Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/f29a8acc-4e56-31a8-81a3-53720324b2d4.roa
File:                     f29a8acc-4e56-31a8-81a3-53720324b2d4.roa (raw, json)
Hash identifier:          q3vOEQhz41sGQcPbOa1UQJHVjKM4axDaSR0Vi47sXXs=
Subject key identifier:   41:A1:B3:4D:82:B9:61:8D:73:6E:06:33:7A:58:8C:E1:7A:2A:A2:DB
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328584608A953B585C111D6FE2E7A00
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/f29a8acc-4e56-31a8-81a3-53720324b2d4.roa
Signing time:             Wed 29 May 2024 13:00:34 +0000
ROA not before:           Wed 29 May 2024 13:00:34 +0000
ROA not after:            Tue 27 Aug 2024 13:00:34 +0000
asID:                     21957
IP address blocks:        2605:f440:5601::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:08:a9:53:b5:85:c1:11:d6:fe:2e:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: May 29 13:00:34 2024 GMT
            Not After : Aug 27 13:00:34 2024 GMT
        Subject: CN=cff9b295-62e0-4b77-b7a2-d9bd174c35eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:31:a4:81:15:9b:ca:1d:71:a9:fa:f5:1a:9d:
                    b7:21:52:00:5d:a2:e8:86:a3:44:7b:af:33:77:19:
                    21:90:83:51:c6:17:ab:2f:cf:af:f7:11:b4:8b:9f:
                    7c:9f:f3:4f:cd:4d:8a:78:bb:cc:b6:b5:42:a3:07:
                    05:29:aa:67:88:9e:b9:ad:8b:04:fa:4d:b0:f4:7b:
                    91:f8:20:3b:4e:1c:e2:ee:c3:f3:99:91:6b:42:81:
                    f7:44:74:7b:7b:d3:02:85:6f:ef:d4:cf:c4:42:22:
                    af:fc:ab:60:f6:0e:55:37:86:19:b2:7d:3b:c6:6c:
                    2e:d3:7a:d7:fb:56:b7:ca:35:3c:1e:52:f3:64:64:
                    66:84:1f:1a:70:ee:85:5c:b9:99:cd:2e:08:2b:91:
                    87:64:f3:9b:d6:c7:71:99:c9:60:8d:c2:fb:ab:4a:
                    aa:04:9c:33:b5:bf:b1:28:a6:c4:d8:4c:84:43:0a:
                    8e:a3:73:af:2f:06:39:9d:0d:cb:2b:25:76:41:f8:
                    d6:59:51:01:45:02:d0:f9:76:7c:86:45:e6:d3:2b:
                    02:6f:b6:e8:62:82:bf:c5:d2:b8:6f:c4:7a:f6:11:
                    86:6f:55:a0:81:ab:99:1c:2c:1b:f7:86:e5:32:e5:
                    cf:6f:7c:7a:86:4b:ac:c8:4f:04:4b:88:1c:82:f3:
                    fc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A1:B3:4D:82:B9:61:8D:73:6E:06:33:7A:58:8C:E1:7A:2A:A2:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/f29a8acc-4e56-31a8-81a3-53720324b2d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:5601::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a7:0e:27:9d:7a:63:5b:34:e2:34:57:5c:5c:49:42:0b:e6:
         7c:6d:5b:7b:12:17:49:ab:50:ab:96:5b:3a:c0:22:2e:ad:a1:
         e9:49:20:4e:7e:6d:b3:e3:da:78:ed:32:13:ff:35:11:54:2b:
         f3:e0:f6:ba:84:30:99:4d:d4:28:0a:ed:96:b9:cd:99:eb:a8:
         cd:dc:9d:42:ba:bd:7c:14:0d:5b:f8:dd:5b:30:ef:39:0e:f8:
         d3:9f:1f:34:b7:c3:4d:df:33:62:df:6e:6b:94:4e:71:7b:a1:
         60:4c:bd:44:cf:3f:36:39:01:ef:ba:d3:a8:66:7e:23:91:44:
         36:4d:28:40:1b:7d:38:44:1c:32:2b:2d:c4:83:47:ba:12:8a:
         1c:5f:65:a0:49:30:f7:9e:40:e6:e5:6f:9e:01:37:61:ca:0e:
         84:a8:39:59:94:8e:33:c6:9b:20:ae:d9:87:b5:f7:71:40:d4:
         41:bd:a9:65:f4:c6:8c:4b:f0:18:13:76:77:03:12:0d:ba:7d:
         97:ed:f8:6d:33:d3:d2:75:d5:35:a4:94:ee:59:05:0d:d4:dd:
         ae:1d:94:d8:96:ea:dd:32:a9:6b:fd:16:ac:7e:79:a5:2a:95:
         ae:40:92:fb:e5:8f:88:d5:1c:41:59:07:1e:ed:4f:90:71:99:
         78:dd:72:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 16:43:59 2024 by rpki-client on console-ams.rpki-client.org