Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c075a41-a878-494c-804f-5abe30d80284/40b52c26-48e4-3577-8675-6cb223ee78aa.roa
File:                     40b52c26-48e4-3577-8675-6cb223ee78aa.roa (raw, json)
Hash identifier:          Yfk26YJzzRxC+r8cLSZ1ud8AB+As5U1KOh/Lb1uB6Sk=
Subject key identifier:   C7:54:C1:39:72:FB:9F:A0:F7:98:52:2B:2A:80:B0:C0:1E:55:72:EF
Certificate issuer:       /CN=5c075a41-a878-494c-804f-5abe30d80284
Certificate serial:       010D0C9F43285846EB57B4E6B91E9C4374227C80
Authority key identifier: EA:E3:66:50:14:7E:B9:8B:6D:53:74:2D:52:02:15:62:C3:EA:8E:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c075a41-a878-494c-804f-5abe30d80284.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c075a41-a878-494c-804f-5abe30d80284/40b52c26-48e4-3577-8675-6cb223ee78aa.roa
Signing time:             Sun 18 Aug 2024 17:44:42 +0000
ROA not before:           Sun 18 Aug 2024 17:44:42 +0000
ROA not after:            Sat 16 Nov 2024 18:44:42 +0000
asID:                     21738
IP address blocks:        2607:cd40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c075a41-a878-494c-804f-5abe30d80284/5c075a41-a878-494c-804f-5abe30d80284.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c075a41-a878-494c-804f-5abe30d80284/5c075a41-a878-494c-804f-5abe30d80284.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c075a41-a878-494c-804f-5abe30d80284.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:eb:57:b4:e6:b9:1e:9c:43:74:22:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c075a41-a878-494c-804f-5abe30d80284
        Validity
            Not Before: Aug 18 17:44:42 2024 GMT
            Not After : Nov 16 18:44:42 2024 GMT
        Subject: CN=1563572a-c022-4188-8248-77afff2d0ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d1:7c:99:c8:ce:92:e4:52:72:79:f1:06:a7:
                    f1:60:d2:d7:94:0f:e8:27:57:e2:93:22:7c:fd:b3:
                    78:90:36:4c:ac:cd:d6:06:32:6d:a2:01:13:f6:e2:
                    bf:d2:2b:bb:f5:33:8e:e2:fb:57:77:1f:ae:51:39:
                    59:12:0d:48:0b:b1:47:eb:d8:4e:c8:7b:20:42:13:
                    3d:d5:b5:29:5e:95:68:42:cf:46:7d:85:df:a9:98:
                    ab:bc:c7:9e:cc:ca:61:3f:a6:03:1b:23:6e:db:c3:
                    2c:81:a6:d5:a0:a4:64:1f:cc:89:71:42:f5:b3:3d:
                    24:c5:4e:27:97:eb:aa:89:80:41:2f:e4:fc:bf:52:
                    a7:bc:87:d4:a9:c3:96:db:6c:f1:3d:ba:8b:c8:74:
                    db:13:69:44:d2:88:79:98:c6:58:8a:ce:1f:a0:58:
                    25:17:82:67:94:41:23:cc:ed:3c:d9:76:ed:82:b1:
                    82:30:5d:3b:19:99:9a:3c:74:eb:ae:5c:b1:d8:f3:
                    3c:60:12:15:13:03:68:23:4d:6b:60:87:d3:de:b4:
                    08:61:67:15:36:34:9c:69:cb:61:f3:ef:88:46:79:
                    be:6c:2a:e1:c6:b0:b5:4a:e9:ff:6c:a6:d8:6e:ec:
                    03:92:15:3c:9d:e8:b8:ba:45:be:98:dd:f7:eb:2a:
                    6c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:54:C1:39:72:FB:9F:A0:F7:98:52:2B:2A:80:B0:C0:1E:55:72:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c075a41-a878-494c-804f-5abe30d80284/40b52c26-48e4-3577-8675-6cb223ee78aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c075a41-a878-494c-804f-5abe30d80284/5c075a41-a878-494c-804f-5abe30d80284.crl

