Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/74002b2c-4d64-311b-b369-7e7a856a9d5c.roa
File:                     74002b2c-4d64-311b-b369-7e7a856a9d5c.roa (raw, json)
Hash identifier:          3O+Zb4hevaplz4s8NfBpEgCjJwNsMgAWypceLjvAjqY=
Subject key identifier:   55:AF:67:91:F8:E1:2C:DF:D3:8F:4A:16:10:50:6C:4C:60:40:E7:BE
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285845B4E8D6DAD730C77576513680
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/74002b2c-4d64-311b-b369-7e7a856a9d5c.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        2606:7bc0:1060::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d6:da:d7:30:c7:75:76:51:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=ec6c85b5-4b03-4cae-ac0f-465e378bb32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:03:fd:26:4f:03:e9:9c:79:20:30:90:a3:f2:
                    80:ba:6a:c0:7e:e3:6e:a4:8f:09:0d:97:db:66:4f:
                    ec:6c:90:29:ee:3d:ef:a7:df:07:8f:1c:b1:6f:16:
                    89:2d:ce:4a:95:92:ab:cf:a3:4f:5e:07:11:f4:a7:
                    6a:93:6a:45:78:4a:5f:be:10:53:43:98:ac:ac:7d:
                    43:d1:12:84:05:e6:5a:9f:3d:fd:8e:c2:65:2e:cc:
                    d7:ce:ae:59:db:aa:fa:5e:42:dc:66:36:95:01:76:
                    62:ce:dc:6f:fd:a7:61:70:82:13:9d:ae:e5:bc:d9:
                    2d:f2:4e:8d:5f:8d:4f:35:6b:cc:cd:d2:2c:8a:54:
                    62:20:4f:08:52:34:25:d8:4a:b0:6e:13:9d:f3:2a:
                    7e:04:0e:d8:98:d6:0e:19:b9:55:79:a6:62:78:38:
                    e3:9b:00:b2:00:3d:08:da:94:21:90:64:4f:1a:64:
                    76:86:53:1a:65:f9:f3:b7:fa:02:4e:b0:8a:70:77:
                    d1:6f:de:d4:dd:db:37:fe:53:53:3e:71:00:40:39:
                    2e:b7:6a:6c:97:6a:11:a8:59:3e:b6:74:fe:91:3c:
                    c9:ff:69:f9:6a:06:c9:aa:01:54:7f:29:da:2d:8e:
                    18:17:21:52:11:61:14:3f:46:5b:36:45:25:f2:88:
                    aa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AF:67:91:F8:E1:2C:DF:D3:8F:4A:16:10:50:6C:4C:60:40:E7:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/74002b2c-4d64-311b-b369-7e7a856a9d5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1060::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:60:5f:9d:66:01:a1:73:90:1f:06:50:4c:1e:81:f4:23:88:
         83:9b:8d:37:9f:e7:fb:ec:0f:6a:e8:16:2f:4e:89:9f:56:56:
         b9:40:b4:0b:f2:aa:8d:a1:a3:f3:90:f8:39:d1:7b:0c:9d:4d:
         70:95:75:a4:62:b3:23:8d:4c:a4:c4:6c:68:9e:3f:50:90:4c:
         da:04:13:e9:71:d4:72:19:8e:62:0d:a8:e7:a9:78:48:85:4e:
         63:d7:e0:df:23:ea:ec:a6:ea:1f:72:10:5a:71:5d:c9:ab:6e:
         d5:35:45:05:87:1a:e8:fe:ad:a2:18:98:5a:9a:26:16:fb:97:
         e9:ff:09:9d:65:54:63:6a:fd:97:df:83:c8:1c:1f:78:bd:fc:
         65:ea:80:f7:e4:5f:13:05:58:9e:78:64:14:73:7e:5d:6b:3c:
         19:48:b8:f8:ef:06:3d:91:c5:f7:38:c4:a7:23:7d:34:7f:be:
         a1:03:b7:27:b4:0f:11:d5:47:38:3e:c9:b6:83:ab:95:88:3a:
         26:50:7f:9f:ab:90:09:ca:dd:9b:62:11:e9:a7:68:bd:34:50:
         69:47:e6:bf:82:c0:f8:bd:a5:66:ac:db:08:6d:69:d5:3f:92:
         14:17:a4:22:f5:62:5c:36:48:67:ea:ce:a3:41:fb:9b:e9:cd:
         81:fd:c6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:53:29 2024 by rpki-client on console-fra.rpki-client.org