Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3707953-4631-3496-b2fc-400aa5c6e3ff.roa
File:                     e3707953-4631-3496-b2fc-400aa5c6e3ff.roa (raw, json)
Hash identifier:          vMMc+zbGF++BycNbbVKWNDE116RknAk2yXNPLB4evck=
Subject key identifier:   83:AB:FE:BE:D2:B2:95:0A:01:4B:C7:96:85:00:5F:BB:F3:64:7C:9D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D647A52C531CD4D2C08180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3707953-4631-3496-b2fc-400aa5c6e3ff.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     22394
IP address blocks:        2001:4888:a604::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:47:a5:2c:53:1c:d4:d2:c0:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=3db4f80d-b5d8-458e-836a-9efb2e6df5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4a:0c:1c:04:4b:43:94:74:37:0e:6b:82:07:
                    e7:0c:08:97:4e:c3:c3:4d:94:d1:3a:8b:10:d0:af:
                    39:d5:c9:dd:3b:97:11:f9:dc:82:85:65:65:80:5a:
                    98:02:d6:15:94:96:b3:c5:55:9a:6a:c2:b9:bf:17:
                    b4:dd:56:e9:23:6b:db:81:09:b9:33:4f:f6:7a:09:
                    71:2f:fa:c5:50:16:c5:13:e8:e4:87:30:ae:df:27:
                    2e:d7:4f:b2:cf:88:56:0a:6a:dc:97:f4:4f:02:2e:
                    25:ae:41:00:6b:49:0d:b1:7e:62:98:5c:77:88:d3:
                    11:4d:8a:f1:d2:8a:e1:01:bf:0c:49:eb:b2:16:e6:
                    dc:e1:21:4b:b4:c5:b4:11:e4:50:ab:38:fb:ea:6b:
                    d7:ef:87:72:75:15:76:df:bc:fc:9e:20:a5:99:82:
                    52:fd:00:ea:c3:0f:69:dd:15:44:df:90:f5:28:11:
                    46:2b:75:21:29:74:53:f1:92:7e:00:09:a5:e7:5a:
                    36:5f:fd:07:7c:82:7c:26:d9:61:f8:10:5d:66:63:
                    51:be:5f:5a:9c:22:7e:20:fe:54:9f:df:39:14:ac:
                    a9:f0:28:13:6a:c6:a5:54:6d:d1:0b:16:e3:45:85:
                    d5:fa:85:48:55:27:05:41:9a:72:a8:b2:bf:a4:16:
                    d0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AB:FE:BE:D2:B2:95:0A:01:4B:C7:96:85:00:5F:BB:F3:64:7C:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3707953-4631-3496-b2fc-400aa5c6e3ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:a604::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:c2:90:c0:a4:39:05:a9:d2:6a:00:0f:35:92:68:06:1e:dc:
         5a:df:ab:66:a6:7a:83:08:35:6e:15:0b:91:0c:9e:92:f8:57:
         30:25:dc:59:ce:cc:87:e6:ca:8d:56:1e:4b:c8:b3:5b:7f:bd:
         9a:97:be:37:03:6c:35:6c:fc:4d:89:fe:bf:fc:30:d8:e6:de:
         38:cd:2a:c3:f3:ad:cd:ba:c7:17:44:95:70:6c:2d:51:ad:54:
         a9:39:7b:77:ac:c6:d9:fd:48:ed:1f:c4:d9:8d:dc:81:f7:9e:
         e6:d7:c1:24:0d:d8:3d:df:31:b7:08:5f:75:1a:6f:da:b4:3c:
         db:f9:5e:56:f1:d0:5f:e1:65:4f:42:5a:c5:b0:c9:df:2b:fe:
         b0:12:af:17:3c:de:36:e7:f9:6a:b3:12:34:73:fc:e0:89:d8:
         51:0d:36:ff:36:25:b8:5c:03:17:11:d1:b8:c4:d3:8f:c1:6d:
         89:aa:71:0c:4e:75:2a:ea:e6:8e:93:17:96:48:fb:c5:d3:71:
         07:fc:47:b1:a6:8f:96:10:cc:e0:78:1f:d5:0f:d9:ed:38:c6:
         a9:55:ee:e6:4b:91:1b:1a:81:66:4b:c3:23:a5:1c:6d:77:9f:
         da:45:b9:da:17:55:26:57:02:a8:a3:e7:55:39:09:0e:03:a8:
         f6:de:de:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:55 2024 by rpki-client on console-ams.rpki-client.org