Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/b942c035-e349-3f7f-8401-b63ec58d3356.roa
File:                     b942c035-e349-3f7f-8401-b63ec58d3356.roa (raw, json)
Hash identifier:          y9ud1EUcwLsGkjSglnzJuyovPdn70oUryGL2HqUjfGo=
Subject key identifier:   41:54:6F:6A:AD:FB:A3:6F:E5:63:9F:0D:2C:7A:61:60:60:EA:7A:27
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F432858475BDB85E0F471401293EA3480
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/b942c035-e349-3f7f-8401-b63ec58d3356.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     63023
IP address blocks:        2607:a140:f00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:85:e0:f4:71:40:12:93:ea:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=a0981d25-2ea4-4ffa-9194-ac6cf6cc0c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:67:ca:97:b5:63:51:06:32:ba:b6:30:6c:
                    af:4f:8a:49:79:ee:3c:61:94:ea:18:d1:9a:b6:6f:
                    df:ca:63:a9:46:c9:81:71:74:20:00:12:72:6f:38:
                    30:1a:de:ea:72:7d:ff:48:65:f1:6e:7e:cd:87:86:
                    be:11:a2:82:e4:d7:df:0a:81:e6:2f:cc:ed:3a:4c:
                    5b:c6:c9:cb:cd:0e:77:44:2c:c9:0f:d2:48:63:01:
                    a1:4e:25:61:6c:48:22:44:e9:0e:4e:e7:e4:47:19:
                    5e:3e:63:8c:60:80:01:c5:61:6c:cf:95:6d:a8:2a:
                    93:60:ff:63:86:60:12:94:c2:f7:72:29:99:59:08:
                    ba:44:c6:57:44:6b:5f:11:b2:c3:1a:ab:cb:41:de:
                    70:f7:84:6c:ab:5f:6b:11:f4:a3:09:fb:64:3c:c7:
                    c2:f3:2d:3c:81:6c:f2:6d:6c:87:c5:96:b4:11:c2:
                    06:a5:57:f9:e3:bd:f3:b6:c6:a7:16:de:ec:9f:75:
                    ec:3e:3d:45:c8:e1:db:37:0d:6e:8d:8d:aa:ee:94:
                    94:d0:b3:dc:2c:e9:f0:dd:cb:a4:0b:9e:1f:4c:7d:
                    57:fe:03:be:98:f2:71:79:d5:69:73:97:96:15:fe:
                    52:f2:1f:6f:64:3b:ef:13:cc:3c:e3:f6:bc:b3:5b:
                    69:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:54:6F:6A:AD:FB:A3:6F:E5:63:9F:0D:2C:7A:61:60:60:EA:7A:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/b942c035-e349-3f7f-8401-b63ec58d3356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:74:b5:68:82:3e:ef:51:1c:44:a4:50:fc:d7:b0:74:04:3b:
         36:04:ed:86:7c:4a:96:d2:53:76:6f:ef:52:6e:1c:5c:77:6b:
         bd:90:f2:d9:8b:a1:01:f7:1e:d7:13:59:1a:bc:e9:c4:8f:87:
         64:a3:42:65:98:5d:97:d0:bc:79:9f:25:d3:a8:5f:83:f5:f5:
         69:2d:63:63:40:38:f9:54:14:73:f6:a1:dc:e3:a4:64:c7:7d:
         3f:a8:25:fd:75:85:b8:78:2d:84:f2:5a:6c:58:be:8e:ad:fe:
         8a:93:cc:a9:a3:46:8b:ea:47:37:4f:a9:e5:8d:82:13:18:f1:
         09:97:92:5e:e2:22:70:26:18:71:e7:32:17:fc:81:a8:c2:bc:
         58:7f:91:39:26:c8:6e:be:e5:7e:81:27:0c:c3:75:78:52:ee:
         e0:75:36:53:5a:c5:f8:78:2d:94:e6:b9:34:36:32:2b:bc:d4:
         f7:97:b8:9b:a0:04:30:63:da:b7:99:46:a2:e3:74:80:2c:c5:
         da:f8:96:dd:71:ee:b0:1c:83:eb:e9:80:4c:d5:54:1f:dd:b3:
         c8:c7:fb:84:9d:ae:c0:14:c9:fb:c1:79:13:46:af:5a:07:24:
         60:33:41:0d:ce:8a:6a:cd:fe:7e:5d:08:3d:82:ae:16:4b:2d:
         d4:08:2a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 20:34:18 2024 by rpki-client on console-ams.rpki-client.org