Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/ff5dc985-ec94-3102-85c0-355a658fb5a3.roa
File:                     ff5dc985-ec94-3102-85c0-355a658fb5a3.roa (raw, json)
Hash identifier:          EBKGAQZaoKz5nRybN5/3zcqCk0ysKPGTkweIZVMzcgs=
Subject key identifier:   73:FC:AF:52:EA:D0:2C:BA:F6:9C:78:70:25:D3:76:BE:95:EC:7B:6E
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584545C3E53BF4B32CBEB20D8B40
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/ff5dc985-ec94-3102-85c0-355a658fb5a3.roa
Signing time:             Wed 20 Mar 2024 17:31:33 +0000
ROA not before:           Wed 20 Mar 2024 17:31:33 +0000
ROA not after:            Tue 18 Jun 2024 17:31:33 +0000
asID:                     2734
IP address blocks:        2605:6c00:5000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:c3:e5:3b:f4:b3:2c:be:b2:0d:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Mar 20 17:31:33 2024 GMT
            Not After : Jun 18 17:31:33 2024 GMT
        Subject: CN=14aaa331-264d-4711-b1dc-9648f6e04693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:be:11:5d:75:9a:18:0c:43:59:73:59:c5:f4:
                    a9:3f:eb:da:27:f8:fc:63:94:59:c1:e8:00:3d:9b:
                    0f:c7:7b:bb:1d:85:4c:42:00:f0:78:cc:97:bc:e2:
                    17:20:41:5a:fe:c2:d9:de:34:76:9f:91:e7:5e:2c:
                    06:cb:88:c3:95:0d:8e:4e:b6:09:8e:ed:a9:ab:48:
                    6b:24:6a:13:24:0a:9b:51:39:e7:98:d8:99:c0:51:
                    34:88:9e:e8:b6:cb:88:ce:f0:8b:ab:1f:7c:e0:dc:
                    b1:16:85:29:d6:a9:7c:86:a2:93:d2:a0:b1:3c:53:
                    fb:d7:b9:c9:b2:c0:72:e8:92:a0:fa:bc:a6:9c:c4:
                    3b:33:72:e4:80:3b:0d:bf:23:75:ba:64:24:a6:fc:
                    49:cd:18:02:15:57:fb:53:62:66:80:ba:94:5b:81:
                    04:da:8e:4d:d2:48:a3:48:93:af:6d:78:23:b5:49:
                    69:1f:07:18:22:d2:70:55:b7:c4:c1:14:e0:73:ec:
                    32:cd:33:e2:56:4e:dd:8f:d2:00:64:36:63:93:0e:
                    44:30:fa:3c:56:67:0a:6f:c1:73:0b:64:65:99:be:
                    8f:75:4b:5b:1f:3c:5c:bd:75:46:b7:5b:35:48:cf:
                    6d:0e:ea:ed:dd:1e:e2:5b:94:82:6e:9e:90:07:8c:
                    6f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FC:AF:52:EA:D0:2C:BA:F6:9C:78:70:25:D3:76:BE:95:EC:7B:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/ff5dc985-ec94-3102-85c0-355a658fb5a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f8:32:8c:8d:61:95:93:fd:5e:c5:3d:2a:91:34:46:8b:8d:
         a9:cf:30:2e:ea:95:7e:3a:6d:c5:5e:bb:13:eb:eb:b0:fa:a5:
         9a:9d:1d:11:25:44:2c:f6:34:1c:0c:5e:80:93:93:d7:52:3c:
         bd:e7:22:38:b0:1b:dc:fd:69:c2:ef:f8:e7:00:8a:65:62:5a:
         92:a4:27:c8:c7:f9:d7:89:78:e4:68:d7:72:13:ab:75:e4:d6:
         f0:22:ac:19:7d:f6:54:0b:e4:0c:30:c7:e6:ed:03:f5:1c:72:
         1a:64:e0:a7:0d:0c:90:69:a2:9f:51:38:bb:ff:8b:11:8f:35:
         be:ab:4b:db:4a:d9:16:c0:2a:e4:a9:00:56:75:02:52:4c:73:
         e4:0c:95:de:b6:92:55:0b:09:37:32:72:49:5f:be:53:96:91:
         42:46:5a:1a:c3:8b:f8:6e:dd:e2:3e:fb:c6:15:24:36:fe:4a:
         78:52:35:76:50:6e:3d:16:9d:41:0f:24:05:79:e2:0b:49:94:
         fd:bc:1a:55:02:7f:4d:f0:16:d4:1e:96:75:13:48:a1:70:c5:
         75:69:42:f8:73:a2:a4:87:ac:54:94:f6:1f:99:2f:dd:78:b1:
         8a:fc:78:51:00:e1:e1:e7:01:0b:57:9d:5f:81:6d:04:33:0b:
         ee:0d:7f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 02:20:08 2024 by rpki-client on console-ams.rpki-client.org