Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/24f2fc0b-8c2f-3913-ba1c-9797df442aa6.roa
File:                     24f2fc0b-8c2f-3913-ba1c-9797df442aa6.roa (raw, json)
Hash identifier:          FrTt03x2H3Rdil/HBOe8crJBSgxvGUFnXpzP8urYDCw=
Subject key identifier:   E5:2C:4F:05:B7:47:31:DA:93:17:F4:06:33:D9:AF:4B:17:C5:44:6A
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584545C51A42F7BD15EE64A5AC00
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/24f2fc0b-8c2f-3913-ba1c-9797df442aa6.roa
Signing time:             Wed 20 Mar 2024 17:33:59 +0000
ROA not before:           Wed 20 Mar 2024 17:33:59 +0000
ROA not after:            Tue 18 Jun 2024 17:33:59 +0000
asID:                     2734
IP address blocks:        2605:6c00:8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:c5:1a:42:f7:bd:15:ee:64:a5:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Mar 20 17:33:59 2024 GMT
            Not After : Jun 18 17:33:59 2024 GMT
        Subject: CN=3c30aa0b-2370-475e-a3fa-8a7b94f9fd9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:34:15:04:1e:e9:f7:39:99:28:03:b5:24:d6:
                    54:aa:6c:5f:4e:a0:ee:14:99:56:97:7e:ec:81:b1:
                    0c:1d:43:ed:68:cd:ef:64:73:e1:7d:ec:97:57:db:
                    5a:5d:4a:67:ed:e2:9d:15:dd:da:f4:64:44:9d:a6:
                    cd:4a:a1:74:34:a1:57:6f:6d:82:37:8f:4a:a7:2e:
                    b7:30:04:86:db:a9:c8:7d:3a:58:a6:21:6e:03:15:
                    71:a3:b7:fd:df:8f:94:be:0d:64:65:40:94:5b:90:
                    1a:7e:74:e5:e2:78:9e:4b:67:fe:f5:7e:6c:3b:92:
                    d2:c8:69:ed:02:27:da:4f:19:3d:88:da:76:3a:f3:
                    01:d2:c4:17:46:58:2a:8d:2b:32:18:a0:55:7f:7d:
                    6a:15:25:97:0c:e9:80:d2:86:c0:24:9f:b4:e9:6c:
                    c6:09:4b:2f:7c:30:83:34:9b:2f:3b:0d:75:75:7e:
                    c1:91:aa:de:c9:82:06:c7:fc:62:43:0d:61:52:77:
                    77:07:d2:d0:76:ba:c1:f2:57:4f:2c:df:66:0c:5f:
                    5d:95:86:64:89:7d:0a:b3:f6:98:2d:ef:f7:2e:91:
                    25:2f:cc:93:14:26:6c:6c:a2:99:f9:0d:47:14:9e:
                    d8:e7:ac:3e:73:89:69:3d:f6:72:c0:f8:43:59:bd:
                    3f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2C:4F:05:B7:47:31:DA:93:17:F4:06:33:D9:AF:4B:17:C5:44:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/24f2fc0b-8c2f-3913-ba1c-9797df442aa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:a7:ca:d7:3e:33:a8:18:14:fd:f6:f0:90:5b:fb:7a:9b:75:
         dd:05:6d:98:b1:2e:1d:ef:90:37:4c:1c:23:6a:57:66:3a:b9:
         8f:04:e9:4f:be:99:11:82:ff:2a:12:38:16:75:93:2e:a2:b9:
         d7:21:45:10:00:67:e6:f9:70:c2:c4:d6:dd:93:db:ec:bd:ce:
         c6:7a:51:de:13:91:e9:20:1f:7b:f4:f4:56:41:f2:7f:78:b3:
         27:fc:c4:4a:6f:6e:ac:08:8a:62:1a:61:c2:69:0c:a7:61:70:
         e7:cf:0e:dd:4c:1c:1f:10:d9:e7:b7:95:92:ab:d9:28:a2:84:
         99:72:14:f2:2b:12:9d:39:75:1c:29:cf:78:5b:38:79:f1:71:
         01:11:31:7d:75:d9:3b:dd:9b:d7:46:4b:23:4d:9d:b3:9d:1d:
         f7:c9:86:24:0a:4e:3a:5c:ad:97:db:54:a1:1e:c6:6e:66:c1:
         c3:05:a6:24:de:da:31:7a:88:f9:2c:bf:96:61:aa:46:5e:8e:
         72:3f:ed:ff:6c:0e:6c:cd:5b:d0:96:d7:f3:ad:fb:c0:f3:ba:
         4a:dc:ed:a5:b7:02:be:14:de:fd:9f:11:dd:f2:35:1b:06:3b:
         9f:60:66:7d:35:fb:9f:25:a6:d1:18:2b:d4:a8:ee:db:0c:be:
         52:b2:ce:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:13:05 2024 by rpki-client on console-fra.rpki-client.org