Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/bc8c1de0-49b5-38df-838b-beb87cad869e.roa
File:                     bc8c1de0-49b5-38df-838b-beb87cad869e.roa (raw, json)
Hash identifier:          3uA4thP4bWPrAtbwvOr8vFSXWNIB4+LCW9QfJJ47m/M=
Subject key identifier:   39:E8:89:17:5B:E0:F8:09:B9:5E:CF:11:E7:5A:4D:0F:A7:52:32:C5
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584545C435A52E0B631D66C87980
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/bc8c1de0-49b5-38df-838b-beb87cad869e.roa
Signing time:             Wed 20 Mar 2024 17:32:11 +0000
ROA not before:           Wed 20 Mar 2024 17:32:11 +0000
ROA not after:            Tue 18 Jun 2024 17:32:11 +0000
asID:                     2734
IP address blocks:        2605:6c00:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:c4:35:a5:2e:0b:63:1d:66:c8:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Mar 20 17:32:11 2024 GMT
            Not After : Jun 18 17:32:11 2024 GMT
        Subject: CN=2b370944-477c-4035-826f-ef00b1d8ef64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8d:e4:a2:b1:71:eb:2b:70:fd:12:74:65:61:
                    e0:fc:1e:d4:fa:cf:8e:b2:13:0b:e1:4d:f9:6f:ef:
                    72:11:ee:7d:c2:b8:7e:37:99:6f:ea:27:6d:90:56:
                    e6:3e:cd:b3:32:3d:77:1c:1a:45:9a:93:14:99:46:
                    61:31:c5:45:65:9b:cf:d3:a9:c6:95:18:9d:82:82:
                    85:e7:c6:28:5d:86:78:09:3b:f8:6e:4e:bd:16:c4:
                    62:77:77:ba:d7:3c:c4:72:05:4a:26:be:8b:54:0d:
                    b7:9e:eb:e6:55:19:b9:48:38:d8:b8:4d:38:fc:9d:
                    12:79:bb:95:23:70:a4:08:49:3b:03:a2:93:65:98:
                    ca:40:0c:2f:0c:ce:5a:1d:17:4d:24:55:9f:bc:c6:
                    89:40:b6:73:06:0e:e5:74:c0:a5:80:43:e5:02:91:
                    a2:e2:b1:10:63:4d:4d:c5:6f:6a:17:f0:e2:d9:1d:
                    df:a6:18:9c:52:16:c5:da:f5:4e:19:9a:2d:38:b1:
                    e7:36:88:42:b4:50:a2:2a:49:db:23:5e:29:a7:9a:
                    91:3c:61:65:f0:0c:f4:9a:0b:5b:26:57:a9:73:a5:
                    80:e8:d2:c0:90:2b:06:59:7d:5c:b2:19:f5:fe:55:
                    0b:58:f6:bd:63:3e:bf:f5:1c:fc:6f:7d:ac:49:a0:
                    62:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E8:89:17:5B:E0:F8:09:B9:5E:CF:11:E7:5A:4D:0F:A7:52:32:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/bc8c1de0-49b5-38df-838b-beb87cad869e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:18:53:31:f7:b9:dd:6d:a1:79:af:81:f0:ae:df:7f:7d:96:
         cc:54:99:0f:8e:5e:bd:aa:98:fb:c2:cb:4e:ab:c8:eb:78:db:
         21:c5:e5:88:88:35:a9:0a:b3:2b:52:e2:c7:86:1a:5c:59:fe:
         74:c6:dd:99:01:e5:88:79:48:85:2c:41:f1:7d:21:e3:73:e7:
         aa:5b:e8:e0:d8:19:e2:40:d4:e3:ed:75:b1:c6:4a:20:99:f6:
         7c:07:0a:61:49:8d:e8:33:c7:5b:6a:89:c6:00:ec:d4:26:50:
         bf:e4:b7:be:94:b3:cf:8a:b4:a8:bb:e0:de:f0:f2:0e:ee:f8:
         8f:fe:49:c2:9f:fe:2e:44:c7:a2:c1:cd:63:48:54:83:a2:8c:
         2a:a0:11:cf:a9:b2:e8:f6:c6:84:0c:76:92:67:b1:df:a2:5c:
         28:63:fd:4b:ce:18:9b:80:d3:e0:3e:ac:92:05:42:26:82:46:
         7a:bd:4d:c7:b7:bd:84:5e:3b:f6:c2:8e:c0:3c:52:78:f0:c8:
         9e:70:59:e8:70:64:80:ae:c1:6a:12:89:5d:11:e0:8d:4f:71:
         02:db:ea:e9:d3:4a:34:c1:ac:83:9d:5c:1e:20:5e:cb:53:c0:
         dd:87:c8:61:cf:47:18:e8:19:cc:aa:20:6b:2b:a6:a0:91:ab:
         0c:02:bb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 02:20:08 2024 by rpki-client on console-ams.rpki-client.org