Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/66629caf-1ba6-3e84-aedd-cf8f644f2783.roa
File:                     66629caf-1ba6-3e84-aedd-cf8f644f2783.roa (raw, json)
Hash identifier:          dovacC5kkDHqFo8mK/x0QhCeNL8gVboeKmj9bXCEhu8=
Subject key identifier:   38:BF:A3:0F:BF:EE:B1:88:D1:23:54:11:68:71:B6:BC:1D:48:7A:AA
Certificate issuer:       /CN=71ff2374-a419-4dc0-be35-7dea3236aad7
Certificate serial:       010D0C9F4328584765A0E89FE9A550407ECFB580
Authority key identifier: F5:47:66:77:B3:8A:9D:36:C6:5F:A3:59:3B:33:44:AE:9C:AD:07:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/66629caf-1ba6-3e84-aedd-cf8f644f2783.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     7018
IP address blocks:        2001:1890::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/71ff2374-a419-4dc0-be35-7dea3236aad7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/71ff2374-a419-4dc0-be35-7dea3236aad7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:e8:9f:e9:a5:50:40:7e:cf:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ff2374-a419-4dc0-be35-7dea3236aad7
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=05f6459e-e1f2-4e32-bd07-edf2de1396d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ec:4a:91:cf:0b:5d:f1:68:66:00:c4:37:a4:
                    3f:c2:70:ce:a3:58:3c:f5:dc:94:e1:c4:18:26:e7:
                    16:ad:75:a1:fe:21:7d:75:19:02:60:8b:48:9a:37:
                    f0:4f:e8:41:85:2d:db:0d:f6:a1:5d:24:e7:2f:b6:
                    98:36:e8:b3:03:d8:28:91:b9:cd:d0:68:31:a3:4c:
                    7c:d6:81:6a:5b:75:3c:19:40:fc:6f:fc:a4:1e:04:
                    75:1d:d5:8f:1a:59:b7:9b:1f:c2:5f:71:0b:0c:7b:
                    cc:65:dc:07:94:23:16:64:f9:f2:13:4c:07:29:c9:
                    c2:1e:c6:99:34:90:c0:98:a3:2d:65:ed:f8:22:a7:
                    a7:46:33:8c:a7:51:ee:52:9d:67:68:c1:d4:9d:34:
                    32:34:88:35:0c:37:70:a8:c9:1b:74:ef:46:18:a4:
                    1a:70:4d:7c:38:6a:fc:c5:6f:cb:b3:89:8e:a8:82:
                    db:99:20:59:28:49:64:81:55:50:bc:52:a3:a0:be:
                    9f:60:f2:22:c2:54:8f:e5:0c:6e:d4:ad:64:88:cd:
                    6f:92:93:48:6a:2b:c5:47:94:b0:72:65:4e:95:ee:
                    75:d6:52:24:0a:c9:52:25:9b:fc:61:19:12:b1:6c:
                    52:be:6e:8c:5e:48:29:26:6d:98:5f:ed:65:fa:ee:
                    3d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BF:A3:0F:BF:EE:B1:88:D1:23:54:11:68:71:B6:BC:1D:48:7A:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/66629caf-1ba6-3e84-aedd-cf8f644f2783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/71ff2374-a419-4dc0-be35-7dea3236aad7.crl

            X509v3 Authority Key Identifier:
                keyid:F5:47:66:77:B3:8A:9D:36:C6:5F:A3:59:3B:33:44:AE:9C:AD:07:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1890::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:85:f6:b6:62:af:d2:e5:78:37:f4:bf:83:f5:6b:08:bf:a1:
         64:26:2c:44:aa:a8:0e:43:9f:6c:93:e5:49:22:22:1b:3b:84:
         d2:70:55:ea:55:0c:6e:c2:04:77:b2:63:e6:4c:37:45:b9:22:
         0b:e0:d4:22:4e:c8:a6:9a:c5:f5:21:f0:7e:13:35:a4:ab:cb:
         d3:21:65:5d:2b:01:b7:54:d8:c4:7a:f7:95:13:bf:05:dc:6a:
         ea:83:a5:0e:e3:d1:5f:5b:2d:0c:2d:06:ed:6a:6e:05:44:b9:
         4d:77:85:b8:dc:65:35:61:21:a3:ea:58:e6:b9:98:89:d2:84:
         6a:a7:c5:e3:0e:0a:39:49:10:cf:83:cc:fa:7a:b8:30:75:d6:
         39:95:b1:8e:1b:81:0d:1e:17:23:e4:b2:39:a7:5e:90:22:d6:
         be:f5:b1:6b:e8:cc:fe:f2:2d:b8:c7:c5:c0:8f:3a:18:cf:c9:
         da:54:27:3d:da:91:cb:9c:42:ad:ef:64:78:ea:bc:bf:3a:4e:
         5c:37:ec:86:36:eb:5c:b1:88:cb:f4:32:ac:93:f3:54:7c:bc:
         06:fa:5f:6b:22:19:c2:17:bb:a3:5c:33:5b:41:33:0b:32:b2:
         56:c3:60:3e:f7:48:7b:46:7e:25:3d:a9:b8:a5:d2:7b:5f:91:
         b2:e5:27:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:29 2024 by rpki-client on console-ams.rpki-client.org