Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/02006f49-3624-35df-96b9-dce727aa1e0e.roa
File:                     02006f49-3624-35df-96b9-dce727aa1e0e.roa (raw, json)
Hash identifier:          PebCabDlUBv8kn+Lm+5p+9Sz6xgN1yoZV2c0uBnxV3Q=
Subject key identifier:   A3:C1:EA:D9:9C:D4:0C:E0:79:37:DB:82:CE:88:E2:86:00:C7:6C:53
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F432858457082F84428102C3DBDAEFAC0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/02006f49-3624-35df-96b9-dce727aa1e0e.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     28110
IP address blocks:        2606:f180:9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:82:f8:44:28:10:2c:3d:bd:ae:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=74feb11b-1703-4078-8504-e552c71b5e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:b2:47:88:5a:a8:a5:2a:9f:d8:66:fe:65:
                    75:7a:74:f3:cd:7c:00:7d:45:09:0e:c4:81:94:ec:
                    f5:02:89:33:2d:51:2e:bb:cc:7e:73:d3:8a:97:a0:
                    4c:5e:7d:c1:3a:8f:b1:3d:81:77:30:03:0a:c2:cd:
                    a0:54:4d:38:7b:b1:de:8b:ad:0d:a5:a3:08:d2:17:
                    0d:c6:2a:87:e4:64:a3:0c:09:65:05:e5:b6:12:f4:
                    31:2a:4a:f2:2e:c8:76:f4:97:ec:d0:9d:41:8e:28:
                    41:f0:70:4b:4e:13:d2:0e:b8:e3:72:df:bd:04:2c:
                    a9:8e:b4:93:58:58:28:43:49:6d:ce:44:68:46:2b:
                    b2:66:71:07:6d:2f:81:82:bd:9c:8d:fc:c6:eb:b3:
                    b1:8e:3d:13:8b:1a:1e:12:c9:e0:8a:eb:f1:0e:fd:
                    f5:30:93:fc:b1:cb:f6:54:c1:a0:6b:9d:9a:d8:4a:
                    94:00:23:e4:79:f5:e3:f2:89:f4:6d:cf:63:bc:09:
                    67:65:d0:7a:62:a9:ed:b3:32:35:24:68:59:92:0c:
                    63:dc:38:b4:0a:65:96:36:c6:50:e9:91:4a:20:30:
                    0f:f4:ea:8f:6a:05:9e:db:c4:fe:65:21:53:ca:a8:
                    7a:da:9c:76:74:d9:95:fd:e3:d2:a5:82:7b:1b:a9:
                    ec:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C1:EA:D9:9C:D4:0C:E0:79:37:DB:82:CE:88:E2:86:00:C7:6C:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/02006f49-3624-35df-96b9-dce727aa1e0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f180:9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:83:98:0f:6f:0d:72:e8:83:c6:82:04:eb:24:85:5c:f6:2b:
         55:74:72:ce:90:ed:30:9f:2a:69:df:b9:d7:71:7f:6d:91:c6:
         71:7f:8c:b5:d6:f9:94:5e:45:f0:bb:78:9e:00:0a:5a:e8:ce:
         bc:dd:80:02:d9:c7:27:e8:77:0c:29:59:81:80:95:0d:f8:b3:
         fd:13:c4:5a:bd:5f:e5:63:0f:ca:9d:a8:5a:8c:af:c8:ee:ef:
         30:f1:0d:70:b0:a1:8f:24:c6:dc:f6:a7:78:f4:63:26:b7:89:
         2b:1b:7d:f3:8f:51:33:e3:94:7f:6a:73:19:27:84:b3:40:81:
         15:cd:ac:dd:46:84:ff:6a:b9:ab:bc:6d:3d:33:63:34:27:f7:
         a8:d3:15:fe:ee:d6:22:a0:d9:5e:95:47:00:fb:7b:9b:cc:35:
         12:ac:7f:b5:50:fc:54:f4:0c:7f:47:4c:0b:6d:5f:5c:6c:20:
         22:ec:1b:0a:33:96:9e:b6:23:ea:23:e7:89:f2:4e:f5:76:d9:
         88:69:9b:1e:15:01:c4:15:bf:6b:40:6c:51:2d:f3:94:bc:aa:
         04:bc:6f:0c:f4:64:a7:e2:cc:20:8d:3d:01:19:ca:44:2c:b4:
         9c:bf:1a:11:b7:8e:71:4c:bc:c8:aa:ec:cd:1b:58:81:56:87:
         9d:76:f3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 19:25:29 2024 by rpki-client on console-fra.rpki-client.org