Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/13aa41a2-005a-35be-8760-54a1b0f5df39.roa
File:                     13aa41a2-005a-35be-8760-54a1b0f5df39.roa (raw, json)
Hash identifier:          N4dgOftpMQqMnNJqrETNEvge3QTvcQxDSEguZbXiAXg=
Subject key identifier:   EA:4F:60:41:6D:E2:FB:29:7A:0C:74:0C:BD:3E:7E:1C:CC:27:69:94
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F432858472C65E2E2FEAC0CAB6934E460
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/13aa41a2-005a-35be-8760-54a1b0f5df39.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     63023
IP address blocks:        2607:a140:600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:e2:e2:fe:ac:0c:ab:69:34:e4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=b09c9cfa-2076-4e12-9507-0024d425874e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:37:78:53:77:d6:8c:ff:09:77:df:25:cd:97:
                    d7:a9:df:16:e5:2b:0b:2b:24:73:ab:1b:7f:23:30:
                    76:6d:8a:62:b2:73:d2:ee:77:de:87:64:8b:79:85:
                    86:ea:2e:31:fc:7d:5c:10:f1:4b:e3:7c:da:b8:a4:
                    5e:6e:cc:39:24:9a:6e:99:6a:95:47:06:b7:0d:31:
                    6d:b3:26:82:25:7c:4b:2f:5f:03:9f:c7:bc:39:64:
                    ac:4f:c5:c2:d2:9c:79:eb:d6:35:a3:26:e2:3a:fa:
                    a9:93:d8:69:f6:b1:d0:d7:3d:b6:95:e2:5a:c7:53:
                    ee:52:74:72:ce:9d:ab:7f:a8:77:de:db:aa:9c:16:
                    e6:e0:fa:0e:5b:f2:cb:3c:c3:64:f0:f3:fc:ed:c5:
                    01:3d:09:59:45:13:63:de:5c:ef:79:d3:37:1d:4f:
                    d4:78:91:72:2b:71:12:89:e7:c3:c2:17:cf:60:72:
                    36:2f:fb:14:ce:02:de:d0:79:e9:e1:1d:62:77:d9:
                    b5:8f:33:1e:5c:e7:cd:39:7a:ba:db:57:8d:6f:e7:
                    aa:b2:71:8b:e0:71:72:83:82:72:ef:91:bb:02:44:
                    bb:35:a5:15:42:5d:7e:ce:2b:c2:96:86:7c:8f:69:
                    51:af:f7:17:63:69:28:f5:8a:25:0f:79:73:da:f4:
                    37:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4F:60:41:6D:E2:FB:29:7A:0C:74:0C:BD:3E:7E:1C:CC:27:69:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/13aa41a2-005a-35be-8760-54a1b0f5df39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:14:a7:04:4b:b9:8e:47:dc:57:7b:c9:18:ee:22:d0:4c:05:
         35:ab:41:de:b9:20:83:9c:19:38:f0:aa:a2:d2:a0:53:45:fc:
         99:b0:7e:4b:4e:8c:73:f1:3c:d6:4b:38:6c:42:e7:ed:e5:3c:
         24:ea:34:19:29:7c:10:77:ea:25:25:69:1e:16:9a:29:89:c8:
         2c:5a:f9:73:09:9f:61:d7:09:b5:90:1e:b4:be:49:5f:88:65:
         9a:dc:fa:08:50:11:8e:bb:bd:0d:c1:a2:6f:5d:5a:66:c5:45:
         3e:6e:25:11:33:38:24:a1:d1:c6:40:78:93:c1:bd:31:1b:b5:
         f3:12:4c:48:19:dd:e7:aa:a5:90:07:a3:34:71:73:96:47:47:
         8d:14:84:14:55:42:4b:b2:45:7d:85:8d:b1:f2:9d:40:e1:19:
         a4:98:f2:15:4a:81:3e:cc:54:cc:c8:94:04:c2:14:5c:8b:1e:
         98:0d:d6:c9:2e:fd:5a:b6:e5:4d:3b:55:fe:77:53:5c:89:ca:
         8b:3a:fa:ef:ad:ee:82:4e:4f:7d:53:08:b9:76:33:fc:e6:71:
         c6:36:36:2d:7b:fa:f7:01:84:80:e5:7c:9f:34:26:f2:2b:c0:
         4a:30:af:4d:54:4e:b5:c5:7c:ca:c3:6e:b4:2a:de:ff:fb:4b:
         a7:ad:1b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:39 2024 by rpki-client on console-fra.rpki-client.org