Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/a33bf0b9-a50f-3ffa-8c15-01e47d6dd61c.roa
File:                     a33bf0b9-a50f-3ffa-8c15-01e47d6dd61c.roa (raw, json)
Hash identifier:          NITO1Bffw/WFHNnF/qGWrzZ70pSeO2zjv1dkE5t38CU=
Subject key identifier:   FC:F7:C2:EC:38:42:F9:81:AC:EC:F6:50:86:74:6B:A7:7E:46:4B:3C
Certificate issuer:       /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial:       010D0C9F4328584503C016ED888876E08D65E840
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/a33bf0b9-a50f-3ffa-8c15-01e47d6dd61c.roa
Signing time:             Mon 26 Feb 2024 02:00:26 +0000
ROA not before:           Mon 26 Feb 2024 02:00:26 +0000
ROA not after:            Sun 26 May 2024 01:00:26 +0000
asID:                     398395
IP address blocks:        2606:fc40::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:03:c0:16:ed:88:88:76:e0:8d:65:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
        Validity
            Not Before: Feb 26 02:00:26 2024 GMT
            Not After : May 26 01:00:26 2024 GMT
        Subject: CN=7e0a5582-6963-422b-ba07-d00bf7782eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ba:4b:0b:3a:03:e1:18:43:24:87:73:f6:73:
                    ff:f2:e9:f8:59:40:9b:c5:12:45:b0:fd:6c:7b:27:
                    99:3c:a4:8e:8e:12:a1:1f:b5:57:c9:f9:f7:df:5f:
                    e7:b2:52:ec:d1:df:56:26:d0:0a:79:04:dc:8a:a4:
                    0e:9f:2b:95:31:73:57:ec:6b:bc:bc:25:4d:4a:1f:
                    1b:2d:26:ae:57:7e:fc:e2:04:37:b8:45:f1:99:d0:
                    c5:37:04:e9:43:56:b4:5f:32:26:ff:f8:16:83:47:
                    3c:9a:7f:f2:e7:9a:a5:07:51:0a:94:f5:62:5c:47:
                    f9:43:ae:bb:a6:1a:07:bf:04:c5:ae:8f:26:63:19:
                    38:9f:8b:20:4f:16:77:da:45:d3:c6:90:58:a8:f9:
                    49:0f:c0:5a:ba:9a:b0:d5:25:e7:da:2f:ea:c4:6e:
                    e2:4a:e1:e5:c2:2d:cb:ca:4b:cf:39:6d:b1:83:0f:
                    bf:5e:ee:65:c1:3c:ca:fa:11:db:9d:77:c3:22:4c:
                    cc:ff:17:44:f2:3b:6a:9f:a5:7d:30:c4:d7:17:14:
                    a7:ac:0f:c4:4b:5d:62:79:63:b1:83:7c:51:70:dd:
                    97:43:dd:6e:87:67:58:9e:e6:a1:d1:0a:1b:7e:a1:
                    e7:07:b3:29:00:74:57:fb:21:8c:5f:0c:10:3b:ea:
                    e4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F7:C2:EC:38:42:F9:81:AC:EC:F6:50:86:74:6B:A7:7E:46:4B:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/a33bf0b9-a50f-3ffa-8c15-01e47d6dd61c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fc40::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:c4:91:ed:d9:86:9e:6a:30:32:ee:28:c3:4b:09:db:77:8d:
         87:56:03:62:75:53:a8:63:c1:9a:89:81:02:84:5c:e7:21:ff:
         2a:61:e2:a8:ef:0b:2d:70:4a:15:52:a7:e1:27:e3:59:f0:de:
         c5:da:ab:35:8f:c7:39:79:c0:b6:10:2d:14:0c:df:75:22:52:
         c9:2a:24:8a:8a:2b:28:02:fc:1c:cb:a5:89:23:c6:c5:b9:47:
         05:c0:2e:26:59:36:a7:de:a6:f2:b0:6d:2d:16:3e:a5:0f:c5:
         78:80:dc:46:a7:e7:db:54:c5:04:60:1e:c1:6c:f9:89:12:67:
         34:15:78:75:92:43:16:74:cb:ef:69:01:9c:d1:c2:00:e5:1e:
         f1:ea:b9:e4:f4:98:b7:51:87:0a:8b:4c:bc:1c:f8:06:27:1c:
         05:65:1e:cf:d3:18:de:04:03:37:67:71:10:e3:17:0c:47:de:
         28:67:7b:ff:b8:0b:e2:6e:82:83:5b:c8:25:75:52:5b:ad:62:
         8f:de:27:31:14:b7:85:07:19:7d:17:75:dc:02:96:84:98:2b:
         cd:b6:79:36:3e:c9:2d:bd:78:a0:7d:36:5e:ea:2d:a3:b4:4c:
         ab:42:12:c9:44:a3:eb:91:b0:4e:c8:6f:67:52:59:8b:32:bb:
         2a:f2:a5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 14:34:51 2024 by rpki-client on console-fra.rpki-client.org