Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9fa61f86-c709-3b48-b4dd-2fbcc9f3c009.roa
File:                     9fa61f86-c709-3b48-b4dd-2fbcc9f3c009.roa (raw, json)
Hash identifier:          v1uCMaoaL2iG1x4TLacZv9je8Bk36XtrFcKE7e67/lM=
Subject key identifier:   97:50:27:E0:95:2F:44:F1:4C:35:6C:B1:17:AC:ED:51:9E:05:C2:4D
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285847E62A22817C9FA069C8398340
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9fa61f86-c709-3b48-b4dd-2fbcc9f3c009.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     2734
IP address blocks:        2605:6c00:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:22:81:7c:9f:a0:69:c8:39:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=c9d9cf8b-24f0-4b92-8e44-6a3cc631a6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a8:3d:ff:c8:2d:55:cd:fc:c6:b6:d5:f4:f0:
                    6d:42:e2:a4:0f:9f:75:d2:d0:dd:af:83:d5:75:5e:
                    e7:55:fd:62:a9:01:28:92:c0:e4:be:d0:ad:b6:10:
                    0a:20:a5:8e:29:f3:8b:f0:1f:de:8e:6b:1a:07:91:
                    80:71:a7:15:2d:b5:53:4b:3b:c8:cf:dc:c5:53:33:
                    70:ef:62:96:63:8d:17:80:89:ba:5b:28:f3:f5:8a:
                    a7:49:4b:e6:60:28:d4:08:f6:98:b4:56:65:12:f8:
                    f6:66:85:aa:77:76:b2:b0:71:13:fa:4e:c3:1d:9e:
                    49:34:86:9c:28:7b:1a:0e:d9:00:14:c1:e0:6d:dd:
                    98:20:fd:c3:85:2f:d9:c9:d0:5f:87:33:09:e9:78:
                    14:b8:02:4c:10:a3:14:c8:e8:3b:bf:07:8f:cd:d1:
                    a1:91:89:12:86:8c:8c:33:88:58:de:97:e4:ce:5e:
                    1b:9b:3a:fc:56:ed:62:d4:ef:24:36:67:d0:57:98:
                    31:c2:89:e4:b0:01:25:74:99:50:78:38:9e:87:bc:
                    96:c9:0c:ec:74:a6:d9:e3:9a:48:0c:80:75:68:a6:
                    5e:94:3f:9c:c5:09:f2:da:d5:f9:a9:8c:4e:69:66:
                    7c:fc:51:ec:ac:74:40:c0:4f:b0:28:e1:b9:8b:b2:
                    a1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:50:27:E0:95:2F:44:F1:4C:35:6C:B1:17:AC:ED:51:9E:05:C2:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9fa61f86-c709-3b48-b4dd-2fbcc9f3c009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:6000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:56:af:4b:2b:0f:9c:94:f6:8d:db:26:77:84:50:fd:93:4d:
         93:bb:75:19:69:cc:aa:e0:34:dc:3f:a1:26:26:21:05:ce:c8:
         5e:8c:1a:80:58:af:76:74:b5:33:e6:bc:ae:56:86:3f:72:a5:
         09:e4:33:d7:bc:a9:75:a8:02:54:28:51:84:f8:3e:a3:ca:ce:
         62:41:47:e2:4f:fa:70:0e:23:61:d0:9e:f2:c7:fc:68:91:36:
         dd:aa:79:88:14:76:62:6f:04:12:f2:07:b7:53:be:6c:f6:07:
         4a:3f:3e:14:c9:4e:16:da:95:78:5e:06:48:c3:fb:2d:69:40:
         e5:d6:d7:e8:46:ae:5a:ce:3c:7a:42:98:98:ce:07:4e:9b:93:
         bf:ee:44:84:23:48:c3:d3:5e:d9:f9:1f:a8:30:39:88:bd:c6:
         47:fa:bf:c0:01:9a:b3:28:68:8e:de:63:a0:83:8c:8b:fe:31:
         ca:71:44:0e:5e:da:bf:7c:9d:e3:fa:35:8a:34:1b:a5:35:15:
         7e:ff:60:25:a9:ed:32:e8:94:7b:84:3a:48:b3:59:a2:20:aa:
         69:90:ab:0c:56:0a:3f:2e:99:bc:fc:64:1c:e2:f2:80:59:23:
         12:42:d4:fc:69:1c:b4:05:05:67:6b:83:e9:80:79:4b:21:ff:
         29:68:45:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:46:10 2024 by rpki-client on console-ams.rpki-client.org