Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/13aa41a2-005a-35be-8760-54a1b0f5df39.roa
File:                     13aa41a2-005a-35be-8760-54a1b0f5df39.roa (raw, json)
Hash identifier:          1womCU3ZGRIYkeeFFEPEPQkylqUEAEb6zPTglrs6eaI=
Subject key identifier:   48:BD:9E:42:0E:CE:C1:DF:8F:AD:05:9D:2D:FB:77:7B:F0:85:E0:B2
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F432858480BDA78183BB5834243ED6140
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/13aa41a2-005a-35be-8760-54a1b0f5df39.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     63023
IP address blocks:        2607:a140:600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:78:18:3b:b5:83:42:43:ed:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=f147f630-2b12-422e-bbdb-9ca9c322dfbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:98:6d:36:95:39:0f:1f:0c:b7:36:8c:e3:cf:
                    0c:15:ca:7f:f6:92:6d:e8:fe:cd:0b:d6:cc:07:06:
                    bf:b3:cd:c7:a4:a1:ec:13:58:9b:32:87:7c:a7:da:
                    fb:6d:e2:74:ca:3f:4c:1d:94:28:a9:ed:ed:44:ce:
                    fb:58:7d:80:3e:00:bd:6e:0d:5d:10:77:bc:07:bf:
                    f2:0d:4c:eb:e3:08:8d:65:d0:fa:83:5d:d1:3c:03:
                    02:de:4a:7e:92:c5:e1:97:c4:28:c0:07:7f:e8:3d:
                    2a:8e:80:26:db:cf:d3:ac:96:30:3a:dd:f0:f5:c5:
                    a2:40:d8:83:93:f1:f3:2f:5c:86:18:7a:bd:d9:e0:
                    83:26:3e:48:5c:03:32:14:26:1f:eb:1c:25:4f:9e:
                    9c:c0:fe:83:fa:a4:dc:09:58:02:c7:a0:1b:57:24:
                    61:1d:0b:4a:cc:dc:b3:f4:49:15:47:ac:a4:44:5e:
                    e1:03:0c:6a:c0:b6:bd:b5:ac:11:fa:aa:cf:7b:75:
                    53:e2:40:73:0d:39:c9:65:93:00:18:80:b6:69:23:
                    78:39:3b:e6:0d:b3:d0:9c:6a:bb:1a:5c:95:58:cb:
                    41:37:4b:12:56:5b:7a:5c:d6:83:43:fb:a3:38:2e:
                    79:8d:61:d9:4b:c6:e4:92:68:7c:71:76:c8:b1:7e:
                    ef:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BD:9E:42:0E:CE:C1:DF:8F:AD:05:9D:2D:FB:77:7B:F0:85:E0:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/13aa41a2-005a-35be-8760-54a1b0f5df39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:9b:62:8c:57:04:3e:13:17:5b:16:d2:87:37:ca:47:42:c7:
         50:ca:9f:e0:e3:0a:6d:ce:38:d1:2d:13:8c:58:d1:e9:17:04:
         97:42:46:05:bd:37:5b:7f:11:c0:05:6b:0f:0f:6d:17:49:cc:
         17:11:f5:f4:46:f3:9f:bc:1a:4d:af:0f:64:7b:fc:33:7b:67:
         eb:42:78:37:1a:9b:a5:86:77:d0:72:2c:59:0a:5c:6e:ce:ce:
         66:e5:6a:99:15:39:b0:bf:ad:72:d9:1a:be:ff:e3:c7:d7:43:
         78:f8:d0:34:fe:6c:9f:ab:a3:f2:39:e4:31:b7:af:31:8d:08:
         67:98:4b:ba:48:a6:df:31:a6:df:98:d7:da:61:4f:20:b1:c0:
         0a:37:51:a6:c3:d0:c2:99:ab:4c:60:1d:1d:70:5e:a7:9e:f5:
         5f:dc:fc:e9:fd:dd:e2:ec:36:cf:53:06:87:61:a5:f6:5d:dd:
         bb:66:f5:99:70:a7:50:42:68:5f:80:e0:53:e8:31:b0:1d:04:
         b1:e8:03:c6:3d:2b:f9:b0:a3:13:0d:f7:67:b6:8a:e0:2a:c3:
         4c:83:36:00:53:9d:83:b8:45:b7:c6:62:2d:a6:64:ac:81:99:
         0a:91:ce:d8:c9:1c:b6:d3:3e:dd:7e:6d:7c:bf:27:36:96:0a:
         0b:14:fd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 20:34:18 2024 by rpki-client on console-ams.rpki-client.org