Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/17bdc031-206a-3420-b709-d3ce9d5f5850.roa
File:                     17bdc031-206a-3420-b709-d3ce9d5f5850.roa (raw, json)
Hash identifier:          VAnltYb9rgfxOyW7BD6vPp/3toxi8sBCPU4Zmw4SwkQ=
Subject key identifier:   E1:51:31:C4:C1:7F:F5:61:25:1D:87:56:B9:F0:4F:DC:AB:CD:E3:ED
Certificate issuer:       /CN=29c6a19e-a83c-43ad-8d10-68daeb160033
Certificate serial:       010D0C9F432858459368903051B66759586DE780
Authority key identifier: 45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/17bdc031-206a-3420-b709-d3ce9d5f5850.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     397901
IP address blocks:        2602:fc56::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:90:30:51:b6:67:59:58:6d:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c6a19e-a83c-43ad-8d10-68daeb160033
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=fe2b34bf-0238-415c-87ae-5e1b5f72ca20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1c:72:18:06:5b:17:ce:f2:d2:2d:4e:04:69:
                    3a:33:b4:c7:7a:0e:61:4b:d0:f4:69:88:cb:9c:e4:
                    fa:c9:f6:d5:cb:07:3c:35:75:11:be:30:eb:2a:82:
                    0d:bd:88:d2:34:0e:bb:a6:31:7b:d8:97:46:11:24:
                    b8:6f:c2:0d:e1:bf:1c:31:24:bd:3d:7e:fd:d0:4a:
                    d7:ed:9e:65:53:40:3c:20:dd:22:b5:17:63:ab:d3:
                    c8:d2:32:32:a2:73:f5:74:c2:44:7e:e3:0b:dd:ae:
                    a0:31:2f:92:8f:95:a0:61:fb:7b:60:cc:a1:92:d9:
                    b3:d3:b6:ae:17:55:b1:c6:a0:a9:8a:4f:e8:7d:1a:
                    4a:ea:dc:b5:14:eb:c6:57:94:89:fb:47:3e:93:1b:
                    6e:53:c2:ba:89:5f:ea:0d:28:91:81:49:12:f3:a0:
                    5f:d5:84:39:17:74:40:53:9d:e8:49:37:31:6b:15:
                    08:52:59:6a:f1:5f:ba:57:61:0e:de:db:0e:65:0c:
                    b4:c4:b5:79:ed:ba:de:3a:7d:8c:a1:19:e2:9b:be:
                    01:15:f0:92:89:e9:4f:f6:7c:8f:3b:5c:16:16:81:
                    7b:2e:ef:3a:4c:d3:b5:49:e5:0c:06:bf:cc:b4:c9:
                    db:80:94:5e:7d:74:c5:7d:3a:83:c9:fa:e7:29:c5:
                    ed:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:51:31:C4:C1:7F:F5:61:25:1D:87:56:B9:F0:4F:DC:AB:CD:E3:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/17bdc031-206a-3420-b709-d3ce9d5f5850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl

            X509v3 Authority Key Identifier:
                keyid:45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc56::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:8f:2e:93:b8:1f:e4:4b:5f:ba:50:fa:aa:5d:2d:78:b0:3b:
         14:56:c5:b9:ed:2c:43:bb:5a:c4:45:10:0d:e9:73:fe:33:69:
         bf:d4:f9:bb:31:f2:c3:11:4b:73:36:7c:43:6f:70:54:10:84:
         ea:c8:1d:1a:ec:0f:ab:7f:c6:06:b5:2c:07:0c:d1:c2:a3:3b:
         72:ff:aa:47:94:03:e2:4a:b7:90:b5:30:9f:10:0f:27:bd:a4:
         6a:c0:cd:bc:2b:df:5b:e2:50:0b:0f:05:9e:6c:7e:ef:d7:5a:
         bb:43:69:2f:3c:fa:49:03:f1:07:55:f1:2a:41:71:0f:fa:d2:
         30:52:0e:ff:a6:42:8f:a3:81:a9:4c:67:3f:f3:79:f9:ab:c8:
         2a:ce:f7:b8:e1:24:e1:cd:ad:a6:c5:89:09:17:ce:f1:cb:c6:
         7c:fd:06:ad:6d:97:e4:32:e5:94:66:55:e8:e0:7a:5b:41:07:
         a4:5d:1a:fa:0d:fc:96:0c:b4:91:c7:98:09:cc:ff:3f:fa:c9:
         23:cb:c6:55:40:ce:51:df:b7:33:5c:77:12:0e:99:e2:68:19:
         8c:9f:48:c7:be:7e:78:03:fd:ef:af:6b:6e:97:00:7c:fd:dc:
         73:6b:45:1d:b8:e1:34:8e:78:94:14:f8:f6:e3:f9:b8:0a:31:
         12:c5:b8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:08:37 2024 by rpki-client on console-ams.rpki-client.org