Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e732970c-5f85-3c04-aa0d-413895fa0d9f.roa
File:                     e732970c-5f85-3c04-aa0d-413895fa0d9f.roa (raw, json)
Hash identifier:          ZTe4ALODFv03YZwaacsptl9DpRo+NuZ+yRoRMLtSDYo=
Subject key identifier:   85:92:D8:2E:A6:3A:2B:6E:0B:45:D8:FB:08:F5:02:4C:0B:F5:FA:80
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285845628D8A68291013528D858C80
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e732970c-5f85-3c04-aa0d-413895fa0d9f.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     0
IP address blocks:        2001:504:13:4::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:8a:68:29:10:13:52:8d:85:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=37dac6fe-4f00-4f82-b9b9-d1838819c601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ab:ec:6f:1a:2b:6a:2b:ad:bd:a5:47:d4:21:
                    4c:b7:22:bc:bc:66:d0:04:06:b0:72:77:01:f2:32:
                    28:ca:bf:27:b5:d7:e9:52:9f:9f:e3:3a:a5:76:4a:
                    17:26:f4:5b:9b:1a:5d:98:5d:f5:9d:12:7c:f7:1c:
                    45:09:4a:0d:3f:e6:94:bc:df:d6:29:16:b5:b4:66:
                    0e:3b:fb:ec:da:38:a6:31:00:1f:46:a3:d6:ca:1c:
                    ff:7a:21:19:96:6f:0d:b8:09:17:74:54:c8:5a:03:
                    e2:4b:cd:38:a4:13:61:b0:b2:a5:ed:f0:ed:80:b3:
                    63:c9:69:63:d5:2f:6f:9d:c4:03:5c:93:4b:c0:98:
                    15:27:8e:31:1c:f1:15:ef:f6:3f:76:a0:65:ab:62:
                    91:f9:6a:f2:23:05:a8:06:97:2c:f5:0c:36:12:5b:
                    ae:ab:cb:2d:ba:2e:38:77:a7:7a:e3:35:67:2d:ab:
                    9e:3e:e3:d7:83:b4:a1:d4:a3:2c:7d:d7:a4:08:a8:
                    ef:05:2a:b4:25:37:7e:06:79:3a:e1:d8:00:c4:4f:
                    49:bf:52:44:c6:20:9a:fd:8a:fb:8a:17:98:81:3a:
                    cb:12:34:6f:53:13:10:60:9f:d4:4d:b3:7d:eb:51:
                    3e:3a:c8:ae:59:f0:0f:7e:d2:83:09:9c:26:07:75:
                    f6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:92:D8:2E:A6:3A:2B:6E:0B:45:D8:FB:08:F5:02:4C:0B:F5:FA:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e732970c-5f85-3c04-aa0d-413895fa0d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:13:4::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:2f:f7:f2:d8:7a:bd:fe:a4:42:e4:49:14:85:d1:a6:34:72:
         f2:88:6c:84:1a:c1:44:6a:66:ae:1b:d8:a4:95:8b:c4:20:af:
         39:5f:c5:5a:d8:52:fd:5d:4a:8a:85:89:58:e2:27:83:9c:6a:
         9c:23:6d:93:50:f8:48:2f:3a:11:9a:86:47:6e:00:db:61:72:
         c1:4c:27:12:bd:47:4a:b3:d6:0d:4a:a4:1f:ce:0d:14:42:23:
         e9:5c:cb:e5:a4:a2:70:96:2a:39:ed:e0:fa:b3:d7:b1:64:ba:
         ae:3d:66:2d:b3:f7:a0:84:0e:64:9d:69:59:47:34:ac:10:fc:
         89:1f:6a:c8:ad:74:1d:e3:13:e2:ce:e6:4a:9b:b0:5e:68:26:
         bf:50:2d:f6:ce:85:92:54:28:34:56:9a:a2:a9:a9:cc:aa:64:
         3f:bc:12:7e:a8:68:02:c4:83:1c:e2:b9:fc:67:d1:2c:4d:dd:
         ec:1c:67:68:21:28:69:bb:25:5d:06:51:58:cb:92:75:7f:a7:
         4c:63:2e:aa:0c:ac:49:9c:34:cf:9a:03:5f:e9:9d:30:e7:51:
         09:b9:d7:7f:40:41:7b:71:f7:37:94:2b:7f:8c:9a:71:6b:24:
         03:2d:7a:f6:bc:45:58:fd:77:75:6e:5e:e2:e9:42:a6:2c:3f:
         56:c9:84:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:16:30 2024 by rpki-client on console-ams.rpki-client.org