Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd1abea4-aae1-3e65-829d-d30d5ad4a9b8.roa
File:                     fd1abea4-aae1-3e65-829d-d30d5ad4a9b8.roa (raw, json)
Hash identifier:          z0P36tvL6AWzjfzeronuB/S9ebZAjBuDcek8mYPLpdE=
Subject key identifier:   EB:61:6E:C8:81:B4:F6:2B:78:D9:32:2D:DA:C6:ED:FC:13:7D:4E:D5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF762A6D07EE1471E348200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd1abea4-aae1-3e65-829d-d30d5ad4a9b8.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33650
IP address blocks:        2601:600::/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:62:a6:d0:7e:e1:47:1e:34:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=938df0bd-11b4-4999-8723-56e890adfc14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1f:63:50:13:89:b0:13:81:f1:ba:5e:8a:2e:
                    d3:c6:bc:32:7e:80:8d:d8:19:60:10:9b:d9:5f:d0:
                    a8:aa:0c:1d:d4:99:0d:70:a9:a9:67:1e:43:5e:ab:
                    ea:97:71:90:45:ab:1c:ad:4c:70:e5:22:ce:c7:1c:
                    51:66:80:59:0f:91:6b:16:70:9a:34:49:67:f9:ca:
                    28:33:1d:d8:f9:64:de:36:ea:fb:7e:b7:d8:02:6b:
                    a1:77:fa:f5:b2:5d:a8:8d:5e:6c:bc:1b:4f:ca:ca:
                    b3:87:30:ea:09:c5:51:01:d9:f4:5e:28:7c:03:2c:
                    fe:ed:f4:b8:8e:bc:de:51:69:29:8e:48:3f:f2:9d:
                    45:2e:0c:10:f0:bd:31:b5:53:24:f4:c5:a4:01:07:
                    ac:0e:37:48:71:46:4f:4f:0d:f0:8a:fa:e4:f2:45:
                    84:56:28:5f:40:a1:c6:ab:e5:cd:a8:4f:2f:81:27:
                    fa:2a:ed:4f:f5:d9:50:da:87:0c:5b:88:05:76:d7:
                    2a:a4:27:41:f5:f6:17:19:66:65:34:dc:98:55:26:
                    c0:12:7d:3e:85:76:5d:cd:52:d3:aa:fc:ab:9b:a0:
                    27:a9:c8:7d:a4:48:bd:2d:91:28:6d:a5:e1:f8:c1:
                    fd:0a:e9:51:32:78:f0:27:20:95:5e:59:0c:e7:bb:
                    a9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:61:6E:C8:81:B4:F6:2B:78:D9:32:2D:DA:C6:ED:FC:13:7D:4E:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd1abea4-aae1-3e65-829d-d30d5ad4a9b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:600::/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a6:c5:b2:da:98:ac:45:b4:4c:09:01:5b:cb:ac:00:37:dc:
         c2:d8:59:ca:97:57:0c:fb:c5:4b:23:fe:35:11:9b:2f:66:40:
         8f:42:a6:be:87:2b:30:b5:fc:03:06:70:8b:2e:25:ec:ab:cb:
         ac:4a:48:35:a2:d4:3c:03:23:52:8f:3b:54:a1:3c:39:f5:77:
         fd:07:78:8c:ad:06:21:d1:5a:f6:76:95:50:48:21:b2:e1:4f:
         90:ee:00:b2:00:e6:97:54:b6:e9:04:16:0e:eb:35:ac:d9:29:
         40:af:d9:ec:85:b5:0a:58:07:60:47:ea:ca:0b:5f:52:4b:c8:
         b3:2a:4f:cf:07:d0:65:f1:9b:b6:62:42:87:c8:57:f5:83:17:
         38:48:16:ae:d9:24:aa:9f:6a:ca:83:f1:75:2b:13:2a:57:24:
         05:27:59:0a:f9:2e:0c:e6:02:61:fc:94:25:a2:2f:41:b3:2a:
         67:0d:cc:07:93:9a:af:2c:fc:f6:fa:e6:c0:19:ed:f5:e5:7f:
         b9:a3:da:1d:f9:62:33:e2:b6:0a:aa:9c:79:cc:11:43:5c:f8:
         72:95:7f:c7:10:6b:99:66:bd:da:e9:79:1d:49:3e:40:e7:fa:
         1e:33:80:69:56:d1:fc:cb:cf:72:64:76:b7:b0:1f:4f:1f:9b:
         82:38:e6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:25:30 2024 by rpki-client on console-ams.rpki-client.org