Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/51089f1a-f2a8-3abc-b045-b183b19a05ab.roa
File:                     51089f1a-f2a8-3abc-b045-b183b19a05ab.roa (raw, json)
Hash identifier:          PpeQ1QHTZW34ZoypT5rnen85pd1fZcElfZO5RRfQpEM=
Subject key identifier:   84:1C:7E:92:8B:60:B4:80:4C:7C:A4:99:69:8E:9C:E4:0D:E7:86:50
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584722A078CAF103BB93D6843F80
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/51089f1a-f2a8-3abc-b045-b183b19a05ab.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     0
IP address blocks:        2605:6c00:303:303::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:78:ca:f1:03:bb:93:d6:84:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=76c77602-35d0-4386-aee4-1d72d958e0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a2:29:c9:93:10:af:3c:24:e4:70:fc:e0:52:
                    69:67:7c:ae:0d:3f:f8:67:48:49:57:24:bc:34:9e:
                    30:cd:15:bd:60:cb:5c:de:75:68:d9:66:d0:f3:5a:
                    71:0e:62:00:28:1b:c7:1f:5a:c6:90:a4:2c:d6:16:
                    7a:a0:c9:96:e3:15:f1:bc:31:08:4a:87:44:51:dc:
                    fa:f4:8c:66:66:26:7c:16:63:eb:42:a8:2a:c4:be:
                    5d:05:5b:43:fc:23:c9:5b:0f:99:43:14:41:ff:13:
                    4c:81:aa:98:8a:76:7c:bf:18:36:ce:97:be:31:65:
                    6b:57:2b:0e:fd:15:35:24:a8:d4:05:f3:05:a4:11:
                    bc:61:2f:a6:62:e0:48:d9:a3:3f:7f:58:cd:02:11:
                    e3:91:c0:7b:ed:d7:67:d7:9b:e2:23:bd:38:c5:bc:
                    79:b3:1c:40:2f:b5:ad:af:0e:ff:c3:8b:a8:a2:ee:
                    cb:95:29:39:d5:d3:cf:8c:e6:32:ac:29:4e:8b:e1:
                    83:21:87:24:96:e8:fd:0d:60:b2:db:64:18:87:29:
                    62:41:22:7c:72:df:78:4c:a3:46:e3:50:f7:a9:3f:
                    85:bf:5d:9a:9d:82:f4:81:97:35:6e:fd:f7:a4:18:
                    1f:78:06:f2:1b:13:40:94:3b:c8:8f:23:e7:36:60:
                    f2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1C:7E:92:8B:60:B4:80:4C:7C:A4:99:69:8E:9C:E4:0D:E7:86:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/51089f1a-f2a8-3abc-b045-b183b19a05ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:303:303::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:bb:d0:03:62:05:f6:4c:c3:cd:ed:7c:d0:09:46:e0:92:10:
         7b:be:27:de:f4:81:b4:ff:18:11:81:12:12:a5:19:53:94:37:
         0c:a3:08:4f:6c:a3:77:05:00:92:0c:6f:92:c3:d9:fa:3e:18:
         87:95:54:ad:87:fa:39:59:fa:c2:0d:fd:8a:6d:53:50:9f:03:
         fd:17:af:db:bb:a5:85:07:74:72:ef:b4:2a:9f:dc:28:8a:32:
         cf:0a:63:3b:f3:9c:14:9e:80:0a:3a:02:78:f2:f0:f6:41:4c:
         d8:cc:ec:0e:21:46:4c:ad:84:b8:9d:0f:2d:30:2e:65:d1:c1:
         f4:c6:8d:94:12:7c:dc:7f:f2:8c:a1:ce:bd:b7:57:6d:3d:01:
         c3:ec:c7:8f:8d:31:0c:31:e2:95:15:d8:83:9b:6d:f5:1d:52:
         8a:a8:89:4a:50:56:8a:5d:4c:9d:e2:94:07:6c:0f:44:76:b8:
         6e:7b:a3:8b:b8:b2:57:7f:f7:b0:d9:be:45:e4:11:e2:21:d2:
         13:b1:c5:87:c4:d2:23:e5:ca:de:fa:4b:23:1a:27:71:c2:91:
         84:ca:d9:a5:47:2c:6c:86:71:e6:24:eb:7c:d6:84:d0:36:bd:
         30:37:17:5e:32:86:8d:32:a8:04:3d:dd:97:a3:51:a0:61:6b:
         bc:32:42:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:08 2024 by rpki-client on console-fra.rpki-client.org