Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/942b3e3f-eb39-3252-95ec-0730c3a6142a.roa
File:                     942b3e3f-eb39-3252-95ec-0730c3a6142a.roa (raw, json)
Hash identifier:          tLVAaA/+OOb3mWIct8Ni4Do3Md1V4QUo7R2ZcHsGnD0=
Subject key identifier:   FB:EE:C9:03:76:53:9A:27:6A:34:53:03:F1:C4:86:1A:AB:75:48:4E
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285845B4E8D70495A987ECED444200
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/942b3e3f-eb39-3252-95ec-0730c3a6142a.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     14618
IP address blocks:        2606:7bc0:1080::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d7:04:95:a9:87:ec:ed:44:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=f3afd09c-1fc3-437a-94f9-0ee5c88eacf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:69:73:03:b7:2c:f3:b4:96:93:2e:95:6f:e2:
                    25:63:5b:d8:82:1f:f0:ae:f1:2e:b5:95:09:d8:27:
                    6c:be:22:66:a0:b6:7f:61:8a:c7:34:f7:a8:80:be:
                    72:98:08:54:7b:44:e8:32:12:bb:1e:64:ab:a9:e0:
                    c3:e0:98:b9:65:4c:b1:d6:5d:a2:f5:85:1e:e9:92:
                    5f:7a:6f:a9:c9:81:85:57:63:c1:9c:86:c6:09:bb:
                    16:e3:3f:f0:11:81:15:65:73:33:87:31:c9:43:3e:
                    83:af:a3:0a:6a:f2:c6:5c:71:70:4b:8f:6a:df:24:
                    11:70:4b:26:c3:2a:41:74:4f:cc:10:7c:a8:79:a7:
                    1b:f8:02:5c:93:7f:68:8d:a6:9f:c1:b5:47:7e:02:
                    ad:33:4d:dd:6c:22:f7:2e:5d:49:bb:a0:16:8b:42:
                    0b:87:36:90:cf:82:e0:5d:d1:d1:74:37:4b:88:60:
                    38:f6:b1:3a:a6:7f:47:f5:73:d5:f9:9b:57:1e:ca:
                    25:55:1a:82:e7:a5:35:63:c9:43:f0:a3:b0:9f:ee:
                    aa:26:b1:d2:09:ab:bc:50:c9:60:18:88:09:44:51:
                    9e:1b:58:88:fe:98:1a:00:f3:95:2b:e5:a8:06:57:
                    ef:06:68:2f:59:d9:0b:e3:bf:d0:83:a0:0f:b6:a1:
                    0e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EE:C9:03:76:53:9A:27:6A:34:53:03:F1:C4:86:1A:AB:75:48:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/942b3e3f-eb39-3252-95ec-0730c3a6142a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1080::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:45:ed:94:ce:0b:10:4c:72:9e:33:5e:09:f1:cd:36:65:6c:
         55:dc:77:f4:b6:97:dc:5f:2d:b9:87:49:60:5d:b6:cd:55:57:
         76:1c:7b:84:86:14:68:ee:df:47:ad:b5:c6:ce:07:91:41:67:
         33:42:58:9c:fb:84:b5:3f:c0:a0:93:ad:dc:37:b5:9f:6c:77:
         f4:c9:51:f1:00:c5:6b:e5:47:cf:74:ec:00:0c:da:50:2a:59:
         93:51:2f:c5:31:e8:67:39:fd:52:aa:44:27:01:0e:2b:6f:48:
         81:67:30:fc:1f:a8:98:c4:f4:d9:1c:df:f9:17:49:77:d6:c9:
         6b:03:47:4f:2f:47:34:70:ea:6e:0d:25:dd:71:2c:d7:48:ae:
         4f:ba:15:e9:51:48:b3:7e:fa:09:6f:de:0b:1b:9f:34:43:09:
         d6:91:5f:86:7d:e8:52:df:d1:e8:ea:70:14:9f:fc:1a:e9:c2:
         2c:13:03:b9:2f:e3:89:1c:4b:2a:f8:db:71:f2:fc:7e:f5:6b:
         e4:f8:a3:05:7b:03:9a:d1:3a:24:e5:d2:49:0d:09:1d:ba:5e:
         be:fc:16:ec:9f:d6:5e:4f:3c:1e:2d:f8:20:57:e2:2e:8a:29:
         f4:a9:a7:4f:a6:82:7a:60:d2:a7:68:4b:3e:35:4c:34:70:54:
         8b:7c:70:9a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEW06NcElamH7O1EQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI0MDQyOTEzMDAzM1oXDTI0MDcyODEzMDAzM1owLzEtMCsGA1UEAxMk
ZjNhZmQwOWMtMWZjMy00MzdhLTk0ZjktMGVlNWM4OGVhY2YxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2lzA7cs87SWky6Vb+IlY1vYgh/wrvEutZUJ
2CdsviJmoLZ/YYrHNPeogL5ymAhUe0ToMhK7HmSrqeDD4Ji5ZUyx1l2i9YUe6ZJf
em+pyYGFV2PBnIbGCbsW4z/wEYEVZXMzhzHJQz6Dr6MKavLGXHFwS49q3yQRcEsm
wypBdE/MEHyoeacb+AJck39ojaafwbVHfgKtM03dbCL3Ll1Ju6AWi0ILhzaQz4Lg
XdHRdDdLiGA49rE6pn9H9XPV+ZtXHsolVRqC56U1Y8lD8KOwn+6qJrHSCau8UMlg
GIgJRFGeG1iI/pgaAPOVK+WoBlfvBmgvWdkL47/Qg6APtqEOrwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPvuyQN2U5onajRTA/HEhhqrdUhOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvOTQyYjNlM2YtZWIzOS0z
MjUyLTk1ZWMtMDczMGMzYTYxNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgZ7wBCA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADpF7ZTOCxBMcp4zXgnxzTZlbFXcd/S2l9xfLbmHSWBdts1VV3Yc
e4SGFGju30ettcbOB5FBZzNCWJz7hLU/wKCTrdw3tZ9sd/TJUfEAxWvlR8907AAM
2lAqWZNRL8Ux6Gc5/VKqRCcBDitvSIFnMPwfqJjE9Nkc3/kXSXfWyWsDR08vRzRw
6m4NJd1xLNdIrk+6FelRSLN++glv3gsbnzRDCdaRX4Z96FLf0ejqcBSf/BrpwiwT
A7kv44kcSyr423Hy/H71a+T4owV7A5rROiTl0kkNCR26Xr78Fuyf1l5PPB4t+CBX
4i6KKfSpp0+mgnpg0qdoSz41TDRwVIt8cJo=
-----END CERTIFICATE-----
Generated at Thu May 2 04:23:59 2024 by rpki-client on console-fra.rpki-client.org