Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/c9414f65-1605-398e-8ffe-0121d7712234.roa
File:                     c9414f65-1605-398e-8ffe-0121d7712234.roa (raw, json)
Hash identifier:          ZNd+JsQTXjKusaAxKpgYZuF7pDwSL7xvJUcXF7rT6i4=
Subject key identifier:   E1:1D:DF:45:7A:51:10:EC:C4:69:71:7C:76:1D:3A:BF:F2:90:19:C2
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F432858480BDA7850121992EFCA7A8540
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/c9414f65-1605-398e-8ffe-0121d7712234.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     63023
IP address blocks:        2607:a140:c00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:78:50:12:19:92:ef:ca:7a:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=90c18508-b63a-40ea-aff1-487a0beed0ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c1:b9:c6:99:3c:5a:45:99:b0:92:3b:ab:1e:
                    68:3b:32:8f:d1:02:bb:22:66:05:45:b5:03:7c:a8:
                    eb:51:89:96:8b:fe:72:e5:01:7f:cd:29:34:34:b0:
                    4b:e8:0a:04:a8:54:21:4f:62:8e:14:54:f5:30:11:
                    f8:f7:38:84:7d:4c:14:8d:66:55:9b:91:cb:8b:bf:
                    24:d2:f6:3e:9d:7c:ed:42:ea:da:c0:f6:a3:f4:79:
                    22:3a:f3:e0:40:f6:80:8d:29:b7:96:03:21:cb:08:
                    54:73:62:d2:fd:fb:da:b7:2f:ab:e9:8d:bd:df:46:
                    48:94:bf:1b:7f:af:42:1e:08:d8:21:29:ad:2f:25:
                    1b:f5:f3:96:37:ec:a5:0f:90:50:f6:de:6b:63:36:
                    39:b2:0a:c6:ae:d1:59:d7:7e:3c:6f:03:68:67:e9:
                    c6:d9:2e:11:dc:04:94:47:fd:79:df:2d:7b:ec:8d:
                    2d:a2:d2:f5:8f:f0:45:34:1a:2e:d9:32:8d:09:be:
                    19:e1:a3:91:aa:73:c1:40:6f:b6:2b:7d:2f:8b:8e:
                    76:c6:80:1d:2d:3d:fb:54:50:0c:76:f6:8f:38:f7:
                    12:5f:da:b8:5b:22:14:8a:06:97:f9:c1:fd:ea:ae:
                    8b:29:29:12:e6:5d:c9:f6:0c:88:4e:2a:e3:db:cf:
                    77:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1D:DF:45:7A:51:10:EC:C4:69:71:7C:76:1D:3A:BF:F2:90:19:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/c9414f65-1605-398e-8ffe-0121d7712234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:cf:7a:f8:b9:5b:07:a9:31:0c:bf:06:8b:4e:0a:1f:18:d5:
         1a:e4:e7:1a:d9:8b:5c:7a:f1:c0:ac:36:11:5d:88:99:fc:97:
         0d:0c:01:9a:3a:89:33:d1:f9:62:32:71:92:41:6d:7b:c3:80:
         e5:a2:7e:18:fa:e8:55:f7:5e:9e:18:f4:a0:a3:6b:ba:eb:9a:
         e2:d8:9e:33:0c:cd:b1:19:46:2f:65:46:cd:1e:29:9a:77:ea:
         61:c2:b9:53:3c:23:fe:9d:3b:56:da:b2:58:e9:f5:9b:32:f9:
         42:66:4c:42:3c:8c:55:81:ab:14:7f:9b:96:8f:94:eb:93:9d:
         0d:19:7d:de:33:a8:93:70:a6:38:98:ad:69:90:58:e5:85:a5:
         03:37:30:f2:ff:3c:ac:25:4d:47:8b:a4:00:ca:9b:bf:07:56:
         8c:bf:a0:02:09:d0:79:ed:9d:3a:10:c5:2f:55:39:75:ed:75:
         af:60:31:f8:ef:31:36:b6:60:4e:71:da:a0:ee:7c:bd:42:6b:
         d9:24:16:41:2e:88:0d:1c:77:13:0f:61:fb:e2:87:4d:ed:a8:
         06:3d:3f:5f:13:f2:fb:0e:80:e6:74:a5:9b:2d:28:9d:ce:41:
         a3:02:d7:21:bc:48:f6:ea:c5:3a:07:8c:29:0c:fd:f4:ba:1d:
         29:b7:7f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 20:34:18 2024 by rpki-client on console-ams.rpki-client.org