Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/efecd37b-b85c-330f-a2a8-5abf025d13d8.roa
File:                     efecd37b-b85c-330f-a2a8-5abf025d13d8.roa (raw, json)
Hash identifier:          +fjpd+Z4Vk1EkuIqXkaZGv7U+2mG7DZTs5jSBgIqTek=
Subject key identifier:   3C:3F:56:D4:8E:E5:1C:BB:14:FA:07:96:A6:DB:1A:73:DD:46:F2:D2
Certificate issuer:       /CN=8ce84fb2-c539-46e7-8212-12b9730afeba
Certificate serial:       010D0C9F43285844EECFFB58DA67E1BBC4B54F80
Authority key identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/efecd37b-b85c-330f-a2a8-5abf025d13d8.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     22773
IP address blocks:        2606:8940::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:cf:fb:58:da:67:e1:bb:c4:b5:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ce84fb2-c539-46e7-8212-12b9730afeba
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=cad8bf2a-7d6d-4174-8fe4-a7509ac39f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:50:f9:41:81:77:84:dd:85:fe:a7:49:13:33:
                    cc:a9:29:95:02:d1:89:fa:d3:d5:99:31:73:fb:ee:
                    f0:c1:39:72:07:8a:61:d5:dd:a1:e5:17:ba:e9:87:
                    e0:73:83:06:f9:5b:39:37:1e:b4:9e:88:56:9c:27:
                    e7:09:3d:0b:6e:a9:43:20:86:f6:f4:7d:68:a1:d1:
                    93:9a:22:16:7e:04:4d:ae:2f:3d:93:e0:a8:c2:92:
                    19:75:56:4d:6e:08:59:de:7b:8a:c4:0c:ce:d3:55:
                    3e:e3:71:69:6d:43:9b:c3:0c:78:1a:ec:02:f9:fa:
                    e6:93:2a:89:11:91:78:98:10:e2:f4:c7:b7:1a:ba:
                    81:c3:e1:06:f4:27:db:f4:67:06:9e:28:0c:74:6b:
                    64:72:92:6b:35:97:65:01:48:60:84:aa:03:7b:3c:
                    a6:b3:8b:5f:2d:17:72:5f:45:7b:50:4a:f3:9d:00:
                    ab:ff:f1:04:44:6c:02:8b:dc:a4:a4:49:d0:e2:1d:
                    47:33:ae:dd:5b:c9:55:c9:ae:45:c3:c9:6e:74:e9:
                    55:6e:38:f0:4a:9d:d5:09:4e:15:3c:e7:93:19:e0:
                    38:79:39:12:d7:3d:c5:d2:05:2d:88:69:92:f6:0e:
                    4b:0b:46:1c:6f:46:4d:25:36:43:71:d8:54:b4:f4:
                    26:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3F:56:D4:8E:E5:1C:BB:14:FA:07:96:A6:DB:1A:73:DD:46:F2:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/efecd37b-b85c-330f-a2a8-5abf025d13d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl

            X509v3 Authority Key Identifier:
                keyid:D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:b7:de:d9:1d:1b:2d:36:4c:c2:1d:04:f6:54:36:b9:d0:0a:
         6e:8f:2a:48:3d:f7:18:92:a7:59:a3:fb:84:ab:b4:e6:0f:ee:
         b4:ea:7b:a5:0a:58:fc:1a:fd:0e:cd:c1:35:56:75:22:b5:37:
         a8:cf:37:7d:33:e5:e1:d7:e4:14:46:d9:5e:96:ac:26:b2:76:
         6c:cb:7f:e1:e6:02:fa:b0:22:09:c2:00:50:3e:71:9d:45:15:
         da:32:66:aa:54:f8:ee:a2:d1:67:7c:43:5c:15:b2:27:0c:26:
         66:31:bc:99:51:13:45:cc:13:0d:66:7c:2e:5a:b8:c1:76:5d:
         ac:13:a9:ea:01:91:cb:ac:f9:07:de:a7:3d:a2:d6:e1:f6:b9:
         4f:d3:4d:b6:47:60:f7:55:25:4d:19:73:12:cf:c2:7a:76:9b:
         1d:fe:d8:79:b3:1c:95:58:4f:ff:d7:28:45:d0:b6:73:0c:18:
         cd:a9:2b:13:84:74:e9:94:b4:c8:36:2c:85:7b:bd:c4:23:33:
         c1:43:1f:b2:6a:43:2b:0c:2f:fd:46:68:69:8a:08:0b:b9:fc:
         0d:db:dc:d0:b1:43:8e:63:c9:0b:61:f0:e9:8b:dc:10:ae:95:
         25:fb:61:d4:30:43:0e:53:d8:51:49:6b:66:bb:96:e4:e5:c2:
         a6:9b:cb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:42:37 2024 by rpki-client on console-fra.rpki-client.org