Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/5a1d5b79-1df9-33b0-90be-40aaad8e80cc.roa
File:                     5a1d5b79-1df9-33b0-90be-40aaad8e80cc.roa (raw, json)
Hash identifier:          KhU5YHkDgWTta4B8VjjiFbqOU+L8JlKyZVTn9eTn52o=
Subject key identifier:   CF:E2:7D:DB:37:6B:CA:EA:D6:41:77:ED:ED:0F:85:5E:D9:14:C3:F7
Certificate issuer:       /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial:       010D0C9F43285847CE6F3F2B11CE326B4A6ED500
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/5a1d5b79-1df9-33b0-90be-40aaad8e80cc.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     26042
IP address blocks:        2606:fc40:4004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:3f:2b:11:ce:32:6b:4a:6e:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=c692c511-f77e-42a2-8f55-02965705c471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7b:7b:26:c8:92:c5:e8:c1:66:ef:0f:18:76:
                    06:24:40:53:10:7f:a8:13:15:41:70:c6:9d:3a:b9:
                    c1:be:5e:11:8f:94:34:a9:5a:52:e2:12:ed:b7:48:
                    9b:33:ce:5e:99:46:a8:9c:7f:a1:98:29:a8:0c:13:
                    fb:4a:e6:6e:4d:72:4a:3a:d4:27:90:05:a7:6b:c6:
                    37:c2:20:a0:25:b4:f9:28:85:0c:3e:2e:6a:b1:7a:
                    06:36:e5:4e:8a:f8:46:a3:4e:dd:79:5d:ea:92:be:
                    30:21:e5:e2:63:3c:81:69:38:c0:9b:77:5a:67:0b:
                    c5:e2:a9:4e:63:02:2c:2e:45:c3:d2:a1:10:f2:10:
                    b3:45:4a:c7:60:cf:cd:33:8a:d8:f8:fa:35:60:df:
                    68:34:95:bd:4a:48:9f:8f:8c:f7:65:78:9a:53:d4:
                    5d:fc:0f:6a:e2:11:40:a4:71:58:c6:c1:f9:ce:c1:
                    17:10:35:16:23:17:81:ce:5c:b9:22:98:31:a0:16:
                    b6:0c:6c:65:f5:34:18:2c:71:23:3b:15:7f:c0:fc:
                    24:b6:1c:46:ad:80:99:f3:6c:80:10:00:8a:97:13:
                    48:10:a6:a6:f3:9b:c4:b4:9d:6e:92:e8:50:ab:4b:
                    65:d3:c2:4a:55:d4:e6:60:33:5c:6b:04:cb:15:de:
                    4a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E2:7D:DB:37:6B:CA:EA:D6:41:77:ED:ED:0F:85:5E:D9:14:C3:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/5a1d5b79-1df9-33b0-90be-40aaad8e80cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fc40:4004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:db:89:b1:70:cf:b1:76:1d:22:8a:0f:b1:4f:fe:c3:67:8c:
         6d:35:76:e1:50:a1:e2:c8:3c:08:53:25:4a:18:06:07:8c:37:
         f3:b9:fe:7a:ed:34:5e:af:36:e6:0b:74:df:2f:4f:7e:3f:65:
         21:51:cf:ec:5b:e0:0b:2a:03:47:27:b3:e5:2a:43:3c:d2:ea:
         ca:2b:05:cd:d8:39:7c:d9:0b:36:56:81:9c:19:1c:84:67:d9:
         7e:02:9b:02:ca:94:91:4e:8f:f2:0b:f1:98:f4:e7:8c:5c:69:
         9e:6a:f8:d2:63:d1:d2:f1:70:1d:88:66:e0:b9:5f:f6:a6:c3:
         58:aa:16:eb:f7:c7:cb:33:93:32:94:35:01:1c:1b:56:75:c5:
         a5:a6:48:8a:b6:39:95:01:7e:b2:3b:3e:38:79:c5:7c:fb:82:
         87:46:f5:95:15:ce:68:ea:36:20:26:c6:d0:e1:35:96:3c:27:
         95:70:ad:78:61:14:b1:67:b9:20:0b:8c:3c:5f:df:36:f2:ef:
         8d:e8:e4:2a:17:34:a6:d2:0d:5f:88:91:1b:d1:6f:a5:6a:0c:
         0b:4e:1f:f1:03:51:9b:98:be:75:0f:24:ca:0f:83:e7:0a:01:
         2d:02:93:55:93:d6:a3:cb:38:b2:a3:16:2e:70:db:68:9f:e2:
         4e:37:d5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:47 2024 by rpki-client on console-fra.rpki-client.org