Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/13aa41a2-005a-35be-8760-54a1b0f5df39.roa
File:                     13aa41a2-005a-35be-8760-54a1b0f5df39.roa (raw, json)
Hash identifier:          ylVWjZ1WOc/+RBILrEI90sTHUL4Og9xxnUdLUice2ak=
Subject key identifier:   97:FF:22:B8:8F:15:C5:76:4F:C1:3C:D7:A8:EC:88:D8:FE:9E:C3:2C
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F432858456DA33E83FC91D7BB1CEDF440
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/13aa41a2-005a-35be-8760-54a1b0f5df39.roa
Signing time:             Thu 04 Apr 2024 00:18:06 +0000
ROA not before:           Thu 04 Apr 2024 00:18:06 +0000
ROA not after:            Wed 03 Jul 2024 00:18:06 +0000
asID:                     63023
IP address blocks:        2607:a140:600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6d:a3:3e:83:fc:91:d7:bb:1c:ed:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Apr  4 00:18:06 2024 GMT
            Not After : Jul  3 00:18:06 2024 GMT
        Subject: CN=370c627d-200a-470a-85fe-373184ef0859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9a:94:78:d3:7f:8d:84:7d:7d:34:0f:5d:15:
                    2e:75:c4:39:76:15:30:e8:da:66:fc:cb:b8:e3:dd:
                    11:88:1c:d5:f1:cc:8e:fe:e9:0e:b2:e1:15:a1:92:
                    7e:ce:89:08:72:0b:4e:d6:b8:7e:8b:e5:97:51:a8:
                    3e:aa:0e:68:35:e3:34:f8:ff:f7:0d:82:e3:89:2f:
                    a7:49:68:fb:58:4c:9a:48:ae:04:77:fd:c7:77:46:
                    a6:c1:62:dd:cc:00:d0:ac:7a:76:1f:a3:2d:8d:1d:
                    ea:4c:f6:e9:7e:5c:76:7b:94:d3:a6:67:e0:f3:91:
                    e9:bc:7b:22:e6:91:52:1b:6b:78:62:eb:3a:a9:79:
                    44:81:9b:c7:2a:b4:f7:ba:95:33:b1:db:a4:99:06:
                    da:e5:c8:71:6c:cd:a6:ee:2a:6d:9c:f2:85:78:b2:
                    5b:48:fb:47:0e:83:98:84:27:2a:6d:d0:6b:2f:01:
                    32:8d:a1:72:ce:78:17:d0:4b:3e:59:d1:1f:91:a6:
                    2d:e1:e3:66:5d:8d:76:04:81:13:1a:10:6c:fe:36:
                    c8:14:7f:f9:24:cb:ff:67:1d:14:02:8a:df:88:51:
                    1f:20:a0:09:54:dd:a5:bd:da:c5:28:b5:8a:ed:6f:
                    0c:a0:1f:72:6c:cd:fc:fa:9c:ff:a6:52:01:60:3e:
                    b9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FF:22:B8:8F:15:C5:76:4F:C1:3C:D7:A8:EC:88:D8:FE:9E:C3:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/13aa41a2-005a-35be-8760-54a1b0f5df39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:1c:4a:3c:60:9b:3a:6c:04:ae:fb:f4:10:4f:4d:11:e6:11:
         d6:17:c9:98:2d:ad:b3:14:a9:bd:2c:56:f7:8b:9d:81:39:12:
         95:9a:3b:2c:b4:06:a5:4e:3d:2d:39:38:27:1f:2d:9d:16:0b:
         f4:74:cf:43:23:e4:e3:7a:65:1e:2a:3d:a5:9d:b8:2b:05:ef:
         9b:65:46:06:ff:82:74:03:51:dc:54:ff:ff:b6:4a:76:82:eb:
         82:35:83:ba:32:81:39:cd:9e:8e:d7:b0:ae:84:38:4b:f6:3e:
         34:6f:db:e5:12:b6:c8:0e:d3:9f:23:30:38:ee:04:e2:fa:cf:
         97:a1:6e:06:1a:f1:03:fd:e1:4c:28:80:8f:2f:82:41:73:90:
         65:bd:17:b0:a3:7d:23:be:96:d4:b8:20:b3:e6:5b:a1:75:32:
         6a:bb:e8:64:e0:7e:7e:c5:18:0b:58:ca:0a:3c:9b:cd:23:99:
         e9:ac:64:2c:e3:c0:d7:b9:cb:de:08:25:63:0d:07:20:af:1d:
         05:82:a3:6e:60:11:1a:b2:af:f2:b7:a9:ca:10:18:0e:d6:2a:
         e6:b4:e3:7f:f6:d4:45:c3:2a:64:58:99:8e:63:e1:0b:d9:03:
         11:c5:b0:e6:46:2f:da:ff:fb:5f:ba:f9:12:a0:af:4a:89:73:
         06:cf:5c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:38:05 2024 by rpki-client on console-fra.rpki-client.org