Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/66629caf-1ba6-3e84-aedd-cf8f644f2783.roa
File:                     66629caf-1ba6-3e84-aedd-cf8f644f2783.roa (raw, json)
Hash identifier:          m5/TZeXkvG3pADkfsgAw76m9LuBy86eQrNtZOs/jtB4=
Subject key identifier:   5E:37:3D:95:E3:22:AF:37:12:E1:D6:7F:BB:F4:E6:71:D2:ED:87:86
Certificate issuer:       /CN=71ff2374-a419-4dc0-be35-7dea3236aad7
Certificate serial:       010D0C9F43285844C7BA6883D84B10E72DEA7D80
Authority key identifier: F5:47:66:77:B3:8A:9D:36:C6:5F:A3:59:3B:33:44:AE:9C:AD:07:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/66629caf-1ba6-3e84-aedd-cf8f644f2783.roa
Signing time:             Sun 04 Feb 2024 14:00:31 +0000
ROA not before:           Sun 04 Feb 2024 14:00:31 +0000
ROA not after:            Sat 04 May 2024 13:00:31 +0000
asID:                     7018
IP address blocks:        2001:1890::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/71ff2374-a419-4dc0-be35-7dea3236aad7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/71ff2374-a419-4dc0-be35-7dea3236aad7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c7:ba:68:83:d8:4b:10:e7:2d:ea:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ff2374-a419-4dc0-be35-7dea3236aad7
        Validity
            Not Before: Feb  4 14:00:31 2024 GMT
            Not After : May  4 13:00:31 2024 GMT
        Subject: CN=a41b7ab3-da85-4595-8cbe-3de4b209a066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b1:69:98:34:6d:21:16:85:d3:c2:01:ad:fe:
                    8d:a8:5e:90:11:46:2f:a0:a4:48:e2:b6:05:c8:e0:
                    a5:eb:bd:13:ee:ce:34:d5:30:8f:7b:c5:d3:08:21:
                    5a:b7:9e:4a:4b:d5:f0:1b:a7:98:a0:43:1d:ea:e0:
                    2d:18:70:16:5a:6e:c6:03:8a:7d:c8:17:1a:80:c5:
                    8d:dd:f3:7c:ac:b2:bd:42:96:f0:88:65:5c:25:fa:
                    d6:e9:29:90:64:9e:cd:89:37:e0:eb:3d:11:6b:72:
                    5f:a4:55:e3:4b:2f:10:36:34:ac:2e:cb:01:0c:e7:
                    be:76:17:5a:7b:73:eb:b8:20:61:4d:07:f8:0e:96:
                    bf:93:c7:40:77:fe:26:e3:5b:d4:26:90:2d:70:ca:
                    fb:9e:11:0f:06:af:6b:6b:57:0b:db:23:bb:e5:8b:
                    31:35:c4:fe:8e:21:96:b4:fe:cc:f6:78:ef:7b:53:
                    99:f2:13:7c:41:20:0a:ff:06:62:1d:bb:6c:94:16:
                    b5:1a:7c:70:8c:dd:5a:25:f5:b5:48:34:01:ff:c8:
                    0a:eb:c6:a4:61:70:89:ce:65:40:78:ad:c1:20:d6:
                    2d:d9:7a:f0:e4:4d:1a:7b:d3:ae:e6:d4:3b:40:01:
                    98:8a:70:1e:b0:f4:51:1b:b0:d4:48:50:ba:90:34:
                    67:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:37:3D:95:E3:22:AF:37:12:E1:D6:7F:BB:F4:E6:71:D2:ED:87:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/66629caf-1ba6-3e84-aedd-cf8f644f2783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/71ff2374-a419-4dc0-be35-7dea3236aad7.crl

            X509v3 Authority Key Identifier:
                keyid:F5:47:66:77:B3:8A:9D:36:C6:5F:A3:59:3B:33:44:AE:9C:AD:07:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1890::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:5e:c5:82:da:3a:2d:44:75:82:a2:f5:cd:6a:b3:64:33:62:
         a1:55:f4:e4:3d:a4:84:73:39:3c:49:16:43:8f:e3:0f:3d:d3:
         b1:c2:f1:30:57:ec:ed:10:3f:d0:4a:16:c7:40:4d:ea:bc:98:
         c8:98:8e:44:d8:b2:62:37:ab:95:8b:fd:e1:75:4d:16:e9:0c:
         81:62:08:14:2b:e7:09:a5:e3:96:41:5a:78:29:36:1e:17:ae:
         68:06:95:d3:58:ed:d8:83:1b:6b:96:2d:2c:84:6f:7d:f3:c8:
         b7:83:81:d1:1f:76:50:3b:45:88:ff:0a:06:43:f7:f6:7b:d4:
         14:55:d0:1d:03:52:8b:71:03:07:aa:91:81:19:6e:53:28:db:
         96:43:86:83:c9:63:18:54:8d:db:1d:da:77:4a:a5:70:cb:a7:
         7e:8d:5e:f9:84:c5:87:ad:bd:b3:e6:d7:f1:8c:e2:77:e9:97:
         c1:f7:c7:f0:15:2c:a5:e6:37:09:19:b5:20:95:e0:8d:34:d3:
         e5:b2:32:fe:50:cb:6a:09:d3:e4:e4:c0:52:93:8b:1a:93:76:
         b4:06:4d:4d:80:a9:98:b5:0b:4a:d8:13:1b:e0:86:49:ad:fc:
         06:02:a6:ea:16:95:a6:99:20:41:ea:2a:71:fc:f3:b1:73:d8:
         d0:04:b8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:56:11 2024 by rpki-client on console-ams.rpki-client.org