Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cbfb1fb3-6662-3691-a60d-1e84526c4ea0.roa
File:                     cbfb1fb3-6662-3691-a60d-1e84526c4ea0.roa (raw, json)
Hash identifier:          apy8k3a0cnpu0xQCYAVLIWOYrK7hkY7yyhC3279P3P8=
Subject key identifier:   CA:11:4E:9C:AC:4E:80:C4:11:84:32:1A:57:AF:27:12:0B:97:0A:E2
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285845B4E8D6C7DE36B79B694C0100
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cbfb1fb3-6662-3691-a60d-1e84526c4ea0.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     14618
IP address blocks:        2606:7bc0:1060::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d6:c7:de:36:b7:9b:69:4c:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=b973305c-2d0e-4100-99f8-0f04705b4498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3d:92:46:8a:d1:17:3f:a2:e6:f4:59:0d:6c:
                    05:17:1f:1d:2a:90:9b:7c:d0:d0:03:ac:8c:df:9f:
                    8a:8c:ed:f0:c0:d8:07:00:db:0f:1c:c7:0b:7a:06:
                    f2:84:cc:29:c0:c2:4f:cf:99:a4:de:09:36:60:78:
                    3a:ff:3c:6b:7a:c4:b7:78:a6:e7:d4:6b:29:67:6f:
                    b9:86:87:c6:2c:79:e6:15:f5:d2:82:19:75:04:0e:
                    ce:10:f0:e4:e2:83:82:e6:1e:52:09:c3:af:e7:50:
                    58:f7:c0:b6:5b:a2:41:14:9d:87:c2:c2:f3:b8:2d:
                    3e:c0:99:ec:07:3c:b4:09:36:66:43:28:ff:6d:2b:
                    51:eb:ca:85:1a:b5:18:76:1e:ca:9b:dc:87:64:05:
                    1d:dc:b4:fa:98:6c:fe:32:b1:ca:96:30:80:be:3e:
                    b7:50:dc:dd:79:4f:0a:63:40:b2:f4:08:a4:fe:f3:
                    db:92:7f:8b:18:56:52:1d:f6:fe:c4:fc:52:d2:6d:
                    69:12:fe:b1:34:17:97:6d:85:62:f6:a8:2c:a0:a2:
                    41:64:5f:2a:be:82:b4:38:2f:46:ed:bb:ed:8b:13:
                    87:df:10:2e:e8:87:1d:ba:4e:ba:72:bd:41:88:13:
                    03:ce:74:2d:2a:d7:45:21:91:40:f6:5b:f7:55:b8:
                    71:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:11:4E:9C:AC:4E:80:C4:11:84:32:1A:57:AF:27:12:0B:97:0A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cbfb1fb3-6662-3691-a60d-1e84526c4ea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1060::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:d2:ab:48:32:ec:9a:f9:3c:38:49:b3:80:8f:11:8b:4b:d4:
         d4:66:42:7f:f9:50:cb:6b:45:73:3c:74:75:ec:bc:40:d5:93:
         cc:6b:e5:61:aa:1f:f8:98:bc:81:44:52:5e:cb:cf:fd:91:76:
         bf:a8:fd:ef:a6:52:79:66:e4:a2:cd:a8:1b:ef:67:68:3d:11:
         2d:85:95:1b:31:c5:2b:a3:43:4d:c1:39:d4:3a:44:a4:1e:1d:
         06:c8:03:12:63:55:0f:9a:1c:96:4d:ab:00:e6:22:31:2e:a9:
         1d:1f:e0:d4:91:f5:c8:73:4e:53:be:4b:a7:6b:9e:96:a7:39:
         b1:27:83:c4:da:b2:4a:fd:93:f5:19:c3:3f:56:f3:b1:e2:fc:
         7e:14:f7:81:1e:b2:02:16:d5:19:8f:b0:16:e7:f2:ac:b3:33:
         c7:89:73:89:e2:96:58:3d:84:5c:51:6d:ed:2d:64:25:b6:2d:
         b7:18:b1:96:ae:1b:da:54:b4:69:45:67:e0:ee:fb:65:10:d1:
         ad:c4:49:d7:b0:83:84:04:66:16:b4:69:15:bc:e8:d6:8a:b8:
         d8:41:51:d7:2b:4f:d3:4c:66:45:f4:ac:d4:8c:d1:f3:65:99:
         4d:ea:f6:6a:bf:36:d6:00:a4:66:54:a1:eb:22:be:80:2c:10:
         2c:61:99:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:23:59 2024 by rpki-client on console-fra.rpki-client.org