Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e4bb3642-7cb4-3ffe-98a1-e91880acdfad.roa
File:                     e4bb3642-7cb4-3ffe-98a1-e91880acdfad.roa (raw, json)
Hash identifier:          Up6d8F49LrShuGqx1gqGqdGtz9X6uxFAWDNqFnPmsvQ=
Subject key identifier:   25:41:F8:05:0F:E5:30:36:71:6C:0C:7C:6B:F1:3A:E3:6A:60:EC:5F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D649353A2CF3D59E232C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e4bb3642-7cb4-3ffe-98a1-e91880acdfad.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     22394
IP address blocks:        2607:f160:2e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:49:35:3a:2c:f3:d5:9e:23:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=5015fa51-b40d-4901-9489-1686da053615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:df:a4:ed:fd:26:f5:fb:c0:a9:08:26:12:
                    a7:75:9f:f3:a3:f0:29:c0:90:e3:06:62:9b:04:1d:
                    f8:70:06:26:c2:b0:69:15:2e:2d:fc:3c:f8:90:cb:
                    df:c2:bf:e8:1e:12:a2:85:6c:ee:cf:7b:b1:d9:c3:
                    8e:d9:1a:9c:c5:8a:44:c3:ae:48:91:e9:a3:38:88:
                    b3:2b:cc:06:41:30:87:12:0a:b3:82:d1:c7:d4:b2:
                    8b:54:e7:3a:7a:de:25:4b:e5:04:7e:5b:97:23:44:
                    7c:ba:fc:b0:41:29:b5:bf:22:da:23:db:c0:63:30:
                    49:41:d5:7e:7c:57:98:06:8d:60:e2:18:f5:91:ba:
                    a1:16:b7:d0:52:d0:e8:f7:60:4e:77:8e:7b:7d:f0:
                    cc:0a:dd:33:c3:6b:34:cc:a8:03:29:64:72:eb:41:
                    e1:f7:43:67:df:09:0b:fd:a7:08:88:98:ea:4d:61:
                    78:e1:7d:cd:85:e0:75:dd:85:27:67:29:1f:10:ed:
                    91:c3:04:04:13:ff:df:c3:7a:70:a6:e5:68:87:85:
                    13:fa:cc:68:91:55:a1:81:e3:ea:1f:aa:9a:a6:ad:
                    be:fb:3f:1c:63:f1:20:dd:c9:53:fe:36:0f:99:f5:
                    01:0e:55:67:94:17:38:dc:11:db:2a:43:21:20:ce:
                    aa:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:41:F8:05:0F:E5:30:36:71:6C:0C:7C:6B:F1:3A:E3:6A:60:EC:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e4bb3642-7cb4-3ffe-98a1-e91880acdfad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f160:2e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e4:3b:82:8f:11:ef:2a:e1:50:10:04:89:fe:ba:75:fc:19:
         2a:ae:8e:93:06:18:19:1b:f8:25:1a:e5:f6:b1:24:ea:24:59:
         83:bf:9e:1a:af:55:d8:30:5a:98:c9:30:03:0a:1f:11:40:2b:
         f0:79:6a:72:00:e5:b5:00:14:94:46:d8:ac:44:cb:b8:ae:eb:
         e6:5d:e4:00:e4:10:be:6d:d5:84:70:4c:aa:f1:ba:cf:05:aa:
         a7:90:5f:f5:5b:c9:ed:23:a8:a3:bb:6d:60:6d:64:70:bb:0b:
         a9:d2:8e:02:58:c0:9b:87:12:1c:95:b4:c4:53:3a:2b:11:23:
         b3:b9:fb:19:f7:c1:30:ee:c4:55:92:64:a4:17:f9:e1:ec:5d:
         47:a2:c9:60:ac:5b:af:6a:03:12:7b:8c:08:9b:0b:e9:07:b6:
         29:b1:62:85:4a:2d:57:2d:db:b6:4e:bc:7c:37:da:fc:20:42:
         e8:3b:0d:f6:61:bc:72:7c:93:db:53:d6:32:32:9b:ef:57:fa:
         3d:ee:fb:44:a2:ac:84:5b:43:54:de:46:a9:35:b8:4f:3d:47:
         69:03:5d:01:db:bc:97:53:e1:38:e3:28:61:99:97:19:2f:a8:
         d1:d7:c2:f2:50:7f:5e:3e:0c:e3:66:1a:a2:e5:58:2d:2d:c3:
         34:2e:4f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:55 2024 by rpki-client on console-ams.rpki-client.org