Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/caf6984a-6241-341c-a03c-38c380834003.roa
File:                     caf6984a-6241-341c-a03c-38c380834003.roa (raw, json)
Hash identifier:          EJO2TXjAm5WIZTUlIAohvzedqUltYW4hO9WMqa/qjdM=
Subject key identifier:   E6:19:D8:CF:DB:C3:B7:3E:49:D4:50:8E:D4:75:3D:0C:77:45:8C:74
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285844F80ADCDCA80BF66FBC46D000
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/caf6984a-6241-341c-a03c-38c380834003.roa
Signing time:             Wed 21 Feb 2024 21:21:30 +0000
ROA not before:           Wed 21 Feb 2024 21:21:30 +0000
ROA not after:            Tue 21 May 2024 20:21:30 +0000
asID:                     395831
IP address blocks:        2606:7bc0:1065::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:0a:dc:dc:a8:0b:f6:6f:bc:46:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Feb 21 21:21:30 2024 GMT
            Not After : May 21 20:21:30 2024 GMT
        Subject: CN=c61847c0-0aff-46e5-a2d6-775d2695f58d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5c:3a:ce:27:28:12:38:07:b5:0e:2d:cd:a4:
                    08:11:c6:2a:ae:63:76:59:46:12:ba:6e:d5:2c:60:
                    0c:72:19:9a:5b:d5:2e:03:87:24:23:bc:ff:1d:7d:
                    7c:ab:25:fb:7e:1c:c4:91:e9:73:85:4b:e3:bc:7b:
                    3b:bc:75:d2:b1:08:6e:8b:ce:80:f5:ec:a7:3c:9f:
                    17:fc:a6:73:21:40:eb:45:e8:de:c5:13:c6:6d:5c:
                    2d:54:84:13:55:18:df:6f:66:13:82:c3:2a:bb:29:
                    47:83:ba:c0:6f:20:98:da:64:eb:70:77:25:8b:1a:
                    8c:ac:08:e7:3a:14:94:46:db:11:18:78:81:5a:b7:
                    d8:59:6f:d9:58:e4:6f:7d:d6:53:99:b7:b7:33:22:
                    db:fa:19:49:62:55:fc:4b:42:ee:2c:fc:f5:8f:b6:
                    95:5a:e5:cd:ce:4d:4a:e6:30:70:ea:00:49:9e:bc:
                    37:e5:b3:c9:e6:0b:f8:7f:86:70:9e:c5:59:2b:dd:
                    b6:f9:20:6d:f9:14:d4:a5:18:16:cf:a1:fc:1f:63:
                    ce:36:9c:16:d4:78:41:88:8c:ef:51:75:5d:cf:b3:
                    b7:5d:ac:96:e6:54:ae:15:b2:7e:5b:8d:e9:14:de:
                    fa:9c:54:28:ac:26:cf:7f:5f:be:63:03:99:53:12:
                    1f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:19:D8:CF:DB:C3:B7:3E:49:D4:50:8E:D4:75:3D:0C:77:45:8C:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/caf6984a-6241-341c-a03c-38c380834003.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1065::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:13:21:e8:06:0f:f2:60:a4:9e:92:83:b6:7a:ec:d9:21:72:
         ce:bc:75:87:f9:2c:c3:d2:8a:68:1f:2d:a0:24:1b:38:1c:f2:
         c3:8e:0c:0b:dc:b2:f4:1c:e7:bb:c9:dd:70:87:ac:81:26:50:
         dd:8d:7b:65:3c:39:bc:3e:ec:d3:00:c3:33:47:c6:a5:08:56:
         82:75:59:74:54:ad:0f:f0:9d:e0:66:99:ba:c4:56:a8:1e:90:
         3e:58:23:b3:b6:6a:b1:63:48:93:49:20:6b:a6:fc:c4:74:54:
         ca:4b:5e:6d:ea:8c:a2:bf:09:44:24:07:88:56:67:85:28:57:
         2f:65:29:bb:6c:b3:ce:a1:5b:55:82:64:3a:7d:5a:98:ae:37:
         a7:a5:6a:d5:9a:ae:98:22:ec:1c:d8:24:1f:cf:e4:7d:22:d5:
         cb:d1:4b:9e:ad:8c:55:1e:77:16:ee:09:62:d3:60:54:5a:14:
         e4:dc:25:f9:5f:20:f8:07:8b:00:4c:92:a8:45:b3:24:0d:62:
         7c:0c:29:a1:09:d4:31:41:d1:53:db:48:57:3c:a7:17:44:9f:
         35:d9:29:86:12:75:49:38:90:a5:53:af:54:97:02:d1:b7:38:
         51:92:d2:ac:27:42:db:50:52:a7:f6:63:cf:56:fc:45:83:78:
         1c:06:0f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:03:09 2024 by rpki-client on console-ams.rpki-client.org