Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/aee71fb8-29e8-34f1-8a61-7365ab1a96ae.roa
File:                     aee71fb8-29e8-34f1-8a61-7365ab1a96ae.roa (raw, json)
Hash identifier:          9iwFOpcCI/jlYjEr6/8LSy/VXjXsJ+1GbB4Ybm19X3c=
Subject key identifier:   DC:F4:EF:5D:9F:CE:29:FC:54:BC:AD:C8:86:ED:35:3B:AF:B1:BB:0D
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F432858456DA3C92A9C4AD1C67D0FEE40
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/aee71fb8-29e8-34f1-8a61-7365ab1a96ae.roa
Signing time:             Thu 04 Apr 2024 00:19:12 +0000
ROA not before:           Thu 04 Apr 2024 00:19:12 +0000
ROA not after:            Wed 03 Jul 2024 00:19:12 +0000
asID:                     63023
IP address blocks:        2607:a140:d00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6d:a3:c9:2a:9c:4a:d1:c6:7d:0f:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Apr  4 00:19:12 2024 GMT
            Not After : Jul  3 00:19:12 2024 GMT
        Subject: CN=f9c651eb-5b83-4978-be6d-0c652f0ec830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cf:ed:97:44:c8:ef:1e:cb:cf:d0:f0:bf:b8:
                    00:bc:b4:1a:92:f4:bb:43:02:51:41:ef:0d:92:8c:
                    71:f9:3b:9c:a1:d9:5b:6a:34:bd:da:ef:7c:ef:0d:
                    56:8b:13:ad:42:ac:c5:f7:86:52:d6:6c:d9:b2:ec:
                    06:a7:fe:51:bf:73:d7:fc:52:69:89:a8:67:b3:f1:
                    dc:81:80:d1:18:d4:48:48:14:df:c1:8b:f6:f6:92:
                    03:34:78:ee:6f:20:71:7c:f6:c4:0e:ca:b3:76:4a:
                    5c:15:34:f8:74:d5:22:27:73:18:1f:d8:aa:89:23:
                    29:a1:e4:7d:fa:a1:11:0e:9d:32:d8:a7:19:d7:1a:
                    8e:a9:52:59:2a:25:5c:71:d9:8d:be:b0:9d:44:d2:
                    51:ee:56:2c:a2:51:b6:2a:55:1a:97:3b:a0:cf:97:
                    c5:18:f6:cf:61:c1:29:33:f2:34:f1:c9:18:3b:34:
                    d6:2f:6e:92:98:41:c6:19:69:57:7a:4f:8b:a3:85:
                    ce:d5:6e:8e:5f:00:7f:7d:80:a3:3b:67:48:eb:1e:
                    31:4a:25:c8:eb:12:5b:b0:81:70:4e:77:4f:1b:6a:
                    9c:e2:ad:4d:fd:dd:cf:fd:60:5e:9d:e6:d4:bb:60:
                    e8:17:e0:01:b1:71:a4:cb:53:0f:1d:3e:be:a6:45:
                    1a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F4:EF:5D:9F:CE:29:FC:54:BC:AD:C8:86:ED:35:3B:AF:B1:BB:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/aee71fb8-29e8-34f1-8a61-7365ab1a96ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:96:51:ed:38:d6:23:98:e8:24:43:9c:d8:df:56:ea:a3:36:
         cf:bf:39:a4:60:23:5a:8a:de:af:d5:8c:87:5a:48:9b:51:ca:
         b2:68:ff:a6:45:5a:c0:91:a8:f5:4c:9a:65:d7:ac:d4:ef:88:
         68:9f:ea:33:fe:13:ea:0d:f5:8c:7f:3d:d1:29:69:89:4e:15:
         67:f1:ae:53:aa:5d:76:52:0d:37:31:a1:75:b1:d2:91:f3:50:
         fd:21:94:ef:03:7f:c7:65:ce:2b:ce:6f:9b:59:eb:0a:42:a4:
         54:31:c2:93:63:68:9d:db:17:1c:03:bc:f8:13:3b:db:a4:df:
         19:6b:6f:09:5e:09:d3:a1:57:fd:47:bb:d1:53:7f:c8:c6:8f:
         69:a1:8e:e1:81:d5:e7:e2:6b:da:08:8d:ad:37:52:e1:6a:39:
         23:99:6b:d5:b0:75:5d:e8:ab:f6:74:4a:76:e2:f2:0d:f6:7e:
         98:91:e2:a0:10:70:b0:dc:63:40:3b:ca:18:4c:23:1c:2d:52:
         b0:d5:35:21:59:df:51:3e:6f:13:8f:f8:c9:84:8f:83:28:81:
         c4:c3:8e:15:c5:cc:4e:72:f0:78:04:db:fa:74:05:25:75:ce:
         a9:5b:e7:79:f2:f9:70:82:79:d4:a8:0d:a2:6a:0a:6a:c5:ae:
         e8:37:9d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 16:56:43 2024 by rpki-client on console-ams.rpki-client.org