Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/014e7cbd-d848-3af8-8211-5ac82c77859a.roa
File:                     014e7cbd-d848-3af8-8211-5ac82c77859a.roa (raw, json)
Hash identifier:          +18CmQLRnnnBn8wjqSr0q31q6/PfOPtKys1dVwGcpxk=
Subject key identifier:   96:56:9B:33:AB:08:2F:F7:09:FB:98:78:55:24:C3:FA:6D:63:5F:55
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F432858456DA132108342FF47501E2B50
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/014e7cbd-d848-3af8-8211-5ac82c77859a.roa
Signing time:             Thu 04 Apr 2024 00:13:58 +0000
ROA not before:           Thu 04 Apr 2024 00:13:58 +0000
ROA not after:            Wed 03 Jul 2024 00:13:58 +0000
asID:                     62563
IP address blocks:        2607:a140:900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6d:a1:32:10:83:42:ff:47:50:1e:2b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Apr  4 00:13:58 2024 GMT
            Not After : Jul  3 00:13:58 2024 GMT
        Subject: CN=22f4212b-b9f6-401f-8001-f993396eb912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:d4:4e:e8:50:4e:16:5e:16:fb:33:58:9d:
                    10:23:e0:fd:cb:b5:b6:f6:b1:6f:97:f8:c2:c6:7a:
                    6b:02:60:ac:c0:69:e0:4d:58:04:74:02:18:cc:ee:
                    6e:49:88:75:d6:e0:fb:21:f7:79:88:2c:20:38:56:
                    c6:6c:e1:60:3b:66:02:15:c5:90:2c:66:b2:5e:2b:
                    64:2b:17:f1:91:f6:e0:c4:79:37:a5:e2:63:ab:02:
                    a5:2f:7b:45:47:2a:c2:a0:88:49:ac:41:b1:7e:b2:
                    69:6a:1b:c4:72:6d:5c:7f:7b:54:ec:7d:d0:30:5d:
                    19:08:96:7b:1a:15:65:b7:a6:ec:bf:ce:04:25:b0:
                    d6:b0:80:c9:26:c0:2b:85:83:ca:b4:c2:dd:73:64:
                    22:3e:d6:00:13:8f:8c:a0:ec:e1:29:5e:d6:7c:ac:
                    90:83:69:cc:f6:20:51:9f:24:ec:87:4f:0c:89:83:
                    03:f7:87:ea:ca:1e:96:6e:0f:13:f6:e2:bb:52:63:
                    20:9d:84:b0:f5:1b:97:c7:cf:e5:b9:1c:99:c8:9a:
                    d9:c2:c0:5b:92:97:cc:f8:a9:29:f9:04:0f:4b:29:
                    1e:ae:c4:97:a3:5b:d0:8e:ef:f9:d1:7f:f1:3f:b4:
                    ae:79:87:e9:4f:63:bf:b8:c7:02:f1:5d:e6:9e:df:
                    55:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:56:9B:33:AB:08:2F:F7:09:FB:98:78:55:24:C3:FA:6D:63:5F:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/014e7cbd-d848-3af8-8211-5ac82c77859a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:8e:6c:5a:33:2d:07:49:7c:89:12:36:75:15:ed:d3:2f:3c:
         b6:23:c2:ad:e4:e0:07:4b:d3:42:cb:99:51:9e:06:3b:9e:d0:
         26:62:31:1a:23:9d:8e:f0:95:dc:40:6b:4d:41:2c:4d:85:c7:
         3b:8b:1d:e1:1a:53:37:1c:b4:60:ee:8a:2c:c1:4c:3d:11:c0:
         22:75:78:5d:fd:cb:0c:ad:c0:91:d2:67:47:99:05:56:29:29:
         66:ac:27:76:0a:18:94:8e:7e:17:a8:d4:b0:69:73:5e:e2:fc:
         01:af:53:66:62:ae:a5:5c:c7:d8:80:89:1f:a1:6c:fe:f0:a4:
         a1:23:9e:eb:aa:67:ee:13:bc:2d:ac:76:7c:dc:44:11:bf:d7:
         74:4d:72:e4:4d:1e:8a:57:52:f2:68:3d:bf:60:88:6a:05:b2:
         1a:8c:a3:27:8a:de:e6:8c:d3:71:d7:56:2a:06:a6:76:db:40:
         36:d8:c3:06:c7:f4:4f:bb:bc:ba:a4:d6:01:94:45:fd:6c:d8:
         c0:e3:ed:89:f9:6d:95:2d:e9:2d:9f:45:77:1b:22:69:b1:60:
         1c:e6:79:40:75:1c:97:3c:6f:4a:ef:83:b8:20:b5:36:ba:97:
         d9:8d:74:5b:16:79:73:19:3c:ce:d5:64:fb:85:92:db:26:38:
         a9:8e:33:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:50:10 2024 by rpki-client on console-fra.rpki-client.org