Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/3d60f64f-d714-3b72-9146-0dd0f62e3cb1.roa
File:                     3d60f64f-d714-3b72-9146-0dd0f62e3cb1.roa (raw, json)
Hash identifier:          V/Q3PspUHjGrS/LUqNNCbcuEPhAzNZQh+3OlCvQztho=
Subject key identifier:   5F:3D:6F:28:E9:7A:1C:22:EC:5D:0D:CB:01:34:CA:98:94:6B:25:0D
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285847E62A26444513FB8E12FB1400
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/3d60f64f-d714-3b72-9146-0dd0f62e3cb1.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     2734
IP address blocks:        2604:3fc0:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:26:44:45:13:fb:8e:12:fb:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=673c10cb-4f5b-4662-94ef-eb4be984ab37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:af:21:99:c9:d9:79:42:6b:e8:39:a3:df:1d:
                    14:6e:ad:fa:94:fd:e5:b6:e0:3a:fb:53:c5:9c:f6:
                    6a:37:b7:11:d8:e9:77:3d:7a:22:ba:39:26:11:34:
                    2e:d2:03:8f:fd:26:9d:e3:2b:99:b5:ba:42:ab:20:
                    a3:45:e0:d2:03:d9:51:a8:1f:c4:af:62:6b:db:88:
                    7f:57:81:28:cb:79:9c:9f:21:0d:9f:14:a9:3c:6a:
                    f5:dc:30:44:2a:12:52:4d:f4:38:23:d6:61:b2:59:
                    0c:d4:95:23:67:e8:b5:0e:93:14:1b:49:fe:4d:cc:
                    a8:a2:f1:d4:51:18:b8:8a:5b:02:5d:40:4a:5c:bf:
                    86:33:eb:f0:96:10:9e:fe:f5:50:82:29:ce:9a:c1:
                    65:1d:1d:b9:5f:04:95:cd:e4:e4:40:51:9a:80:a9:
                    38:d6:12:03:9c:0c:e6:70:24:72:80:62:bf:c0:c5:
                    e7:3c:d4:7d:2a:d3:80:cf:88:07:7e:ef:30:ff:8c:
                    00:75:e4:a7:88:8b:3b:66:58:03:3d:a9:45:82:c1:
                    1c:33:06:20:fd:b8:75:54:22:24:ae:02:ef:52:5d:
                    54:af:7e:54:47:ea:60:8e:2e:7b:b0:54:e2:a4:af:
                    39:85:4d:b2:65:81:01:31:88:e0:7b:2c:53:49:65:
                    e3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3D:6F:28:E9:7A:1C:22:EC:5D:0D:CB:01:34:CA:98:94:6B:25:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/3d60f64f-d714-3b72-9146-0dd0f62e3cb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3fc0:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:d5:27:1b:30:a7:82:b5:e9:50:d4:dd:3d:a7:8a:ab:b1:f3:
         12:c7:d4:2b:77:a8:15:61:cd:c4:05:10:05:bb:8f:85:5f:00:
         a2:7a:07:68:0d:68:05:47:19:f3:8b:2d:e1:8a:4f:b3:df:e2:
         54:90:aa:cb:fd:68:45:88:14:b7:88:56:a4:25:3c:14:fb:02:
         ad:e8:0d:30:ea:13:21:cd:f2:9c:2b:a7:5b:ff:85:91:37:af:
         0a:3c:ad:13:2a:75:07:12:d3:8c:74:4a:dc:11:b1:df:a4:c5:
         ab:a5:f5:50:f9:c1:57:8e:35:0d:77:cf:5f:4e:12:79:e0:38:
         58:4f:6f:c3:0b:c1:10:2a:01:13:5e:a0:26:d6:c5:6e:aa:a8:
         b8:94:b0:b9:f0:f2:dc:44:0a:1e:72:57:78:22:6b:f2:44:9b:
         fe:36:42:c5:ba:b1:3d:bf:e8:c9:ba:ab:eb:6a:3f:bb:29:e6:
         8b:88:b0:d8:67:d8:c3:03:2f:68:de:af:98:02:31:63:cd:79:
         26:5b:2d:d4:ee:a8:a2:ea:a1:58:f5:20:ce:30:2d:b6:a7:3c:
         8c:3e:9c:d8:28:6c:4b:33:cc:9e:ea:c2:e8:f3:1d:e2:46:6c:
         79:34:d7:42:42:5e:e9:14:88:d1:a6:3c:cc:f1:59:5c:06:68:
         f6:ca:96:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:00 2024 by rpki-client on console-fra.rpki-client.org