Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/b2277da2-4291-38e4-bcdc-2b424926722c.roa
File:                     b2277da2-4291-38e4-bcdc-2b424926722c.roa (raw, json)
Hash identifier:          3hFUfYMS4vCQLSHAd78lLlS+FlQAkALaDq0bzpV07+o=
Subject key identifier:   D5:DC:5C:4C:1D:26:3C:3E:B9:22:06:7A:6B:CB:7D:F4:AA:48:D5:22
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285847E62A22D3E01F2737767FE140
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/b2277da2-4291-38e4-bcdc-2b424926722c.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     2734
IP address blocks:        2605:6c00:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:22:d3:e0:1f:27:37:76:7f:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=6002d12d-3faf-463b-9edc-16cb35e93332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cf:55:7c:0b:22:db:6d:ad:0c:06:4e:8e:0d:
                    7e:07:a6:d9:51:e4:34:11:c5:59:2c:52:7d:a8:8c:
                    23:94:e3:d6:12:a2:c4:ad:db:05:f6:0d:af:6f:e0:
                    90:c5:1d:4c:08:b4:dc:c9:f0:1a:8f:6c:4a:17:db:
                    6b:5d:8d:61:42:b6:0e:e1:10:d3:e1:2c:00:35:16:
                    83:d7:2b:99:fa:38:bf:54:f2:96:88:56:da:6e:bd:
                    7c:49:2e:b6:a4:a5:35:bc:e5:8b:93:30:07:43:43:
                    a1:35:8b:3a:d8:22:b2:57:2f:16:79:13:7a:3e:6f:
                    78:b1:f5:bf:1c:d5:41:dd:26:02:84:58:18:18:1b:
                    9c:89:88:f6:bb:b6:0d:3e:b9:d1:96:95:0c:0f:45:
                    bf:20:7f:f4:82:15:c4:a4:38:40:46:7e:0c:99:c2:
                    85:ef:ba:e1:c8:26:17:ec:b0:86:ae:6a:4c:1d:88:
                    01:83:a2:f6:82:46:f0:c0:bc:40:32:c4:d1:49:34:
                    1a:3b:af:df:71:30:a5:4b:e6:df:a1:26:51:8f:62:
                    73:4d:7e:1d:8b:29:a4:98:eb:d4:34:e0:fd:b7:b9:
                    63:22:13:48:fa:22:cf:d0:69:16:34:51:4f:84:ec:
                    c4:ab:33:45:ea:41:79:14:b0:c2:87:eb:9b:8d:2d:
                    64:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DC:5C:4C:1D:26:3C:3E:B9:22:06:7A:6B:CB:7D:F4:AA:48:D5:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/b2277da2-4291-38e4-bcdc-2b424926722c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:d2:d1:62:1c:c7:86:48:57:be:80:5b:40:3d:97:4b:41:5f:
         5f:6a:46:9e:69:23:02:fb:a8:90:09:7d:c0:3a:2c:40:47:46:
         a4:b4:94:08:1d:99:63:f1:55:f6:e5:6a:65:57:3d:ca:11:16:
         6a:e7:18:ea:46:72:d1:2a:48:2f:4b:f4:d7:c6:bf:26:1e:21:
         7a:4b:52:16:24:2d:95:70:12:51:ef:84:cf:27:15:8c:55:bc:
         d7:52:eb:6e:65:2c:c5:e6:8b:92:62:43:27:18:9d:e7:f3:77:
         73:6b:9d:6b:8c:8f:32:2d:1f:6a:87:9e:a1:1b:4d:53:91:db:
         34:20:6f:88:0b:3b:a9:da:c1:7c:1d:b7:87:72:33:37:6d:59:
         cd:3e:b8:52:f0:3e:31:2c:8e:af:0f:0d:81:11:71:f7:44:58:
         f0:3c:08:15:72:cc:7f:08:3a:98:a3:f7:b9:20:61:a7:52:c7:
         40:d1:5e:65:83:8f:ac:7f:9a:c1:eb:2d:34:d7:55:87:7d:eb:
         c8:4c:f4:25:a8:b3:4b:86:3d:51:d8:ea:ae:5f:56:09:10:ab:
         64:d6:b2:98:47:3b:15:f8:e7:54:14:39:51:7c:60:a9:73:fb:
         14:e6:b0:ce:2f:d6:29:eb:b5:1e:0f:a6:e5:1d:a9:6a:52:eb:
         dd:ae:5c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:46:10 2024 by rpki-client on console-ams.rpki-client.org