Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/cceec8a1-534b-35b8-955e-65f71ceb4f7a.roa
File:                     cceec8a1-534b-35b8-955e-65f71ceb4f7a.roa (raw, json)
Hash identifier:          iMx7t1mXt5T7M9Xc+CBUNf4gnS/O5TsfffGa0tKydD4=
Subject key identifier:   DF:B2:EF:BF:F5:5A:1B:C8:15:4C:B7:0D:62:D6:22:FF:E2:33:21:E6
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285845628D8A4BF3B371C16D680A00
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/cceec8a1-534b-35b8-955e-65f71ceb4f7a.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     0
IP address blocks:        2001:504:13:1::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:8a:4b:f3:b3:71:c1:6d:68:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=9dd5d4e1-4bea-4974-8a29-af34330c189b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0c:bb:56:ff:f7:86:69:4d:07:44:b2:42:b1:
                    da:77:12:d2:ff:57:ad:fb:75:e8:6d:be:6e:9c:a5:
                    53:79:76:6e:d0:50:29:92:60:30:08:1b:1f:31:11:
                    b7:66:8e:cf:3b:98:1d:28:b0:d2:38:a3:55:a1:0d:
                    70:e2:40:23:f2:77:48:a4:32:3e:48:1c:d9:01:d4:
                    9e:81:e2:cf:ab:8e:21:9d:79:34:70:54:bf:b7:49:
                    82:3f:fa:45:58:de:a2:49:bb:20:0c:68:32:51:9b:
                    a4:38:d4:a1:bd:3b:2f:15:d4:97:1d:80:df:c5:15:
                    41:e1:04:a8:88:7c:f2:ed:be:ae:dd:55:22:bb:e1:
                    ec:7d:af:ab:63:33:06:84:15:b4:29:19:c2:b5:51:
                    3b:be:2b:66:35:31:09:13:ff:9d:42:a7:61:3f:1f:
                    ee:0a:4a:b8:0d:24:db:58:f4:cf:f3:2d:e9:72:ee:
                    a0:90:02:f9:72:b2:1f:ad:26:83:87:6b:7a:34:5d:
                    5b:70:f9:a5:07:d3:14:c4:a2:97:06:30:25:31:08:
                    23:55:45:d0:b6:8e:8f:b3:87:39:1a:db:f8:c4:3c:
                    53:d5:54:25:c8:6a:71:4f:02:22:66:a5:b3:d1:c5:
                    17:90:92:31:da:2d:a2:09:1d:9d:ae:38:da:fb:f5:
                    64:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B2:EF:BF:F5:5A:1B:C8:15:4C:B7:0D:62:D6:22:FF:E2:33:21:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/cceec8a1-534b-35b8-955e-65f71ceb4f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:13:1::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:03:93:a4:6b:51:0f:5e:e4:5c:a9:b1:9c:b7:92:01:66:e7:
         f6:0d:c9:5e:31:a0:76:87:db:71:b6:bb:c3:75:d2:ff:4b:a0:
         fa:29:8b:68:c4:43:fc:25:4d:50:e9:eb:9f:83:3c:40:4a:a8:
         ba:30:8c:85:0b:11:9c:4f:10:01:a1:35:f7:4f:72:7d:5f:29:
         4a:7d:53:cf:e1:d0:a1:52:e6:8e:6f:fb:d5:27:ab:8c:53:17:
         e5:98:e7:a5:77:79:97:9b:f9:09:e2:e7:f2:83:98:35:64:b7:
         55:de:8e:3d:86:24:12:69:1e:e1:93:c7:8d:0c:58:13:54:3c:
         1b:da:51:d4:48:f1:31:dd:43:a6:96:c4:ec:9c:5d:fd:f2:62:
         6a:50:7c:c7:e5:cd:8f:09:43:73:19:e4:be:7a:a8:e0:37:92:
         a2:73:23:af:45:da:07:33:19:25:68:7c:87:f5:1e:cd:f5:da:
         20:ad:e4:77:c6:f8:fa:e7:2a:35:66:07:4b:dd:5e:16:ee:e1:
         dd:6c:40:1a:b2:f5:70:88:e8:16:10:8f:9d:af:83:e1:ac:82:
         e7:d7:fd:19:d2:bb:19:e3:94:8d:71:d3:4c:49:d1:35:35:08:
         c2:0b:53:c7:ab:49:7a:7f:b2:03:1f:14:44:83:67:44:20:54:
         bf:16:84:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:10:36 2024 by rpki-client on console-ams.rpki-client.org