Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36/cc69ede2-d7e7-392a-b74f-337574493f36.roa
File:                     cc69ede2-d7e7-392a-b74f-337574493f36.roa (raw, json)
Hash identifier:          0nwvigm2tE6mFmnJjeT8RovW/8p+a775XuSQoU1Ti7c=
Subject key identifier:   2A:0B:62:4D:8A:17:6B:B0:14:08:4D:62:0A:DE:40:54:DD:C7:30:65
Certificate issuer:       /CN=6fabae2d-fab4-4ccf-be2c-bbe98c45bb36
Certificate serial:       010D0C9F43285845E45E71DFB5B73B5E49390860
Authority key identifier: 0C:5E:08:39:C1:24:2C:94:E4:F9:B9:5B:94:A5:BA:11:A4:6C:F8:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36/cc69ede2-d7e7-392a-b74f-337574493f36.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     10242
IP address blocks:        2605:8400::/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:71:df:b5:b7:3b:5e:49:39:08:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fabae2d-fab4-4ccf-be2c-bbe98c45bb36
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=855ea27a-e45e-486a-ab09-246f62a5439b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cb:81:b8:29:9e:d2:74:c2:6e:cf:79:3e:cb:
                    92:d0:35:86:ad:e0:96:41:50:9a:cc:0e:52:8d:53:
                    92:ef:e6:3f:48:ea:62:6b:93:f2:cc:2a:3a:a3:51:
                    c4:a7:40:16:56:9c:a3:9f:5c:a2:63:72:ca:0b:e3:
                    3b:17:27:48:af:19:a7:a4:f7:e7:c6:e1:f1:10:22:
                    6e:9b:72:4a:1a:d6:09:55:ee:59:7f:81:50:0b:1b:
                    82:f5:a4:f3:4e:78:39:6d:b7:ce:94:6f:a1:9a:68:
                    39:40:0c:ea:be:3f:d3:43:ce:05:25:0c:73:e6:e9:
                    8d:0b:08:f9:a9:ec:97:41:76:9e:7d:d5:5a:e5:4b:
                    21:c9:1a:5a:74:2d:dc:97:25:0e:ab:7e:5f:8b:92:
                    8e:ca:5f:b1:93:98:ac:d0:a8:f0:74:6c:97:71:7d:
                    cb:00:4d:cb:86:86:6f:d9:2a:1d:22:ed:ee:f6:c7:
                    49:de:9a:6d:bc:a8:66:18:f2:36:02:ca:7e:8e:07:
                    6f:80:3c:5b:02:1e:c3:93:4e:68:de:5c:0d:78:5a:
                    64:b5:76:5b:2e:ef:46:e3:1f:e1:c6:e8:d3:8c:dd:
                    5b:37:b2:de:23:c0:9b:bb:4e:7d:2e:a7:2e:78:a3:
                    00:62:db:a7:58:41:f4:08:76:d3:97:79:0e:ed:d7:
                    41:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0B:62:4D:8A:17:6B:B0:14:08:4D:62:0A:DE:40:54:DD:C7:30:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36/cc69ede2-d7e7-392a-b74f-337574493f36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36.crl

            X509v3 Authority Key Identifier:
                keyid:0C:5E:08:39:C1:24:2C:94:E4:F9:B9:5B:94:A5:BA:11:A4:6C:F8:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8400::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:06:2e:63:c6:04:e5:7e:6f:aa:99:8a:2b:57:8b:2f:8a:96:
         2b:ba:ef:09:12:3d:9f:8e:7f:3b:0b:b6:4d:d3:08:be:1c:05:
         0b:15:f0:10:46:84:70:60:df:67:04:55:7b:7e:cf:3d:19:56:
         5c:c1:97:cd:aa:5d:7b:10:f4:6a:ed:af:a4:94:6c:b0:42:b2:
         ef:44:bd:08:8c:08:a1:29:5b:61:56:3e:23:1f:68:bc:ac:46:
         6d:64:04:d4:58:fe:38:b3:d5:be:e3:62:ec:af:77:c5:9a:9c:
         f4:b8:bc:b2:5c:08:fc:f3:d3:2f:6c:a8:bf:61:91:6e:bd:0e:
         7d:82:9b:bc:ef:07:8a:d7:aa:3a:cc:b0:15:88:50:98:8d:59:
         2b:ca:21:79:5e:bd:a8:92:ec:29:94:67:e6:e9:cd:c8:a3:6c:
         13:fd:f3:18:09:60:a8:33:df:d6:f8:19:57:24:04:88:b0:aa:
         58:32:fa:b8:7d:52:30:0b:e4:2d:4f:5d:7d:51:77:87:13:e2:
         0e:4b:4b:32:92:99:30:44:8a:5f:56:be:53:3a:0f:65:1e:46:
         da:8d:b6:7c:66:f8:fa:7d:2b:6c:e9:fe:52:97:3b:fd:07:1c:
         1a:ca:31:a6:ff:bf:d9:4c:b5:51:ac:c1:2c:15:c5:61:be:cf:
         b6:8d:4f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:58:27 2024 by rpki-client on console-ams.rpki-client.org