Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3c58dacd-b17a-3904-a883-f1d2e402127c.roa
File:                     3c58dacd-b17a-3904-a883-f1d2e402127c.roa (raw, json)
Hash identifier:          z63yzDsoC/LIrPk/XeueNULo4zVE3NeafojRVdYs7G4=
Subject key identifier:   40:CF:C3:FB:D7:12:4F:49:ED:04:1C:EA:A6:85:F8:02:01:B8:86:88
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285847766100D130C4F0555AAC8A40
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3c58dacd-b17a-3904-a883-f1d2e402127c.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     395831
IP address blocks:        2606:7bc0:1081::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:00:d1:30:c4:f0:55:5a:ac:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=873c9558-2428-45c5-92ae-53100167286c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:63:03:f8:e4:9b:00:b0:b6:36:91:d6:86:90:
                    b3:e9:aa:f7:27:b7:86:ae:9f:d6:46:6f:60:e7:50:
                    af:94:72:e1:97:93:44:e6:80:9d:c2:5e:91:2d:6a:
                    5a:3c:c7:72:d4:0c:33:7f:59:51:9a:46:64:7f:0d:
                    f9:43:2b:8d:76:17:f9:e4:2f:12:0a:65:e7:77:69:
                    e9:60:36:41:30:95:a8:8a:6e:b6:b4:d7:e2:b7:7f:
                    d9:a8:fa:63:1c:1a:da:cc:5a:61:a3:ef:78:a7:ee:
                    b4:83:f8:18:63:96:c9:f3:01:a2:72:6b:4d:02:91:
                    45:c8:4f:53:66:e9:f0:ea:0e:54:5c:8d:e8:8f:b1:
                    b9:12:bd:a6:67:1b:7b:b2:84:31:30:90:0b:a5:8c:
                    3f:7a:42:21:97:29:42:f8:d7:92:13:a9:f7:52:1d:
                    92:66:b5:e0:e0:e3:7c:10:07:7f:34:53:ea:be:c8:
                    ea:ad:ca:c5:d3:8d:49:1e:d0:5c:0e:5c:ff:d8:3b:
                    a3:0e:81:97:96:75:5e:77:a9:95:47:61:5f:83:5d:
                    ce:ea:ed:14:66:20:10:65:43:2b:64:95:7e:b6:18:
                    93:56:ab:f1:04:8a:c2:3d:04:5d:b9:86:e2:e7:cc:
                    65:72:00:d7:25:27:69:bd:34:10:a8:dc:89:61:23:
                    3b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CF:C3:FB:D7:12:4F:49:ED:04:1C:EA:A6:85:F8:02:01:B8:86:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3c58dacd-b17a-3904-a883-f1d2e402127c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1081::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:f3:06:79:f6:77:94:ce:fe:bc:99:47:74:94:b9:09:09:3b:
         4a:d5:cb:6f:07:02:1a:4e:f7:7d:cf:47:28:b3:62:56:61:f0:
         d8:7b:ed:96:2e:db:05:4c:41:4d:02:d3:57:4e:4b:31:fa:95:
         65:de:38:7a:95:ea:28:f4:0e:ce:d2:b8:80:c9:21:11:bc:29:
         3f:60:56:a5:99:7f:b7:50:17:9f:67:a6:50:d2:15:33:c1:74:
         0e:40:05:a0:a8:1e:d5:fd:84:ac:72:70:7d:7d:04:85:f5:83:
         8e:b7:83:31:d0:13:22:36:5f:b9:3e:a2:c2:b3:95:2b:c4:ef:
         39:d6:fb:8c:b5:3a:0e:31:f2:76:cb:a9:c6:94:ad:ec:cd:69:
         ad:4b:86:61:68:e9:98:f0:ac:d1:df:34:c7:d0:ac:13:a9:3c:
         47:d3:c2:d1:b6:f4:89:f9:4b:dc:26:32:9a:8f:0f:00:79:ff:
         c9:cd:aa:40:33:7a:0f:7a:af:51:6c:a3:b8:dd:ba:4e:5a:e3:
         35:3e:cf:95:44:21:d8:b3:d7:86:ae:44:34:69:9f:72:4e:3c:
         cb:65:96:74:2b:da:d7:82:08:a8:89:cd:69:67:1c:67:57:45:
         b1:53:5f:50:42:6d:05:b7:94:a5:f7:f1:90:77:44:58:d3:a8:
         e2:6b:24:d1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEd2YQDRMMTwVVqsikAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk
ODczYzk1NTgtMjQyOC00NWM1LTkyYWUtNTMxMDAxNjcyODZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWMD+OSbALC2NpHWhpCz6ar3J7eGrp/WRm9g
51CvlHLhl5NE5oCdwl6RLWpaPMdy1Awzf1lRmkZkfw35QyuNdhf55C8SCmXnd2np
YDZBMJWoim62tNfit3/ZqPpjHBrazFpho+94p+60g/gYY5bJ8wGicmtNApFFyE9T
Zunw6g5UXI3oj7G5Er2mZxt7soQxMJALpYw/ekIhlylC+NeSE6n3Uh2SZrXg4ON8
EAd/NFPqvsjqrcrF041JHtBcDlz/2DujDoGXlnVed6mVR2Ffg13O6u0UZiAQZUMr
ZJV+thiTVqvxBIrCPQRduYbi58xlcgDXJSdpvTQQqNyJYSM7ZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEDPw/vXEk9J7QQc6qaF+AIBuIaIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvM2M1OGRhY2QtYjE3YS0z
OTA0LWE4ODMtZjFkMmU0MDIxMjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBCB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIjzBnn2d5TO/ryZR3SUuQkJO0rVy28HAhpO933PRyizYlZh8Nh7
7ZYu2wVMQU0C01dOSzH6lWXeOHqV6ij0Ds7SuIDJIRG8KT9gVqWZf7dQF59nplDS
FTPBdA5ABaCoHtX9hKxycH19BIX1g463gzHQEyI2X7k+osKzlSvE7znW+4y1Og4x
8nbLqcaUrezNaa1LhmFo6ZjwrNHfNMfQrBOpPEfTwtG29In5S9wmMpqPDwB5/8nN
qkAzeg96r1Fso7jduk5a4zU+z5VEIdiz14auRDRpn3JOPMtllnQr2teCCKiJzWln
HGdXRbFTX1BCbQW3lKX38ZB3RFjTqOJrJNE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:54 2024 by rpki-client on console-fra.rpki-client.org