Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24a81b68-ef8f-3567-bacd-1e75c6b51fc7.roa
File:                     24a81b68-ef8f-3567-bacd-1e75c6b51fc7.roa (raw, json)
Hash identifier:          keEBFUNznkiCkVRQ8Ykyy0ASWHgh8qxSZxcwVesYrxs=
Subject key identifier:   F5:86:5B:F3:65:EF:CB:01:16:9D:C4:6C:D4:A3:41:40:62:BA:F8:4E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC896CC911893BD1F7A00080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24a81b68-ef8f-3567-bacd-1e75c6b51fc7.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        2601:46::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:6c:c9:11:89:3b:d1:f7:a0:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=49e2a1e6-76e4-41a5-a408-7abe7550b1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:50:12:84:6b:24:58:45:a2:e8:76:c9:92:9a:
                    b5:7e:ae:36:20:36:eb:6f:39:9d:47:33:f9:99:4d:
                    36:50:95:f8:d1:43:d2:db:ac:6f:89:5c:27:cc:e3:
                    83:99:5a:6d:57:d1:da:9f:35:d1:78:fb:4b:0e:f3:
                    c1:cc:31:2f:49:e4:73:31:41:cb:60:5b:e5:47:cf:
                    1a:9a:35:e6:d5:c7:5a:60:5c:fc:e5:8f:bf:fc:62:
                    ad:11:e2:01:8b:93:3c:ce:fe:c8:e8:50:ca:38:4f:
                    c7:60:18:5e:cc:5f:55:6b:26:9b:03:c5:2b:23:d4:
                    ff:ce:de:15:f8:6f:0b:ac:08:fd:b4:30:55:31:b4:
                    b6:d5:35:00:b8:81:02:e1:bc:ee:d9:3d:fe:d2:b1:
                    57:c0:b3:d6:3c:4f:e1:e5:27:d3:3f:45:cd:04:3a:
                    49:3b:c9:08:10:74:52:2f:f2:60:e0:6c:7d:47:09:
                    8a:da:93:65:22:b1:c4:35:47:3d:c9:58:20:bd:78:
                    db:88:bc:2f:66:9a:3c:dc:af:ba:78:15:34:fa:74:
                    b0:99:dd:6c:26:b8:30:8e:cd:28:ec:45:18:ca:59:
                    68:51:bd:10:04:1a:4e:1b:7a:b6:14:c0:3a:a7:7e:
                    60:1a:8a:5d:30:32:c1:f9:85:a5:38:af:71:25:13:
                    c3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:86:5B:F3:65:EF:CB:01:16:9D:C4:6C:D4:A3:41:40:62:BA:F8:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24a81b68-ef8f-3567-bacd-1e75c6b51fc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:46::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:25:a7:fb:98:b0:0a:65:25:44:c2:af:9a:de:3f:54:4f:d8:
         08:55:de:49:fa:e3:db:25:1a:73:f5:ba:2f:dc:0a:31:1a:eb:
         43:ca:cd:28:da:d6:e3:22:c2:d4:96:35:f9:10:db:20:8a:95:
         b3:e8:61:27:31:57:27:af:1a:b8:35:12:e2:da:e9:07:a9:4f:
         df:9c:46:43:cb:e5:91:8c:27:59:8e:8d:fe:e5:e5:b4:17:b6:
         15:ae:00:76:4b:19:3e:75:94:72:76:19:ea:43:51:6f:ae:07:
         29:3a:6f:ec:09:fe:fb:f1:cf:7a:15:41:91:dc:3a:f4:b0:8c:
         fe:4c:68:c1:97:d7:b3:04:ae:95:1c:9d:2c:23:b3:49:20:69:
         07:76:7a:82:fe:c2:5c:6e:0c:05:6f:cc:74:c6:ad:9c:d7:bb:
         b4:3a:d3:4a:11:cc:62:25:24:d8:3b:4c:54:6c:50:47:c7:72:
         6f:3a:45:ba:94:ae:32:b4:7e:d1:e7:73:c7:08:23:dd:34:39:
         68:3e:bd:ef:9d:15:14:d8:a2:9e:d8:cb:6b:e4:ed:5a:ee:f5:
         ef:88:a9:33:2e:e2:e8:b2:be:6c:2d:45:98:9f:7f:3d:0d:b5:
         2a:20:92:cf:8e:cf:86:a9:4d:68:3c:25:1e:dd:f3:8f:d1:f6:
         a6:ac:06:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:46:02 2024 by rpki-client on console-fra.rpki-client.org