Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eac98e2d-bc39-3897-9e95-0317f5752964.roa
File:                     eac98e2d-bc39-3897-9e95-0317f5752964.roa (raw, json)
Hash identifier:          5FOpSZVky9zG5Hc3H4mcHA21PrncGZKoV87bCHZPghQ=
Subject key identifier:   F1:11:95:91:62:E0:5B:59:B8:FD:1E:22:03:E1:6A:A6:5C:33:E3:DB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D769725C0AB51EEDBCF3880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eac98e2d-bc39-3897-9e95-0317f5752964.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1002:b058::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:97:25:c0:ab:51:ee:db:cf:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=5766eaa1-afd3-4ebf-b250-1ac66025bce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:b6:2d:e2:1b:70:a8:3b:c7:d5:94:3d:4b:
                    66:6b:db:07:4b:f1:99:b9:35:f7:d8:6d:8b:1a:45:
                    a4:ac:35:5c:5b:9e:70:2a:81:82:d9:50:a1:ea:38:
                    89:f9:c6:09:04:de:1e:d8:44:0d:fe:24:94:0e:f3:
                    96:fc:f5:d1:0c:2c:75:f8:6d:69:e0:b9:d9:38:07:
                    3f:72:e1:e8:d9:8e:e3:a4:b9:3a:00:a2:de:96:22:
                    4e:dc:73:14:60:39:3d:83:6f:13:5b:cd:7d:4a:a6:
                    9d:69:d5:4b:21:1f:45:73:d3:3e:62:b5:67:62:cd:
                    29:1b:4d:2c:9c:47:40:16:f4:05:7f:b5:ea:00:42:
                    ed:2a:ca:e6:e6:5c:10:81:17:f2:c1:f3:73:df:a9:
                    1e:78:46:38:86:5b:fd:97:af:34:f1:e9:bc:5e:d2:
                    3c:5e:56:19:2f:a7:89:ce:45:b3:66:d7:92:a2:a6:
                    8a:18:aa:2a:d2:5a:83:03:fb:80:36:14:83:94:4a:
                    75:21:49:1f:0b:25:bf:bc:76:a6:de:d7:64:e8:ed:
                    ad:0b:34:84:5a:cd:b3:70:b9:a8:74:03:ab:3e:9e:
                    d6:7f:10:ee:34:af:71:c0:25:c7:bc:7d:06:4d:2e:
                    2b:24:3e:de:d5:6c:ae:52:ad:d1:12:45:dc:e3:2e:
                    35:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:11:95:91:62:E0:5B:59:B8:FD:1E:22:03:E1:6A:A6:5C:33:E3:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eac98e2d-bc39-3897-9e95-0317f5752964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:b058::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:7a:16:0f:e3:ac:99:b0:c8:e2:2e:be:d7:f0:66:9f:fb:2f:
         17:d1:23:d5:26:ab:eb:c7:f8:87:bb:32:bd:d1:29:b0:b1:34:
         a8:46:2f:56:bd:55:f3:28:76:b3:5e:3c:cd:ea:1a:d5:a4:4c:
         97:dc:87:9b:8b:03:61:a1:92:b2:1f:0e:b2:9e:67:b3:83:9f:
         d4:3a:81:5c:a5:f9:e5:c7:3c:a2:94:d6:c0:84:18:3f:db:3f:
         89:66:e0:4e:14:8d:5e:dd:76:07:32:95:54:59:9b:0e:6e:2c:
         29:3d:12:0a:3d:b9:e3:83:50:c2:35:32:ad:4b:9a:d5:1e:1d:
         ce:a0:1d:5f:d7:30:ae:44:7e:b1:d6:7c:7b:5f:d4:03:04:0c:
         4c:85:17:b2:91:63:38:fd:76:ab:68:93:ff:39:31:b2:4c:89:
         70:58:94:05:f2:1b:8a:c8:b3:11:fc:f0:97:4c:eb:89:bc:1e:
         6d:bc:37:f1:c8:46:cc:35:2d:45:ff:a8:b6:0b:dd:c7:fc:c9:
         de:9e:df:92:e7:3a:4f:73:21:a1:c5:5e:2c:6c:89:81:e4:5b:
         3d:30:58:6b:0e:cf:4b:ea:52:d2:44:a2:80:83:36:d4:7b:e2:
         a7:d9:19:3f:74:ba:83:b8:40:1d:f7:dd:a9:49:79:3d:33:7a:
         b5:8e:51:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:00 2024 by rpki-client on console-fra.rpki-client.org