Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/278f2c28-3302-3737-a97e-4160c5c35b37.roa
File:                     278f2c28-3302-3737-a97e-4160c5c35b37.roa (raw, json)
Hash identifier:          5w0FQcInqGx1eCFWgg/w8xkCpD79ljw8JrDAQaRPZgk=
Subject key identifier:   19:26:DF:C2:28:95:73:8C:95:C9:A2:AF:20:64:2D:B9:D2:D9:3E:A6
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584553332C99202F3F5F08BED680
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/278f2c28-3302-3737-a97e-4160c5c35b37.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        2604:cb00:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:2c:99:20:2f:3f:5f:08:be:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=3e55b314-bdd1-439d-a740-25f9f5904d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d9:ad:67:cc:81:0a:aa:0e:50:c6:30:cf:ab:
                    1d:e4:9f:8a:2b:f4:b0:a1:3a:36:e2:63:c1:aa:40:
                    ad:4f:e0:96:e5:f0:54:da:04:2d:1b:b8:0c:1f:35:
                    29:cb:a8:7f:f9:cf:7d:26:30:2a:41:93:aa:d8:be:
                    da:5b:e0:9c:ef:49:d6:4e:3a:42:71:22:27:b3:db:
                    14:19:7d:3d:bd:3e:32:50:08:ee:1d:45:94:4a:01:
                    4d:75:7c:f8:8f:96:da:e2:4f:7b:e3:eb:d2:7e:7f:
                    e8:6e:be:38:c6:5e:a5:68:6d:c4:c8:db:cb:58:a1:
                    85:f2:a3:e1:bf:f4:de:5e:48:3c:bf:93:8b:cc:6b:
                    55:f5:55:c4:e3:a1:41:1e:55:6e:01:b4:6c:0b:98:
                    1d:16:79:d4:a8:c7:2b:bc:64:3c:3d:3c:8e:ee:58:
                    ea:00:f8:f2:04:df:c2:a2:06:87:8a:80:2d:d2:e7:
                    ea:65:eb:a9:3c:9c:23:a4:af:c2:10:37:f8:00:8d:
                    2b:5a:fc:18:89:77:2e:ab:00:fb:59:65:7d:c2:0b:
                    99:89:79:bb:8e:67:bc:71:ff:06:28:48:34:a5:24:
                    da:f8:cb:9f:bc:53:d2:66:b4:18:0c:41:42:90:07:
                    e4:18:1b:87:2c:a6:c0:29:d4:f9:10:41:9b:b3:80:
                    ac:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:26:DF:C2:28:95:73:8C:95:C9:A2:AF:20:64:2D:B9:D2:D9:3E:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/278f2c28-3302-3737-a97e-4160c5c35b37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b1:66:1d:6c:37:50:e0:74:23:b1:49:9a:ad:8b:e5:8f:fb:
         5a:cc:54:d1:2e:9b:18:3d:08:7d:6e:69:f6:bb:4a:f0:cf:b6:
         ae:0e:62:13:d0:3b:46:b5:a9:82:11:7b:01:0e:71:15:49:2c:
         5a:31:2f:84:27:f0:c6:e6:c5:81:70:95:7c:97:b2:87:23:77:
         02:74:25:7b:bd:cd:6a:7d:ea:fd:df:40:7e:9c:7f:12:93:c1:
         16:f8:5c:74:17:9c:8f:34:4a:78:f4:c9:e5:74:e4:86:14:38:
         90:16:29:41:e3:9d:a0:ad:84:3d:ae:06:bd:42:ea:48:fb:6c:
         fd:e8:07:3f:28:ff:80:65:7d:eb:a4:c8:43:42:22:b9:65:c9:
         eb:98:cd:c3:ef:08:95:1f:36:29:1f:eb:3e:db:b0:bc:b7:a8:
         96:f9:aa:8b:0d:33:63:15:09:b2:5a:dc:d3:1e:8a:1d:b8:21:
         99:40:96:79:38:80:65:17:dc:c2:71:98:bb:61:4a:aa:df:37:
         5d:64:8c:6f:56:2e:55:a3:bb:b2:49:3a:ec:6d:6f:ba:14:39:
         d4:a0:3f:44:2e:5c:11:51:5d:5a:5a:10:3e:41:f0:36:b6:f1:
         33:0b:48:e7:9b:0d:b5:c1:d8:91:32:24:f2:c1:9a:b9:e1:36:
         bc:32:a6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:40:28 2024 by rpki-client on console-fra.rpki-client.org