Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e845999-7ffa-30fa-a088-4781e4a716cf.roa
File:                     0e845999-7ffa-30fa-a088-4781e4a716cf.roa (raw, json)
Hash identifier:          GE41rhoQ9wn3Q/yucNspMq/s+WLqFa87iTWCiQL2mO4=
Subject key identifier:   BA:88:EF:43:D8:97:EE:7B:87:A6:A0:48:C6:0F:47:E8:54:69:2E:7E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A954958039C24EAAF4970
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e845999-7ffa-30fa-a088-4781e4a716cf.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33287
IP address blocks:        2601:40::/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:95:49:58:03:9c:24:ea:af:49:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=0106eeff-cb96-4c98-917c-45993245b1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:97:c0:97:65:99:d9:f5:e4:ab:cf:f5:e3:3d:
                    39:b6:68:89:d0:6e:6d:0a:09:8c:79:a2:ff:dc:b4:
                    00:73:78:e9:03:e6:fa:54:8a:5e:d0:10:e2:ed:9f:
                    0a:d6:ad:8e:7f:a1:85:2e:1e:1f:81:1d:09:a4:c1:
                    50:2f:36:27:95:db:c8:fc:48:f5:1f:60:2c:63:57:
                    6c:68:ad:b2:c6:0b:1d:67:f7:8a:af:81:34:18:9b:
                    b9:29:7d:d8:14:37:33:d7:22:b9:b7:d0:b6:fd:4b:
                    fc:8f:5d:af:8c:85:68:dd:3b:13:ae:4d:51:db:c0:
                    f3:52:fd:37:3a:f9:09:72:d3:8b:1b:ff:b9:17:e9:
                    99:4f:2c:c3:59:cc:71:ac:3e:c9:6f:2a:23:01:83:
                    7b:c8:dc:f3:f8:aa:3f:aa:b3:da:49:8e:9a:26:7c:
                    bd:a1:73:f6:f6:5e:51:9a:48:45:f3:25:2c:b8:ee:
                    62:e0:2a:93:76:11:ed:8e:40:21:d6:e0:5d:4b:70:
                    df:c2:e4:0f:e3:66:c8:98:ba:20:dd:7e:ba:53:78:
                    5a:69:83:3e:c6:fd:27:2b:ab:e2:37:52:4d:28:05:
                    d7:ff:87:9d:d1:75:94:7b:64:a7:76:43:19:e1:fe:
                    fb:be:95:58:9b:7e:96:0b:48:92:a9:27:8f:f1:5b:
                    1b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:88:EF:43:D8:97:EE:7B:87:A6:A0:48:C6:0F:47:E8:54:69:2E:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e845999-7ffa-30fa-a088-4781e4a716cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:40::/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:b7:12:93:af:e9:15:57:c8:2c:89:16:06:56:a2:30:b8:e1:
         75:c1:cc:62:7e:5d:18:0f:00:76:50:05:53:21:df:7b:7e:21:
         e9:b7:1d:03:fb:2d:0e:36:89:ba:a8:bc:9d:59:6a:f3:73:ef:
         48:73:d5:a3:ae:db:c9:9f:4d:1e:23:7d:4e:8e:41:2b:f9:82:
         af:73:e9:0d:36:d9:09:53:9e:88:0c:52:e5:24:02:64:e6:ca:
         ba:11:90:04:c3:31:5d:06:ca:de:80:d0:61:fd:bb:36:06:49:
         8d:15:4f:4c:3c:cf:90:d8:40:01:eb:f2:15:56:36:14:d1:bb:
         9d:9a:1d:4c:fe:b6:22:a7:17:fd:5a:65:55:f7:ea:f7:c4:bd:
         b0:c2:04:da:f5:f8:c0:fc:b8:1a:61:67:c2:8a:6e:dc:44:10:
         69:ff:ae:9b:e5:34:b2:70:93:95:dc:b3:1a:06:2a:71:10:88:
         45:73:24:c7:82:4a:ff:46:a4:00:50:7d:6e:c2:c3:4f:a1:18:
         ff:c2:26:34:5c:45:b4:11:11:dc:65:2f:83:83:65:3d:71:9f:
         f1:c1:b7:2a:86:bd:c4:aa:8b:80:11:ed:a6:17:e9:6d:73:9c:
         95:fc:84:57:0c:95:97:35:40:33:53:cd:8a:cb:d4:13:d2:66:
         84:36:46:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:39:50 2024 by rpki-client on console-fra.rpki-client.org