Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f1f71f2d-5220-3100-9936-f81120a74ff2.roa
File:                     f1f71f2d-5220-3100-9936-f81120a74ff2.roa (raw, json)
Hash identifier:          mxYFAegOivcX7ZszPPIninf6LwifhUORhR4UKacl+bE=
Subject key identifier:   E2:18:54:6C:AA:A5:52:12:90:35:2C:8E:39:CD:C9:EF:66:C6:C5:07
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBDC443CF80B25E31D6380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f1f71f2d-5220-3100-9936-f81120a74ff2.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        2600:1011:b320::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:dc:44:3c:f8:0b:25:e3:1d:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=605384e1-bffc-4cbc-9b7a-193c3da5953a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:23:f4:03:4c:ce:a4:0f:0b:a9:c1:52:88:58:
                    71:b9:b6:92:b7:2e:b5:23:34:8f:42:ab:d3:c0:5c:
                    00:18:2c:e8:a9:4a:39:e2:be:f6:5a:7b:e4:8f:d9:
                    87:fd:a4:86:49:31:ed:fd:8f:c0:92:35:c5:89:ef:
                    94:03:3c:51:50:2c:53:00:75:d8:41:c5:e0:c3:1f:
                    e2:a5:21:fc:15:ca:c6:22:e5:34:fa:d3:15:71:a2:
                    ea:ed:69:e1:e4:e5:2f:8a:ab:8a:c1:5e:33:14:75:
                    8f:c3:7b:57:af:4c:cf:1e:71:8e:2e:5a:49:93:9e:
                    af:98:4c:cb:19:a5:45:3c:f0:bf:77:82:00:c3:ce:
                    97:5a:cd:cb:b6:a0:af:56:d9:2f:ea:fe:e6:5e:ea:
                    23:15:a7:69:a4:e6:67:5a:69:cc:e3:42:bb:d4:26:
                    e5:0e:f8:db:d2:16:92:4f:f2:ce:94:62:0d:1a:bc:
                    33:2f:f1:8e:91:d6:8f:86:f3:0b:9b:43:3c:c6:9c:
                    f5:df:02:0d:e9:33:30:17:87:f3:53:b2:fa:c9:58:
                    f0:49:0a:52:93:df:db:d8:89:ed:bf:ec:b4:1e:88:
                    da:28:80:e2:8c:09:93:95:15:71:cc:24:21:1b:b5:
                    49:2b:b8:7f:e9:2a:0f:3a:16:99:1e:7a:79:0a:dc:
                    8d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:18:54:6C:AA:A5:52:12:90:35:2C:8E:39:CD:C9:EF:66:C6:C5:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f1f71f2d-5220-3100-9936-f81120a74ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b320::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:d0:01:70:b4:b0:4e:94:c8:47:70:29:36:7c:c5:f2:2c:99:
         90:87:f3:29:c1:e2:d9:af:ce:eb:61:7e:6f:be:31:5a:87:91:
         1c:61:42:7c:35:68:3b:ce:5b:3c:89:87:5b:b2:9b:ec:6f:3c:
         7f:03:d2:8b:68:75:83:6f:67:7a:99:32:e0:8d:70:43:61:a5:
         82:3a:70:ff:07:57:20:55:66:f3:10:29:15:bb:a0:c9:d8:01:
         70:7a:57:8d:69:c9:3a:d2:0f:d3:5b:b9:f2:ef:d9:3f:5f:fb:
         83:86:02:4c:63:4d:f5:28:11:03:fc:f1:c1:fe:e1:38:44:d4:
         7c:02:77:2b:22:c1:ec:06:b6:51:f9:cd:b9:c0:b0:f0:d0:7a:
         ea:69:44:5c:80:64:77:0f:61:f1:56:df:ac:a3:81:0f:be:72:
         1f:3e:a1:cc:8b:bf:b7:a5:99:5b:ee:5a:ea:9b:ad:15:c2:5c:
         97:d1:84:9f:e5:88:2c:fe:d2:47:0e:80:d6:88:6f:5a:07:8c:
         7d:9f:58:cf:c7:60:3e:4d:cb:26:7c:b1:7f:14:be:d1:97:41:
         02:ec:22:8e:e2:27:e5:c8:04:6a:bf:ee:82:cb:8f:70:29:d7:
         80:98:17:be:69:84:b6:38:6f:1c:3d:3a:45:9b:52:6b:2d:dc:
         7d:9b:03:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:57 2024 by rpki-client on console-ams.rpki-client.org