:de:fe:26:
         56:61:cd:1b:44:f1:9f:6a:da:46:57:bd:2e:80:5c:16:aa:12:
         b0:f5:b7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:23:08 2024 by rpki-client on console-ams.rpki-client.org