Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/cfdce237-bed0-38a8-9b8c-86a6a3779667.roa
File:                     cfdce237-bed0-38a8-9b8c-86a6a3779667.roa (raw, json)
Hash identifier:          5lRE7v0wCf0ONmkz7vTdHr+J+GhK8dct4XvFF8mfyy0=
Subject key identifier:   67:E7:64:3D:0D:8D:68:4E:27:8D:C3:F6:34:8D:5C:77:6D:D0:91:3F
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584544D1ED41EF161781A1D6B600
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/cfdce237-bed0-38a8-9b8c-86a6a3779667.roa
Signing time:             Wed 20 Mar 2024 09:24:01 +0000
ROA not before:           Wed 20 Mar 2024 09:24:01 +0000
ROA not after:            Tue 18 Jun 2024 09:24:01 +0000
asID:                     2734
IP address blocks:        2605:6c00:a000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:44:d1:ed:41:ef:16:17:81:a1:d6:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Mar 20 09:24:01 2024 GMT
            Not After : Jun 18 09:24:01 2024 GMT
        Subject: CN=3bfeeb3f-c609-4bd6-9fd6-211696c9a28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:de:64:3e:08:43:0d:c9:c1:58:84:81:07:59:
                    10:56:aa:f7:e6:e9:0f:11:55:f3:1b:3e:b9:1d:0d:
                    68:b9:cf:91:42:2a:c6:00:33:cb:d7:a4:fa:36:48:
                    6a:d1:8c:01:83:ae:a8:b3:82:f9:27:13:9d:76:98:
                    97:1c:7a:69:1a:dd:f7:82:5f:d0:ad:31:c9:2f:e8:
                    e4:92:c9:f2:48:65:ee:71:30:f9:94:cb:1f:7a:e6:
                    66:7d:f0:f8:90:e5:d2:b2:7c:c1:11:0e:96:f4:da:
                    14:77:b9:40:bf:79:24:3a:58:05:7d:3f:5d:22:2e:
                    49:20:6f:5d:13:32:8d:0c:9c:00:e9:cb:1d:17:aa:
                    18:91:3e:4d:8f:73:22:63:bb:21:35:7b:e0:89:54:
                    85:a9:e7:db:d1:fb:99:8c:69:79:dd:e7:ab:42:93:
                    ef:05:15:d7:1a:2f:48:7d:30:e5:c7:5d:d8:81:2f:
                    e0:89:93:d2:e4:49:29:58:02:6f:f6:f9:d3:26:30:
                    ab:c3:63:85:ab:9e:52:a5:34:a0:a0:1d:0c:29:cb:
                    c2:e6:cc:87:2b:3d:83:d5:28:a2:dc:38:d3:e4:0e:
                    8a:90:d1:02:e7:24:81:97:bb:88:0c:5f:e6:70:83:
                    4f:25:f5:1c:cd:f7:41:a2:35:4f:8d:fc:d9:36:36:
                    7a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E7:64:3D:0D:8D:68:4E:27:8D:C3:F6:34:8D:5C:77:6D:D0:91:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/cfdce237-bed0-38a8-9b8c-86a6a3779667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:8b:73:71:07:a7:f1:f4:0f:4e:18:d8:e4:77:94:13:36:42:
         a3:66:cd:7e:aa:6b:b3:72:77:ff:00:a1:72:58:0c:a4:53:a6:
         6c:4c:51:fb:84:97:78:03:c1:c4:80:93:39:56:b1:10:5d:88:
         20:97:49:f1:24:83:92:5a:61:e9:7d:3d:85:45:43:8d:26:4a:
         73:58:6a:c2:25:b6:78:f6:d4:86:0a:b9:ea:8f:02:92:3b:f2:
         97:24:5b:44:f2:e0:a7:78:10:f9:a8:f6:e9:3b:05:10:cf:8a:
         b5:34:e3:4e:ac:bf:b1:29:48:56:1b:bf:d2:eb:1d:0c:d0:09:
         11:c7:0e:35:c2:69:4b:cd:39:cc:e0:f3:2a:04:f9:ea:d9:a6:
         9b:3c:1c:62:5f:66:c8:9b:c9:d8:ac:fa:3d:37:7b:af:41:5a:
         7c:33:35:c3:84:89:4e:fa:73:08:20:cc:23:f2:22:4a:87:b6:
         ea:a1:92:33:6f:7a:f4:26:ac:3d:15:1e:fa:c0:3f:15:62:ae:
         4a:6a:c7:a3:c3:a5:e6:14:86:45:8d:d8:46:14:1d:75:89:e5:
         59:56:29:eb:50:60:e3:a7:45:24:04:31:53:9e:45:ff:c4:52:
         99:9d:37:e9:d4:7d:50:20:53:96:b9:de:08:f9:68:03:53:7b:
         43:99:e2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:13:05 2024 by rpki-client on console-fra.rpki-client.org