Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/9ae0641d-b943-3842-bbf8-8eb56b10806b.roa
File:                     9ae0641d-b943-3842-bbf8-8eb56b10806b.roa (raw, json)
Hash identifier:          /LMJpRfeSwuW0+yIucR8AZZWZcMbq4MGUUdxa6BDyag=
Subject key identifier:   AE:62:71:2E:AA:05:F3:D1:1D:8B:01:F5:07:0F:3F:FE:AB:AF:83:35
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F432858480BDA7824B82EAD4C5C4FACC0
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/9ae0641d-b943-3842-bbf8-8eb56b10806b.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     63023
IP address blocks:        2607:a140:700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:78:24:b8:2e:ad:4c:5c:4f:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=ed13795a-ef1c-491a-932f-d36ca431c24a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:ec:87:1e:50:be:5b:36:25:1b:04:24:5f:
                    89:20:35:6b:cd:54:4c:bf:91:4f:2c:ea:44:75:41:
                    84:83:52:2e:b0:73:90:50:31:3a:ed:44:d5:7d:c7:
                    5c:8a:c5:77:b5:a7:4b:5a:a9:6a:a1:6b:bc:03:e5:
                    f6:6f:5d:d3:6d:4f:d6:40:2f:18:5d:83:85:29:4d:
                    95:ef:a0:92:5a:49:ce:3d:a0:93:33:9f:1d:c4:87:
                    d4:14:84:2e:6f:3c:87:fb:fc:ff:7b:17:db:b7:e1:
                    0f:61:66:8d:e2:cb:78:bb:89:3b:64:c7:15:0c:52:
                    45:64:93:15:49:a6:97:e0:ea:3e:9e:7c:c3:cf:1d:
                    dd:c3:91:c7:04:ee:ad:48:8b:3e:ee:32:df:84:97:
                    ed:bf:eb:49:51:64:e9:85:3e:90:8d:8b:8f:47:f8:
                    e0:34:1f:1c:dd:94:c4:8a:a2:15:9c:f4:d0:69:a8:
                    f9:cc:35:a7:23:49:f8:60:59:a8:4a:e3:88:23:59:
                    71:ae:cd:96:30:4f:28:7f:f0:76:17:b2:f3:6b:57:
                    d8:54:7a:ed:7d:72:b7:87:be:9d:66:9c:3f:05:42:
                    17:cd:88:bc:06:db:76:d2:31:60:1f:d5:02:0a:8d:
                    da:38:76:f7:e6:1a:24:e8:f9:c5:6b:4a:2b:b2:5b:
                    cf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:62:71:2E:AA:05:F3:D1:1D:8B:01:F5:07:0F:3F:FE:AB:AF:83:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/9ae0641d-b943-3842-bbf8-8eb56b10806b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:a4:72:b6:25:1f:8c:bf:65:7c:14:8d:df:74:26:d9:df:64:
         de:4d:83:b8:6d:04:d0:30:7b:a1:07:49:c7:b5:24:32:e4:b4:
         ac:9e:a4:a6:75:df:67:4c:b7:d5:d2:cd:b7:6b:3f:af:14:d7:
         ac:30:1b:3e:be:c3:f2:46:88:ba:3d:82:07:b0:0c:dc:4f:ef:
         d8:75:59:a6:b9:ce:58:65:ef:c9:25:e5:cc:21:01:dc:44:b5:
         e5:e3:cc:b5:4c:44:dd:57:9f:7b:d0:60:a8:34:73:ff:be:21:
         6f:db:fa:88:92:11:0b:f6:b5:97:df:07:95:6a:bb:4b:bc:a3:
         72:3c:e7:96:20:e4:df:77:03:99:bd:87:97:26:7c:f2:64:58:
         59:79:34:7d:b6:26:a4:d4:d2:d3:7c:84:a4:ee:af:47:8b:00:
         92:22:8b:0d:5c:fa:43:bb:78:83:cf:18:17:df:db:86:7e:5d:
         62:1e:92:9e:1b:40:93:d5:9e:54:ae:72:c1:1e:50:89:2d:bc:
         4e:9d:ed:fa:fc:92:b4:73:3f:7b:fa:73:cc:08:5e:94:34:ba:
         30:b9:54:8f:21:9a:bc:3b:7a:4b:4c:56:b6:af:46:b7:37:63:
         3f:f6:90:67:71:79:74:bb:a4:17:3d:82:20:51:5f:24:03:fb:
         63:d3:f7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 20:34:18 2024 by rpki-client on console-ams.rpki-client.org