Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/38d11b6f-5994-3e0e-b8fc-88f1251730e4.roa
File:                     38d11b6f-5994-3e0e-b8fc-88f1251730e4.roa (raw, json)
Hash identifier:          GdwUq7xGkRvvfO77ucCawqpC8guoBygu6nMfOK8aZMs=
Subject key identifier:   95:B6:87:A0:8B:23:26:44:55:1C:65:3B:62:E9:BA:87:58:27:22:48
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F432858459C9863151EAD9B54C246C9E0
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/38d11b6f-5994-3e0e-b8fc-88f1251730e4.roa
Signing time:             Sat 20 Apr 2024 19:59:13 +0000
ROA not before:           Sat 20 Apr 2024 19:59:13 +0000
ROA not after:            Fri 19 Jul 2024 19:59:13 +0000
asID:                     62563
IP address blocks:        2607:a140:1000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9c:98:63:15:1e:ad:9b:54:c2:46:c9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Apr 20 19:59:13 2024 GMT
            Not After : Jul 19 19:59:13 2024 GMT
        Subject: CN=b4a7ae29-f3a0-41d5-9011-22843ea90760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0a:6d:bc:86:6c:18:e4:fc:ef:63:20:54:c3:
                    2e:74:ee:a3:9b:d3:5c:ca:f0:4c:2b:16:4e:4e:69:
                    e8:cf:eb:67:e9:a8:9b:11:fb:f8:6a:f5:1b:85:14:
                    31:1a:bc:ed:48:a3:d8:74:03:3e:33:1e:7e:6a:11:
                    63:d6:bf:88:eb:8b:fd:62:d5:5a:25:c9:9f:11:be:
                    72:9f:d5:0e:c6:fb:f6:04:fc:4c:43:d4:42:e4:58:
                    ca:cf:e2:6e:56:7d:97:20:c2:ef:c1:c1:8b:1e:14:
                    32:61:d4:96:f9:70:ac:96:c1:0b:6d:20:15:e3:2d:
                    10:09:55:de:ec:70:51:e6:9d:2a:94:e5:04:46:7a:
                    41:55:6c:3e:f6:0a:68:73:90:22:23:6c:c8:e4:24:
                    74:ac:e4:bb:01:ae:0f:94:77:bf:7c:c0:76:f4:97:
                    d0:e5:ce:02:9f:cb:eb:7d:1a:5e:1e:bd:ca:fa:30:
                    de:ef:c4:d3:2e:88:b7:d6:ef:15:e7:c3:d1:ee:33:
                    7b:22:06:6e:f1:ab:a9:ae:75:58:31:b8:9e:79:56:
                    2c:4b:a5:db:65:2b:5d:87:1c:69:cd:53:0d:e5:fe:
                    af:fd:d7:fe:b7:cf:44:56:52:24:1a:d3:64:57:03:
                    88:7c:79:19:d2:9a:c6:70:d3:fb:8a:e0:78:26:d5:
                    32:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B6:87:A0:8B:23:26:44:55:1C:65:3B:62:E9:BA:87:58:27:22:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/38d11b6f-5994-3e0e-b8fc-88f1251730e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:30:70:77:26:39:31:1a:94:f9:50:91:91:2f:4b:0b:91:b6:
         a9:1c:07:c9:c2:74:d5:da:b5:5e:85:8c:69:2f:53:dc:c6:30:
         51:f5:11:0e:b3:e5:74:63:49:ce:b5:ef:d4:ca:c1:d4:bd:d3:
         22:12:f3:e4:4b:37:39:2f:49:3e:fa:a9:a5:aa:b2:e9:19:04:
         a7:00:2a:02:4e:d0:5a:4b:fe:96:98:71:ba:93:e1:69:e2:4a:
         9d:76:00:95:59:3b:15:84:be:cb:01:2b:54:ae:24:40:da:d5:
         73:8e:8b:2d:e5:48:00:52:7a:7c:50:c5:57:d7:d0:a8:9c:c6:
         72:fd:0b:d6:60:ed:ba:d0:20:97:c2:83:ee:c1:77:a3:d2:4a:
         67:5f:e3:2f:ec:d7:96:e7:15:0c:38:41:f3:d7:59:a9:94:40:
         6c:fe:c7:ed:12:ae:63:a4:74:52:4d:f6:bb:89:ec:c3:c5:6c:
         0a:7f:bf:25:b3:7b:1a:1b:b2:22:fb:d7:0e:78:fe:13:44:cf:
         df:25:ea:05:a8:b6:de:1f:86:03:25:37:ea:bd:b9:eb:15:1e:
         60:e7:8b:3c:fa:b2:7e:6e:3e:f5:3e:61:b3:74:bf:eb:5f:38:
         a2:bd:9f:c0:68:d0:f2:df:4c:36:47:c2:aa:2c:c9:c4:18:bf:
         81:54:1e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:11:48 2024 by rpki-client on console-ams.rpki-client.org