Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/2689cc5e-73a4-3934-b73d-56b59b54c522.roa
File:                     2689cc5e-73a4-3934-b73d-56b59b54c522.roa (raw, json)
Hash identifier:          RRmEw65F5HLr+8XWSklQL6+Vvrvx8+Z8O1cxWlneWyU=
Subject key identifier:   0C:93:F4:6B:ED:1B:D2:F2:A0:D3:C9:8C:0D:CD:E2:FB:98:19:7B:C3
Certificate issuer:       /CN=c66b7cab-031d-4c4c-8595-19848efd3058
Certificate serial:       010D0C9F432858477230ED76DEB3940247A0D700
Authority key identifier: B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/2689cc5e-73a4-3934-b73d-56b59b54c522.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     400339
IP address blocks:        2606:ab40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:ed:76:de:b3:94:02:47:a0:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66b7cab-031d-4c4c-8595-19848efd3058
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=abb591a6-1d70-4777-9036-5c98e6cffdfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:df:af:a1:33:e0:99:0e:01:5a:b4:9a:23:6d:
                    a1:d1:9b:5e:69:b7:dc:48:43:77:fa:47:e1:15:f5:
                    c6:aa:fe:e3:85:c9:32:51:48:b4:56:19:78:b1:09:
                    56:0e:04:c1:33:94:7f:c9:2e:8f:3d:3a:d6:13:67:
                    0c:d4:1f:fc:bd:44:42:39:36:3b:f5:e7:a6:f9:80:
                    eb:25:d6:53:6e:c8:9a:bb:32:e9:3d:00:db:17:4a:
                    c5:55:c3:b2:10:00:92:d0:94:ab:d7:33:06:66:ff:
                    6d:20:06:82:e2:d7:85:0e:d0:27:8e:7f:9e:74:15:
                    b6:c0:51:77:34:92:0d:fe:58:dc:b4:05:be:73:68:
                    67:32:fd:d0:92:41:4e:0b:77:fc:c6:be:5f:39:b0:
                    fc:00:e2:d1:82:68:54:ab:10:48:f8:ce:69:81:d1:
                    54:53:00:00:2e:ba:ea:1c:b5:95:47:bb:6c:c4:de:
                    4b:17:35:7c:b1:14:13:da:9e:75:3f:d4:b5:10:77:
                    3b:5b:8a:4a:b6:da:e3:9a:4e:da:42:78:99:20:24:
                    e8:a4:48:6f:23:94:29:91:b3:c7:63:c4:b7:a9:ce:
                    cc:53:ae:fc:1d:09:50:11:29:5c:ef:09:7b:22:18:
                    03:55:df:5a:1b:db:fb:e6:c3:6f:c5:cf:e8:c5:01:
                    8b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:93:F4:6B:ED:1B:D2:F2:A0:D3:C9:8C:0D:CD:E2:FB:98:19:7B:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/2689cc5e-73a4-3934-b73d-56b59b54c522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.crl

            X509v3 Authority Key Identifier:
                keyid:B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ab40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:a0:1d:13:7a:44:b7:d5:0d:c3:c9:7e:9a:b0:81:ad:f4:7a:
         11:9f:a5:9a:b9:2c:dd:22:49:4a:19:42:a8:6a:92:b2:fa:d4:
         86:cc:c4:57:1b:96:cd:ef:03:4a:cd:29:6c:1d:05:23:84:bb:
         0f:5c:6c:42:a0:fb:c0:6c:eb:83:f4:95:9b:4f:bc:8f:61:4f:
         da:0c:59:ce:cc:47:74:6b:6f:ce:30:67:b6:21:c1:10:cc:e2:
         50:5b:b1:5e:c6:60:fb:1d:03:71:c5:89:4f:06:6d:a4:c2:39:
         92:35:1a:e3:c7:22:6f:81:9c:fa:cc:95:76:1c:4f:25:7f:2e:
         a5:a0:4e:33:ff:a6:53:ec:8d:07:ae:b2:64:7c:b9:37:c8:9c:
         13:b6:ae:a2:7f:26:20:1a:fb:a1:99:60:60:89:b2:22:3f:d2:
         8c:ad:3c:dc:b7:7e:b9:7d:12:ad:66:46:f7:70:79:95:b5:b6:
         63:93:d8:8e:81:af:80:97:ba:32:3b:3d:33:41:df:73:0a:08:
         e5:e3:58:3f:55:b3:24:77:53:b9:48:44:92:d9:65:10:08:6f:
         9f:f3:f3:35:a3:9d:df:ed:74:93:48:5f:6f:ae:dc:86:6d:e2:
         be:95:4f:18:57:fc:fa:12:d9:dc:5f:63:5f:d5:d5:d1:ee:f8:
         1e:5a:26:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:25 2024 by rpki-client on console-fra.rpki-client.org