Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/e8d35cd6-2a50-31de-9137-b76e12bff0ca.roa
File:                     e8d35cd6-2a50-31de-9137-b76e12bff0ca.roa (raw, json)
Hash identifier:          f7DiXCaVxemnvGFYV5Ntch7EjwZPjtrDapFjVwq2ipM=
Subject key identifier:   58:08:39:B9:E7:E3:9D:BE:3B:FF:FD:BD:A0:C2:08:E5:9D:74:03:11
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F432858472C65E29E23145E00150B08D0
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/e8d35cd6-2a50-31de-9137-b76e12bff0ca.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     63023
IP address blocks:        2607:a140::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:e2:9e:23:14:5e:00:15:0b:08:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=49521fc5-645a-4ba4-9d1d-1d481f708d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a0:33:e0:26:2b:00:b2:a5:fd:6d:3e:05:e9:
                    74:fe:dc:77:80:cf:8b:a3:9a:c7:6b:1b:6f:f7:e0:
                    55:ce:b0:5f:ac:cf:a0:d7:a2:b6:9b:06:0e:db:dd:
                    05:cc:f4:b5:37:a9:2d:f7:58:93:cf:bc:d5:f0:64:
                    63:1c:89:c4:13:4a:be:1e:f1:63:bf:9d:21:60:92:
                    b8:fd:87:34:88:80:5b:a2:5b:aa:39:99:de:e5:cb:
                    c0:6d:ae:05:01:f2:7d:51:52:41:28:14:3f:2c:94:
                    dd:43:66:ca:43:ad:c4:db:f7:ba:ee:c3:69:44:d7:
                    d2:5a:f7:d0:81:6c:0f:2c:75:27:6d:d8:88:00:06:
                    89:1a:68:ba:4e:08:ee:bd:77:bb:cd:93:75:70:30:
                    b6:8b:9f:e2:53:f4:f8:d6:6e:40:11:5c:1d:c9:8d:
                    08:fc:11:00:92:21:85:82:60:45:53:6f:08:e8:ee:
                    71:68:b3:b6:10:6b:ce:cc:f0:4d:d0:a8:c7:b2:13:
                    da:7c:08:8e:0e:e3:ab:c4:fa:60:66:2e:b5:dc:ac:
                    24:ff:b4:46:14:85:2d:76:f7:c3:8d:56:12:16:ce:
                    9b:7b:0d:7b:dd:00:ba:80:b5:d3:ff:07:0f:bd:fc:
                    ad:e2:06:6a:27:7f:64:58:fe:57:a4:1e:d3:d0:d0:
                    17:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:08:39:B9:E7:E3:9D:BE:3B:FF:FD:BD:A0:C2:08:E5:9D:74:03:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/e8d35cd6-2a50-31de-9137-b76e12bff0ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:f1:46:f6:5b:4a:81:48:f2:83:e4:6a:bc:01:f4:e0:50:58:
         e2:ec:5d:66:90:be:e0:53:3b:0a:4f:41:7e:07:70:44:d5:1e:
         b1:16:59:e6:f5:02:aa:be:57:06:f6:99:ea:9c:55:a5:38:0f:
         0a:94:c3:b0:51:a3:16:fd:ae:74:94:31:99:f2:d3:ce:5a:0e:
         c5:34:50:2c:9d:e5:eb:f0:ad:42:f5:24:a6:78:95:d3:4a:2e:
         db:53:75:41:4b:bc:6a:eb:f6:84:8e:d4:59:90:c1:0c:7a:e1:
         18:9c:57:eb:fe:40:a7:e8:28:49:4a:f3:e0:58:02:d1:79:4e:
         e6:ed:97:22:bc:26:2f:2c:af:73:ea:d5:f0:41:06:d4:5f:32:
         d2:6d:30:3a:e0:f8:e4:94:6c:52:01:30:51:18:4a:b9:2b:b5:
         f7:65:44:f3:60:61:aa:10:45:d9:4d:b1:80:e4:fe:0f:d9:7a:
         a4:52:eb:43:4e:6b:b5:c7:37:52:a9:79:4f:db:49:07:d4:88:
         e5:d1:b9:02:c7:67:97:8a:e1:6b:51:1c:40:4a:f5:3f:05:82:
         1c:4e:1a:fc:a9:9a:c0:4c:49:21:17:ef:8c:c5:83:f9:77:f6:
         9a:73:52:04:4e:5f:d4:5f:4e:04:13:7c:6c:b4:a7:d9:44:56:
         1f:58:3f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:31 2024 by rpki-client on console-ams.rpki-client.org