Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/4614d0d2-f8ee-3ab8-9354-5cb1d0f0fa04.roa
File:                     4614d0d2-f8ee-3ab8-9354-5cb1d0f0fa04.roa (raw, json)
Hash identifier:          y3dDs+uGIPl97FEVRSkhAZrb3MXLL5WxeLIP+weQklU=
Subject key identifier:   84:99:9D:9C:9D:DB:48:78:29:9A:F4:D7:C3:17:E7:AC:4E:7A:4C:E1
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F432858456DA3F49804A50DAB1E6F9840
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/4614d0d2-f8ee-3ab8-9354-5cb1d0f0fa04.roa
Signing time:             Thu 04 Apr 2024 00:19:32 +0000
ROA not before:           Thu 04 Apr 2024 00:19:32 +0000
ROA not after:            Wed 03 Jul 2024 00:19:32 +0000
asID:                     63023
IP address blocks:        2607:a140:e00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6d:a3:f4:98:04:a5:0d:ab:1e:6f:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Apr  4 00:19:32 2024 GMT
            Not After : Jul  3 00:19:32 2024 GMT
        Subject: CN=0d2bd680-ad9c-461c-bde4-3e84aec36b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f9:fd:05:3b:21:2a:6b:1d:bc:7e:27:b8:a6:
                    0d:1c:69:47:13:b9:cf:f2:85:00:d1:2b:fa:1b:26:
                    df:44:3e:a2:36:32:e7:48:b7:b8:57:4f:01:e3:07:
                    aa:98:a1:26:cf:af:a3:e5:b1:ed:4f:09:c6:83:79:
                    d8:b9:d9:a6:7c:4d:fb:29:0a:90:0e:d1:15:fd:e9:
                    8a:73:a1:c6:d7:fb:89:9d:c3:6d:f2:77:93:32:95:
                    e2:41:3d:aa:38:54:de:8c:1d:99:fb:3e:f5:79:c8:
                    62:6c:09:68:91:d1:51:7b:26:a0:21:56:be:1c:0b:
                    f5:bc:45:12:af:aa:8a:fc:02:60:df:fc:e0:7c:88:
                    6f:5f:5a:fb:c4:81:ed:67:ba:d3:d9:da:10:59:c8:
                    c6:cf:10:a2:96:3f:96:80:c1:06:3d:25:a8:dc:f5:
                    38:45:1e:80:50:16:8e:dc:b9:56:58:e8:a7:76:71:
                    45:cd:09:5c:fc:07:b4:94:fc:1e:3a:cb:92:7a:da:
                    14:fc:5c:38:20:1d:05:a6:ce:90:c4:82:ba:e0:01:
                    55:e5:50:9e:85:ee:57:27:41:d7:cd:18:ff:1f:e7:
                    09:d9:26:df:58:e0:7a:cc:7e:ba:c2:49:30:53:80:
                    57:9d:c1:88:56:6d:e7:27:e6:c3:19:af:a4:72:c0:
                    7c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:99:9D:9C:9D:DB:48:78:29:9A:F4:D7:C3:17:E7:AC:4E:7A:4C:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/4614d0d2-f8ee-3ab8-9354-5cb1d0f0fa04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b6:8f:fd:bc:8f:6f:3c:2b:12:d8:de:1d:3b:4d:93:2d:02:
         24:61:8b:cb:da:1e:88:f2:43:2a:a1:49:44:58:f4:02:7a:a5:
         63:13:f3:f9:e9:57:29:77:09:c8:63:0f:37:c7:0b:58:42:3e:
         3b:e9:ea:83:2f:5d:94:8e:ce:45:05:8d:a9:37:d2:30:4e:00:
         1a:33:14:54:f7:7a:60:08:70:0c:55:1e:43:28:3c:0b:3a:4c:
         8c:87:94:2f:7f:39:8f:39:d4:43:43:ac:ba:68:05:f5:fa:3d:
         7e:a8:de:75:6a:80:bf:d2:09:7b:60:f8:67:57:f4:71:af:db:
         6b:2b:31:6e:03:5a:be:52:40:ac:66:06:8b:e5:21:0f:e6:88:
         79:d6:ef:b6:13:d1:22:21:41:42:b1:be:6d:72:50:cc:eb:7b:
         b7:e3:b1:31:58:05:f0:70:3e:0e:29:4f:41:3c:b9:7c:aa:3e:
         42:de:8d:5c:4a:84:eb:2e:11:06:c0:b8:8e:71:4b:0b:58:4d:
         53:79:f1:7f:d9:8c:14:a0:26:0c:61:13:dc:c8:0e:91:6e:83:
         f2:bd:63:d3:0f:3f:29:2d:ab:5a:20:4f:b0:d6:94:ce:b9:01:
         27:eb:58:94:a9:4e:0c:f3:9b:40:4a:17:14:52:af:cb:2f:f2:
         b6:83:55:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 16:56:43 2024 by rpki-client on console-ams.rpki-client.org