            X509v3 Authority Key Identifier:
                keyid:EA:E3:66:50:14:7E:B9:8B:6D:53:74:2D:52:02:15:62:C3:EA:8E:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c075a41-a878-494c-804f-5abe30d80284.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cd40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:9c:e7:5d:8c:b5:6c:e6:1c:a6:f0:2d:77:a9:75:22:14:c9:
         dc:f4:3a:55:ae:f7:4e:f5:e7:f4:2b:66:8f:3e:71:80:38:ba:
         5a:a1:3d:87:9c:be:61:c8:d8:00:c9:e2:d4:6f:fd:f8:75:30:
         05:74:ef:d3:4c:70:bb:bb:8d:90:71:ff:29:a2:c5:b8:95:10:
         48:64:4c:33:84:5e:b7:aa:1c:5d:30:9a:1d:56:af:fd:41:a1:
         d3:64:b8:5f:74:fd:bd:b2:9f:13:52:73:a2:03:b4:9e:d9:e2:
         c6:d8:3f:93:57:d7:cb:1a:92:ee:fc:8f:20:01:d0:0f:db:16:
         d0:f7:2f:aa:f6:e7:c7:fa:f1:a6:d4:46:86:f2:6e:e2:49:7d:
         ca:6b:ae:0b:0e:d2:bd:58:df:29:2e:8c:ed:e1:87:7d:bf:05:
         69:8b:f2:11:dd:a1:2b:51:9c:1b:bc:91:b1:7a:d6:7d:9b:9f:
         19:9e:e3:bd:ec:92:75:1e:ef:d6:68:03:6e:f4:29:8e:27:73:
         43:83:3c:44:80:05:0e:25:b0:98:ab:fd:0b:65:5f:d2:7a:ae:
         c9:ce:d8:29:74:bc:b4:3d:9a:3c:32:53:39:8b:b0:62:de:74:
         13:c0:52:17:b7:75:1f:57:33:a2:28:6e:e9:6d:8a:95:00:bc:
         a6:19:4b:02
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEbrV7TmuR6cQ3QifIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWMwNzVhNDEtYTg3OC00OTRjLTgwNGYtNWFiZTMwZDgw
Mjg0MB4XDTI0MDgxODE3NDQ0MloXDTI0MTExNjE4NDQ0MlowLzEtMCsGA1UEAxMk
MTU2MzU3MmEtYzAyMi00MTg4LTgyNDgtNzdhZmZmMmQwYWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdF8mcjOkuRScnnxBqfxYNLXlA/oJ1fikyJ8
/bN4kDZMrM3WBjJtogET9uK/0iu79TOO4vtXdx+uUTlZEg1IC7FH69hOyHsgQhM9
1bUpXpVoQs9GfYXfqZirvMeezMphP6YDGyNu28MsgabVoKRkH8yJcUL1sz0kxU4n
l+uqiYBBL+T8v1KnvIfUqcOW22zxPbqLyHTbE2lE0oh5mMZYis4foFglF4JnlEEj
zO082XbtgrGCMF07GZmaPHTrrlyx2PM8YBIVEwNoI01rYIfT3rQIYWcVNjScacth
8++IRnm+bCrhxrC1Sun/bKbYbuwDkhU8nei4ukW+mN336ypsSQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMdUwTly+5+g95hSKyqAsMAeVXLvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81YzA3
NWE0MS1hODc4LTQ5NGMtODA0Zi01YWJlMzBkODAyODQvNDBiNTJjMjYtNDhlNC0z
NTc3LTg2NzUtNmNiMjIzZWU3OGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWMwNzVhNDEtYTg3OC00OTRjLTgw
NGYtNWFiZTMwZDgwMjg0LzVjMDc1YTQxLWE4NzgtNDk0Yy04MDRmLTVhYmUzMGQ4
MDI4NC5jcmwwHwYDVR0jBBgwFoAU6uNmUBR+uYttU3QtUgIVYsPqjhUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81YzA3NWE0MS1hODc4LTQ5NGMtODA0Zi01YWJl
MzBkODAyODQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfNQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBhnOddjLVs5hym8C13qXUiFMnc9DpVrvdO9ef0K2aPPnGAOLpaoT2H
nL5hyNgAyeLUb/34dTAFdO/TTHC7u42Qcf8posW4lRBIZEwzhF63qhxdMJodVq/9
QaHTZLhfdP29sp8TUnOiA7Se2eLG2D+TV9fLGpLu/I8gAdAP2xbQ9y+q9ufH+vGm
1EaG8m7iSX3Ka64LDtK9WN8pLozt4Yd9vwVpi/IR3aErUZwbvJGxetZ9m58ZnuO9
7JJ1Hu/WaANu9CmOJ3NDgzxEgAUOJbCYq/0LZV/Seq7JztgpdLy0PZo8MlM5i7Bi
3nQTwFIXt3UfVzOiKG7pbYqVALymGUsC
-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:11 2024 by rpki-client on console-fra.rpki-client.org