Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c57888f9-f62d-32aa-9fdf-58d6ae2cdb38.roa
File:                     c57888f9-f62d-32aa-9fdf-58d6ae2cdb38.roa (raw, json)
Hash identifier:          pfRtQP5HaWkoaUNKmhj0criVx4SzYHEGLupWSj2Uxxc=
Subject key identifier:   73:4E:D6:63:EB:7A:14:56:B1:56:33:EB:FA:0A:3E:92:E2:70:B0:27
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285845B4E8D74E4456A3C74A57DAE0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c57888f9-f62d-32aa-9fdf-58d6ae2cdb38.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     395831
IP address blocks:        2606:7bc0:1090::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d7:4e:44:56:a3:c7:4a:57:da:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=152793f5-303d-4537-a933-89ba4d1b0ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:db:37:02:f4:ee:70:c7:8f:54:c4:37:cf:1d:
                    99:c5:85:7e:52:0d:8b:7b:0e:11:67:35:fb:d2:b4:
                    0d:88:a0:a6:fa:db:fa:0e:c9:a5:65:8a:f0:88:3a:
                    19:6a:45:49:08:a1:f7:10:0e:50:f9:a5:86:00:f2:
                    cc:ba:17:cd:e0:00:bc:ff:e8:1b:19:74:a3:fb:91:
                    ce:59:90:c4:d8:d4:a4:dd:0f:3f:24:b6:0a:37:80:
                    89:85:9e:38:63:cf:03:d4:89:8b:0b:03:fd:6c:0c:
                    3f:6e:6a:cf:b2:d5:c0:2a:af:e9:8d:39:ce:9b:d7:
                    2e:79:83:37:69:4a:5e:f0:c2:d1:f1:5d:5a:bb:9a:
                    76:6b:2b:52:cd:2d:54:88:71:0b:95:2d:81:aa:c0:
                    10:94:87:46:ca:8e:a4:bb:17:be:1f:08:54:8f:c7:
                    f2:2e:30:31:35:e8:58:5f:61:e6:00:e2:b3:22:8c:
                    1c:c4:c2:27:1f:4e:66:3c:ea:12:ca:48:2c:52:9f:
                    bf:5f:6a:54:c0:d2:bc:32:8f:e1:e3:bd:9e:0f:2a:
                    69:d7:59:7d:59:48:12:cc:a6:68:79:46:33:a7:da:
                    8f:a8:0a:d1:4d:e4:eb:67:e0:df:38:38:85:b9:8d:
                    be:39:0d:3b:c5:07:99:53:46:91:07:2f:fb:b3:c7:
                    19:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4E:D6:63:EB:7A:14:56:B1:56:33:EB:FA:0A:3E:92:E2:70:B0:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c57888f9-f62d-32aa-9fdf-58d6ae2cdb38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:1b:33:06:fa:67:80:c6:24:b1:2d:bb:4f:e7:5e:ec:30:4b:
         90:e8:b1:b5:e0:43:b0:8a:f3:95:f5:1a:c7:fe:02:4d:b9:da:
         de:77:f6:00:b9:9a:f4:c8:3c:e4:94:ce:8d:ed:e9:3b:48:3f:
         d5:18:fc:a0:d6:f3:73:33:bf:89:49:2f:f9:6c:d9:99:b4:33:
         07:f7:a0:d1:1a:1e:05:39:36:37:84:8d:dc:f9:7b:83:ea:0e:
         a1:4e:cf:41:f8:45:db:2e:f9:9a:c0:7d:01:3a:f4:04:21:7b:
         2a:9d:57:53:c8:ed:1f:34:52:97:57:a8:d8:e1:a5:0d:94:4f:
         e9:c8:f0:96:6b:4c:7f:3f:4f:fe:08:e0:56:04:bc:9c:dd:0e:
         8d:1e:c6:33:6b:7d:4f:ed:c0:fa:98:d7:a1:74:a0:1e:b6:a9:
         95:4d:ba:41:1a:d6:cd:29:7f:6b:b0:ad:1c:12:31:9a:cb:04:
         18:f2:da:0a:67:01:b2:96:cd:97:b0:16:62:93:cf:88:28:71:
         df:83:c0:d3:13:01:99:56:d6:f2:50:a4:48:d7:a4:33:2c:e6:
         28:d9:6c:89:7d:af:28:b9:9f:0b:28:28:c9:30:d6:0c:91:1d:
         62:fb:ce:a3:fd:8c:ef:e5:4b:1e:b0:ab:5a:17:86:e1:3a:30:
         6c:6a:4d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 11:39:14 2024 by rpki-client on console-fra.rpki-client.org