Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/966e8092-3d19-346e-9f32-d0cb9685a185.roa
File:                     966e8092-3d19-346e-9f32-d0cb9685a185.roa (raw, json)
Hash identifier:          ML+TkCHg7lhFE9bQORxmVTvOwqOwQypkkiqnYKLCuNA=
Subject key identifier:   CC:0E:C8:C7:21:15:23:CE:69:42:08:EB:78:9E:B7:73:66:30:EB:F6
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584545C94E51439B7296FCABC880
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/966e8092-3d19-346e-9f32-d0cb9685a185.roa
Signing time:             Wed 20 Mar 2024 17:42:27 +0000
ROA not before:           Wed 20 Mar 2024 17:42:27 +0000
ROA not after:            Tue 18 Jun 2024 17:42:27 +0000
asID:                     2734
IP address blocks:        2605:6c00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:c9:4e:51:43:9b:72:96:fc:ab:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Mar 20 17:42:27 2024 GMT
            Not After : Jun 18 17:42:27 2024 GMT
        Subject: CN=9126366f-1baf-410b-bb96-683dfe52b987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c3:51:86:94:21:ed:c9:70:55:ba:ba:1d:df:
                    a1:50:d7:17:27:6d:92:21:23:0e:42:83:75:04:58:
                    53:4b:1c:96:69:dc:01:8c:99:17:1d:95:92:7c:68:
                    23:32:24:74:8d:3a:c6:b9:40:81:b7:2e:1f:76:40:
                    fa:31:2e:20:07:ac:db:71:89:df:24:83:06:ce:f3:
                    4a:5a:aa:b3:36:4f:58:b3:97:44:4d:5d:0b:52:af:
                    98:30:ed:fe:36:0e:08:45:ea:90:69:1e:62:11:36:
                    54:dd:69:f4:ac:cc:7e:ab:68:c3:9a:4c:c6:d3:09:
                    8d:b5:43:43:c1:b4:fe:14:7c:70:5a:33:a9:52:52:
                    e9:fa:32:2b:27:0e:19:5d:e6:10:b9:d2:7c:ec:95:
                    56:03:83:9b:9b:c6:fd:56:62:f5:f1:09:06:38:04:
                    4e:7a:d5:1d:31:52:cb:93:06:bd:df:ec:dd:7c:10:
                    69:a8:5a:6b:39:c5:bb:0c:ba:d2:5c:35:f5:0d:77:
                    28:08:39:3d:f0:34:29:34:0e:18:1e:ce:ba:e0:22:
                    ec:c5:c5:20:3f:dd:ad:fc:7a:dc:22:68:2d:97:e5:
                    b8:53:c2:49:d2:21:5f:57:60:2d:10:41:33:37:9f:
                    25:05:eb:d7:db:3d:ae:b5:5a:8d:36:f9:1d:e8:90:
                    1d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0E:C8:C7:21:15:23:CE:69:42:08:EB:78:9E:B7:73:66:30:EB:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/966e8092-3d19-346e-9f32-d0cb9685a185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:77:a0:f3:3b:37:36:cc:e6:50:9a:c9:c9:21:87:9a:48:89:
         99:53:9a:47:4b:56:6c:f9:31:b1:95:4b:d4:49:37:35:02:c5:
         ae:f0:4d:47:cb:5c:0f:f7:b9:e8:44:5e:c0:6b:bc:00:1a:e0:
         e6:4e:ab:f9:08:8c:41:7d:99:9b:28:83:79:81:b4:d1:d5:e7:
         6a:bb:5a:25:16:c3:3b:c8:47:b6:4d:be:91:bf:2d:2b:14:56:
         9b:48:cf:36:5a:3d:db:e5:56:f9:7c:13:ed:88:d9:76:c4:fd:
         c4:76:c1:c6:4f:f5:59:d1:b6:72:2d:4e:a6:80:89:8c:1d:60:
         a0:07:db:ff:06:a6:b3:c6:e5:78:2a:32:d8:c8:b8:8e:05:37:
         92:f3:97:24:10:fb:ac:4d:e0:02:ee:3b:6a:24:92:08:bf:56:
         b1:99:1b:70:b9:ac:c3:18:71:81:ce:9c:88:c6:c3:39:95:94:
         69:c8:84:0e:8a:df:c9:11:15:fe:96:4f:09:3a:10:dd:fb:48:
         5a:60:34:e8:c6:02:05:d7:ed:94:0f:5d:6f:31:d6:a2:2b:f7:
         76:03:2a:9b:fe:bb:74:84:1d:c6:04:22:f9:1e:a1:50:cf:dc:
         0b:b3:e7:42:1a:fa:1e:36:47:51:cd:b3:16:a5:2a:84:f1:bb:
         68:a3:ac:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:23:43 2024 by rpki-client on console-ams.rpki-client.org