Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/229c2621-344f-3399-b465-15c4c4e14b30.roa
File:                     229c2621-344f-3399-b465-15c4c4e14b30.roa (raw, json)
Hash identifier:          QeZrsJC01wjPpoVOK85ZxRWZ8PgGc1c5NqJCjrjhB7o=
Subject key identifier:   DF:B8:7F:B3:B4:F8:B1:7B:70:2E:5A:A8:3A:F3:DC:E5:1D:B8:35:D0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845DEC91951ED36A3F9A2B685E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/229c2621-344f-3399-b465-15c4c4e14b30.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     701
IP address blocks:        2600:4040:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:19:51:ed:36:a3:f9:a2:b6:85:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=401db38f-6894-4980-a7d4-fed3b49b1152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e2:4c:b9:cb:14:79:0d:2e:df:ff:25:79:ab:
                    d0:85:07:f1:aa:ed:28:ef:1a:32:b8:c1:b9:d5:7b:
                    82:4f:4f:55:e2:fd:b4:63:7c:e9:dd:3e:98:7f:26:
                    e4:86:7f:24:da:6e:e5:eb:42:dc:44:8d:d1:48:7c:
                    fa:e8:3f:5f:01:f3:91:78:99:55:e9:15:1d:25:dc:
                    94:af:72:3b:a3:d8:f0:2f:40:4c:ea:4c:47:e6:5f:
                    77:89:9a:13:f6:ae:7c:85:a5:03:45:09:63:eb:d5:
                    2f:db:f9:f1:ad:6f:15:ee:39:d0:da:4b:53:df:d7:
                    87:cf:cd:9d:98:73:66:c1:9b:43:fe:28:5d:ab:52:
                    4b:c1:e2:35:18:a2:0a:9b:00:ca:f2:6d:da:fe:f0:
                    5f:ce:6e:fe:8d:14:c8:f3:44:6d:be:10:bd:f2:00:
                    33:cb:1a:87:a2:56:36:7c:4e:26:58:16:c9:ef:66:
                    95:4c:46:43:56:33:6d:6b:9f:b4:55:fb:48:ba:f2:
                    00:4a:bf:ab:3c:9a:c5:d7:f5:58:66:a3:fc:51:d1:
                    86:7d:ee:68:84:f6:a3:b1:aa:4b:41:76:76:14:5f:
                    df:97:1e:82:14:c2:2a:1b:5b:a3:0d:92:4a:f2:fb:
                    30:dc:f7:9a:ae:98:c6:0c:ed:8b:df:32:5e:86:fc:
                    bc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B8:7F:B3:B4:F8:B1:7B:70:2E:5A:A8:3A:F3:DC:E5:1D:B8:35:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/229c2621-344f-3399-b465-15c4c4e14b30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4040:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c0:3e:83:47:6b:88:d9:87:ef:ea:87:b9:b4:e2:3f:62:dd:
         2f:2b:ae:8a:3a:dc:96:e2:b3:6d:a3:59:d9:de:8b:46:64:b3:
         5b:f5:12:f7:4d:7c:32:9e:bf:27:7f:8f:bc:68:15:49:ac:12:
         ee:3d:42:87:43:15:a4:10:44:dc:22:16:e4:51:2e:1a:f4:17:
         ef:96:3a:97:da:e1:6e:d3:5a:9a:20:40:33:ce:66:69:a9:e4:
         82:cf:b7:a0:f8:78:84:62:ac:83:02:79:4f:72:65:73:3a:a4:
         d2:e9:a5:31:e4:52:1b:f5:61:7e:c6:70:b6:36:be:af:51:3b:
         90:f7:74:7c:ad:76:c0:f4:96:87:1e:fd:51:0f:41:51:4c:2f:
         26:da:dd:61:6d:03:89:c9:b0:d6:e6:2d:b0:b9:64:64:57:18:
         3f:87:c2:da:ce:5b:6f:f6:5e:3f:eb:1f:08:a7:23:79:89:ab:
         62:40:f5:2c:12:0b:dd:3b:36:20:ca:08:f9:20:4a:06:62:d8:
         ae:9e:f7:6a:3c:3c:cc:29:c4:92:bc:50:54:e9:83:c8:bf:c3:
         bb:95:02:1e:49:13:ac:3a:e0:8e:3d:22:25:a1:64:a4:0e:df:
         b8:3f:0a:ce:a9:cc:e9:de:e4:ed:d0:7f:06:b3:d3:5d:20:71:
         6b:fd:1b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:33:52 2024 by rpki-client on console-fra.rpki-client.org