Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5cadd82e-9241-3240-8179-e001c6dec1b1.roa
File:                     5cadd82e-9241-3240-8179-e001c6dec1b1.roa (raw, json)
Hash identifier:          nM7sKksqcwyo0uAGbi6GSLLrLB/ZMNxwc57bYycTII4=
Subject key identifier:   3F:4A:C5:99:F3:30:90:DC:4B:CA:45:09:AB:00:C8:EC:4D:10:00:5C
Certificate issuer:       /CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b
Certificate serial:       010D0C9F43285844B2CA5D4BF3819E09E1A716C0
Authority key identifier: 56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5cadd82e-9241-3240-8179-e001c6dec1b1.roa
Signing time:             Sun 28 Jan 2024 02:00:26 +0000
ROA not before:           Sun 28 Jan 2024 02:00:26 +0000
ROA not after:            Sat 27 Apr 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        2606:7740::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:b2:ca:5d:4b:f3:81:9e:09:e1:a7:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b
        Validity
            Not Before: Jan 28 02:00:26 2024 GMT
            Not After : Apr 27 01:00:26 2024 GMT
        Subject: CN=c0f15c31-e285-4880-a539-8763c9864d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:42:65:6c:a6:53:6f:37:7e:7e:90:77:d9:01:
                    c4:ad:8e:ba:36:83:50:61:e1:02:86:4e:31:70:70:
                    86:7d:dd:1a:60:38:7a:5b:bc:b8:34:7c:b6:6c:0e:
                    bc:55:1b:ba:40:92:b2:34:d9:4b:15:36:db:2a:22:
                    9b:32:74:f7:3e:b0:7e:f5:39:93:53:75:ec:ac:20:
                    bf:9c:cb:7d:ac:63:f4:8b:0a:b6:f4:65:ee:0e:af:
                    6a:9c:d2:5d:12:15:f8:29:c2:55:2e:7c:1c:19:9e:
                    14:97:c3:ba:12:25:0d:e2:74:e5:fc:cb:5e:85:32:
                    9a:c7:9c:5d:22:62:db:07:68:bb:e0:dc:40:9e:79:
                    28:4d:73:6f:5c:a3:39:12:6c:33:b8:69:38:15:3f:
                    03:72:fc:58:26:01:5f:2e:e6:3e:bf:d6:e8:8a:c2:
                    84:13:50:09:c3:92:98:88:07:13:9e:2c:26:1f:69:
                    60:2f:36:50:cd:b8:9f:e2:33:0d:ba:3d:1a:f4:20:
                    cb:35:54:91:00:c4:d4:72:21:e4:93:1c:ba:e4:c6:
                    66:63:da:3f:e5:63:f3:36:10:61:1f:12:30:9f:d5:
                    cb:46:d6:42:3e:47:ea:84:6c:04:b0:0b:66:cd:c1:
                    cf:08:21:14:73:28:ef:7f:78:7f:cd:4b:6a:9a:fc:
                    13:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4A:C5:99:F3:30:90:DC:4B:CA:45:09:AB:00:C8:EC:4D:10:00:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5cadd82e-9241-3240-8179-e001c6dec1b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl

            X509v3 Authority Key Identifier:
                keyid:56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7740::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:82:5b:85:63:21:b5:78:df:97:43:19:dd:f8:12:97:ef:85:
         56:67:d2:e0:b8:ae:03:18:60:95:37:53:25:2a:30:af:cc:bb:
         86:7c:89:89:69:d2:a0:d3:62:f3:53:46:39:75:04:96:af:bd:
         58:a5:09:e2:56:8a:52:45:09:06:d4:c3:57:f7:f6:68:71:85:
         17:f0:a6:5b:8e:e3:0e:0d:ab:2f:51:92:7a:2c:d5:95:68:3d:
         e7:e2:93:77:7b:17:16:0c:78:5c:6f:cc:ca:05:a1:74:fd:67:
         75:f0:60:a0:e8:97:3e:75:3e:41:a8:74:91:0d:45:07:30:47:
         85:21:5b:45:15:e8:d4:f1:34:80:48:c6:96:6b:ab:76:9f:c0:
         c4:23:17:44:d2:f9:b5:49:68:c5:94:e2:9e:48:4a:6a:7b:ad:
         e2:3a:e7:d1:67:76:ec:46:35:a9:9e:af:24:d2:3e:87:e5:17:
         3f:1f:d0:c5:db:22:e5:6e:1d:6d:0c:4f:f5:fe:65:82:b7:d9:
         3c:8b:92:42:c6:ea:c5:e0:3a:c0:df:d3:95:02:6d:60:d3:c6:
         7a:54:ce:09:b6:85:8f:b2:5f:78:8e:1b:46:29:fc:bb:5c:ec:
         43:c1:65:ac:de:88:eb:b1:a2:21:92:2f:5f:f9:7e:82:ac:fb:
         23:1f:32:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 14:10:09 2024 by rpki-client on console-fra.rpki-client.org