Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e6409ce3-c4fe-3ce2-a438-7607f59cc2c2.roa
File:                     e6409ce3-c4fe-3ce2-a438-7607f59cc2c2.roa (raw, json)
Hash identifier:          FaXtGuGLxSqom0YEqiTXk7lCWSloYlgNM0itsJ5LP9Y=
Subject key identifier:   67:45:22:37:BE:48:6F:EC:D2:C6:E5:C1:E5:E8:95:6F:85:10:E3:1F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76C523199E9B1A19CEB140
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e6409ce3-c4fe-3ce2-a438-7607f59cc2c2.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     701
IP address blocks:        2600:4040:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:c5:23:19:9e:9b:1a:19:ce:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=a418738a-0c2c-4c53-9989-c98dfd6c777a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:a6:e8:39:65:a0:2b:30:44:20:28:a7:4d:
                    5c:b4:c3:de:47:c2:64:0b:b4:41:94:c8:d7:f5:d0:
                    85:9a:e7:8a:3f:18:dd:c1:89:51:0b:0f:98:fd:58:
                    5c:9e:e1:ce:c1:df:43:e0:7c:8b:43:3d:42:f0:2e:
                    8c:c8:f3:01:34:67:61:84:1b:ac:58:44:d7:5d:1d:
                    77:0b:9a:40:18:0b:9e:4d:5d:43:c8:0a:85:50:75:
                    74:54:48:d4:6e:f4:30:fb:a7:5b:ea:87:45:71:eb:
                    89:65:31:cb:f3:4e:ca:1f:50:9d:31:e8:7d:3a:0a:
                    cc:41:82:e1:bf:4c:8f:5d:7d:7d:76:00:68:73:70:
                    26:64:3d:d8:d5:cf:4b:73:b0:87:88:3b:b9:0e:1e:
                    fd:02:f4:c9:9f:37:fb:53:48:16:4d:60:71:ce:89:
                    8a:0c:11:2e:c7:68:22:63:57:c6:3f:fc:64:ae:8c:
                    38:00:51:7f:fc:30:bb:5c:15:f3:0c:d2:c1:d6:d7:
                    67:c4:ba:5d:c2:15:63:41:b9:62:af:1f:0f:fe:c8:
                    76:54:de:1e:b4:8f:71:b5:8b:40:17:2d:d8:7b:85:
                    9a:1f:f7:82:15:5d:6f:e1:17:2a:ff:98:24:8c:60:
                    60:e0:f5:ea:11:84:e7:0f:8a:21:6d:36:9d:22:6a:
                    e2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:45:22:37:BE:48:6F:EC:D2:C6:E5:C1:E5:E8:95:6F:85:10:E3:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e6409ce3-c4fe-3ce2-a438-7607f59cc2c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4040:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:6d:5e:a6:0d:2c:bc:0a:20:ca:ec:69:3e:03:fb:04:f2:28:
         81:69:da:b5:31:75:7a:87:50:9f:5b:57:49:30:c2:00:42:6b:
         62:8f:41:07:b3:f1:9d:e4:f2:3e:e1:26:cb:0f:b8:38:18:7d:
         78:25:ac:d6:e4:05:23:44:e3:00:a8:13:cd:5d:5c:91:06:07:
         e9:53:dd:67:05:77:bf:84:c1:58:64:49:cc:cf:1f:f7:16:99:
         e4:9a:6d:22:8d:0a:a8:df:40:5d:b0:1d:86:99:42:0c:e2:c5:
         67:b7:7c:7c:eb:8d:35:e3:44:f0:77:54:c9:a0:91:52:9c:8a:
         b6:c5:06:4d:f5:06:c2:0c:c3:5f:b3:c2:1b:d8:5f:73:be:ac:
         58:fd:01:48:92:d3:76:6d:89:9c:7e:9f:c1:e7:9d:2c:4d:26:
         a2:28:4e:70:73:0d:38:8f:f4:46:2e:1e:d9:c1:fa:32:57:d8:
         03:13:fe:4a:8c:25:94:09:1b:8d:55:94:27:bb:15:30:5b:b5:
         14:75:70:22:bd:d2:fc:b0:bd:7e:ae:17:b0:b5:f3:53:50:90:
         8d:37:b7:40:99:f6:79:85:6b:51:55:fb:01:fc:0c:cb:8b:b2:
         12:f6:0c:54:7c:47:8f:d9:7d:9c:79:c7:60:38:21:6a:81:ce:
         bf:ab:04:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:59 2024 by rpki-client on console-fra.rpki-client.org