Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/cd92c67d-b1d8-3ebf-887e-a1efa58821db.roa
File:                     cd92c67d-b1d8-3ebf-887e-a1efa58821db.roa (raw, json)
Hash identifier:          3WzeYSVxRRJksnxxb4Y8IK0q8K6eVqFPBRAmwQKkiCs=
Subject key identifier:   61:EC:EE:A0:E2:E0:36:52:4C:D2:BF:B6:8F:A3:04:06:89:90:9D:D5
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F432858475BDB8613E1620EEEB2E59EE0
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/cd92c67d-b1d8-3ebf-887e-a1efa58821db.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     63023
IP address blocks:        2607:a140:1000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:86:13:e1:62:0e:ee:b2:e5:9e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=7cec53e0-e83b-4f97-a1cd-faf0d8738892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f8:27:b0:6c:74:a0:38:c5:0b:05:f0:d2:43:
                    8d:14:27:1f:c7:f6:53:43:81:c6:b4:c6:9f:ee:79:
                    e7:85:d7:2c:5a:b2:aa:b7:c7:2a:fc:f9:2e:45:93:
                    24:2b:6e:c7:a2:8b:a6:64:a9:7b:19:54:9d:c1:3a:
                    fc:a0:36:f3:ac:ad:b8:d5:78:5c:89:ac:f8:91:ab:
                    96:d2:3d:18:98:51:6f:fa:b5:92:96:5f:9a:60:06:
                    70:30:44:64:27:7f:6b:8d:6c:0b:61:24:2d:2c:70:
                    75:12:ba:d2:0f:88:66:89:62:42:64:aa:5a:6a:c9:
                    c3:ed:97:1a:c7:aa:8e:b6:86:ee:56:19:9e:f5:99:
                    5e:3e:e1:54:e1:1a:27:94:1d:f9:3a:4c:ea:22:1a:
                    fe:b7:70:25:78:6d:84:06:fc:c7:89:60:03:db:ed:
                    a0:0f:4c:40:46:7b:70:e5:ea:8b:22:d3:e7:f6:04:
                    b1:f4:31:9b:aa:26:ea:0c:4a:f0:b8:fd:72:11:9c:
                    d6:8d:6f:0c:e9:81:94:73:2c:bf:12:fc:f8:c2:e7:
                    72:0a:05:74:1c:02:01:2c:3b:c9:bc:ef:8b:68:95:
                    8f:86:db:7a:3b:bf:cf:20:1f:18:7e:dd:01:fd:23:
                    f1:12:d1:9c:2d:57:ed:a2:0a:59:93:3b:4e:4d:b4:
                    33:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EC:EE:A0:E2:E0:36:52:4C:D2:BF:B6:8F:A3:04:06:89:90:9D:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/cd92c67d-b1d8-3ebf-887e-a1efa58821db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:28:8d:39:98:e9:54:7b:4a:fe:2d:56:3d:df:3e:fc:d7:e2:
         4f:02:3b:28:4e:ac:e0:7d:51:da:d0:6f:8f:2c:cb:0e:88:3c:
         88:79:b0:2b:45:54:36:15:44:b5:a6:e2:c9:05:5a:3f:a1:76:
         dc:e2:c3:e6:04:dd:b3:34:36:29:5d:ed:9a:f8:f7:fb:b7:b9:
         e0:48:7e:3d:90:06:1e:d4:a8:cb:8e:c9:d2:fa:16:7d:dc:02:
         29:fd:d9:72:47:3c:4c:a7:72:d7:02:66:e0:d4:72:af:d6:c4:
         6c:fd:6f:6a:b0:00:6a:33:38:8f:e0:a7:73:8a:6e:35:a2:6e:
         b4:e8:0d:c9:ea:f2:29:d0:cb:f5:6b:17:0f:2a:e3:9e:3f:1f:
         48:36:34:27:d3:28:e1:29:90:f6:75:fb:9d:33:03:30:67:33:
         24:f8:1e:4d:68:38:b0:d9:e3:2b:e8:2b:97:06:c9:86:40:95:
         26:0f:a8:56:5c:5d:ab:7d:1d:8b:f7:44:ac:ec:d5:64:5e:93:
         c7:ff:2c:5e:29:d3:49:49:22:07:f9:59:bd:eb:7a:50:5f:6a:
         b8:ee:9d:96:dd:5a:15:ee:46:b9:be:65:42:18:41:88:fb:dd:
         05:db:4e:8d:34:c6:f3:21:64:d9:d2:96:45:7f:ac:17:9a:ca:
         10:fb:d8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 20:34:18 2024 by rpki-client on console-ams.rpki-client.org