Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/6f6fc695-efec-3c3e-a710-280bba97cc39.roa
File:                     6f6fc695-efec-3c3e-a710-280bba97cc39.roa (raw, json)
Hash identifier:          RbPKgzaDqXoI35k92L++77iAGRkbeFAqz3OECUBDYno=
Subject key identifier:   26:77:C0:A3:D2:E0:85:59:36:58:FD:A7:FA:AA:D0:ED:37:06:E6:4A
Certificate issuer:       /CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa
Certificate serial:       010D0C9F4328584855D59EFE382C5E370A7ADA80
Authority key identifier: DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/6f6fc695-efec-3c3e-a710-280bba97cc39.roa
Signing time:             Thu 26 Dec 2024 14:00:52 +0000
ROA not before:           Thu 26 Dec 2024 14:00:52 +0000
ROA not after:            Wed 26 Mar 2025 13:00:52 +0000
asID:                     399587
IP address blocks:        2604:3540::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:55:d5:9e:fe:38:2c:5e:37:0a:7a:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa
        Validity
            Not Before: Dec 26 14:00:52 2024 GMT
            Not After : Mar 26 13:00:52 2025 GMT
        Subject: CN=aece51c6-88e8-4ae2-ae9c-0c257df9860b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:05:b4:33:4b:a1:33:4d:f1:f5:d9:d1:29:
                    1f:3f:8f:e5:d6:6f:fa:84:b6:6d:fc:ca:64:d1:18:
                    a6:3d:cb:bc:b6:62:72:b6:ae:ae:f0:11:f9:ec:34:
                    5b:e2:00:3c:56:10:04:7e:6b:33:42:5a:61:bb:a9:
                    ab:15:a6:23:27:c7:49:42:2d:56:95:c2:02:32:e7:
                    2a:12:6f:f5:93:de:b4:cf:eb:13:2b:55:bf:90:1a:
                    89:8d:9e:d1:cc:42:9f:df:22:0c:eb:13:91:9c:fc:
                    3f:79:8b:48:b2:4b:94:8c:21:9f:1b:39:29:7a:7b:
                    1b:45:5f:7d:2a:45:8f:20:37:20:39:df:aa:57:b4:
                    42:f5:67:83:94:44:c3:93:22:e4:0d:85:84:77:74:
                    6e:f1:a8:7b:79:2e:5d:72:08:9a:c4:9c:f1:cc:ea:
                    e5:ea:8b:8b:c5:db:a1:10:ed:c9:a4:77:67:bf:68:
                    be:68:d2:fb:7d:e0:f3:dc:06:4a:c4:5e:2c:c7:b3:
                    59:ee:e1:0a:df:99:98:06:d9:00:fa:87:b4:87:91:
                    58:f4:d7:7c:ee:a2:b3:4d:f7:18:d4:45:a5:3b:df:
                    6e:64:d9:ac:aa:2b:01:46:09:5a:0c:48:f3:27:ac:
                    74:f9:fe:15:23:f4:93:f3:79:bf:7e:4b:31:cc:a2:
                    04:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:77:C0:A3:D2:E0:85:59:36:58:FD:A7:FA:AA:D0:ED:37:06:E6:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/6f6fc695-efec-3c3e-a710-280bba97cc39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.crl

            X509v3 Authority Key Identifier:
                keyid:DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3540::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:04:50:e4:35:69:b8:4b:64:58:d6:b2:eb:8e:bc:9e:d1:ef:
         5b:92:65:38:19:20:27:c3:8a:9f:92:b5:8e:00:bb:ad:0a:26:
         22:ca:d2:8c:c2:25:9f:de:fb:22:31:db:f8:c1:c2:e6:cb:dc:
         e0:77:07:0d:cb:4e:23:ef:b1:a2:78:0d:07:6e:47:68:2a:05:
         fb:96:7c:b1:f5:c8:de:d8:e2:77:9f:85:ea:eb:ad:7b:e6:59:
         2c:be:a2:ae:f9:06:8b:47:9d:ef:78:ff:a2:bb:c2:87:de:8a:
         74:ee:34:6f:60:2c:a9:6b:70:01:e6:22:67:44:1a:a0:c3:f7:
         a5:b6:38:1f:50:f9:48:ee:9b:64:da:f6:39:6a:bc:ea:85:84:
         50:a0:30:e3:f2:ba:ed:27:ba:70:13:68:88:fc:c2:3f:48:c5:
         0a:a6:0a:f9:7c:a3:ca:18:91:b9:48:d0:75:b9:f9:d0:87:bb:
         58:cd:df:11:cf:e0:7f:a4:44:dd:4f:62:a0:8f:89:14:1f:97:
         53:a3:33:73:54:63:da:86:d9:a0:9d:ba:a5:e8:a1:0d:f5:ac:
         be:e1:aa:ad:d6:b7:68:42:11:01:4a:4b:ff:1c:ad:3d:17:9d:
         ad:25:df:30:99:6e:c8:30:7d:44:af:c3:61:ff:53:76:e9:34:
         44:b6:37:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:10 2025 by rpki-client