Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/e8d35cd6-2a50-31de-9137-b76e12bff0ca.roa
File:                     e8d35cd6-2a50-31de-9137-b76e12bff0ca.roa (raw, json)
Hash identifier:          n76Hqhm4awLu3+q8g9f9SsYXSxRK9J3BnTOglIFI9zQ=
Subject key identifier:   BF:C0:29:1E:9C:99:8B:D8:2C:D2:13:44:2B:DA:55:82:56:84:2C:D7
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F432858480BDA77DB8371C820EB814840
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/e8d35cd6-2a50-31de-9137-b76e12bff0ca.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     63023
IP address blocks:        2607:a140::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:77:db:83:71:c8:20:eb:81:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=8d7ad443-a42e-45eb-b96f-ff096cfb9e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:09:6a:5b:ee:a2:86:c9:a4:58:3c:3e:f7:76:
                    63:00:e8:6e:12:ce:28:13:fc:75:64:21:b3:9c:99:
                    b8:46:0c:c7:fd:19:2d:04:b6:57:20:8a:1c:ce:c5:
                    8d:1f:cb:7e:82:ab:18:05:2e:78:7b:1e:9d:68:c9:
                    b9:c1:a2:87:ed:f5:bf:33:21:4e:52:3d:59:e6:98:
                    7b:93:3f:3e:84:db:ac:02:f9:3f:33:52:4f:4b:36:
                    2b:0f:d9:76:be:13:24:4e:57:42:f6:ba:cc:2d:b0:
                    3b:61:e0:50:06:05:d8:f5:a7:92:f0:f1:f3:cb:92:
                    5e:fd:28:ed:f2:30:52:e7:3f:74:47:ae:b4:76:2f:
                    2d:80:5a:09:15:a9:b6:7a:9f:f7:83:2f:15:39:3d:
                    fd:20:ee:9e:d6:dd:48:98:dc:e2:2a:f6:38:d8:5f:
                    20:03:40:ac:ec:c0:f9:e8:19:69:be:90:b3:12:ac:
                    1b:22:0b:02:97:d2:79:1f:2e:72:62:9b:f0:fc:05:
                    26:b4:6b:77:50:64:8a:94:b7:d2:d1:5e:97:64:97:
                    0d:65:91:bf:ff:c8:8e:fb:e8:4a:76:3d:3a:33:7d:
                    6d:70:a9:6f:88:f6:ea:fc:94:64:4b:64:72:2b:ab:
                    6b:2b:db:a3:4c:9f:a6:1e:a5:9f:f9:cf:e4:20:7e:
                    7d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C0:29:1E:9C:99:8B:D8:2C:D2:13:44:2B:DA:55:82:56:84:2C:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/e8d35cd6-2a50-31de-9137-b76e12bff0ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:d7:cd:86:2a:45:8f:63:9e:06:d3:23:8f:16:de:13:43:93:
         bc:f5:6a:60:86:c3:98:10:f6:45:a7:2b:3a:0c:c2:25:33:a9:
         f3:a3:6b:01:6c:90:0b:de:8a:c7:1b:b4:43:6b:bf:f2:00:22:
         1e:fd:82:ce:6b:3f:2d:e2:2b:e3:38:4c:c1:e4:85:fd:39:17:
         5f:01:2d:5b:9e:81:3c:07:ca:e2:51:57:80:25:d8:f2:dd:6b:
         c8:69:93:74:1d:a5:91:12:f7:16:b8:a0:2b:65:ed:99:08:59:
         2b:8f:5f:8f:d7:e3:76:4e:3c:17:ce:35:48:5f:18:1d:90:49:
         e6:4b:09:a7:2d:bc:b3:bc:7f:c8:71:05:81:a0:bc:29:e4:e5:
         89:e8:20:90:1e:8e:c4:fd:21:86:3b:71:ae:8b:40:e4:d8:6a:
         d6:b8:e7:a2:4c:e9:bc:d7:92:aa:70:52:91:24:49:a6:8c:2b:
         af:ee:d2:6f:2c:8f:d2:81:2d:b0:0b:9d:e2:21:30:26:c9:a6:
         71:b8:1e:42:79:7a:85:60:e4:d4:77:ed:b2:99:1a:ea:5c:50:
         b7:ca:4a:87:83:6e:1f:03:77:5c:1b:ba:5c:94:dc:73:db:50:
         65:4d:98:d4:66:81:54:f0:bd:5f:05:eb:82:2a:cf:be:ff:3d:
         26:ae:fc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 21:29:24 2024 by rpki-client on console-fra.rpki-client.org