Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/26de12e6-55fd-3e2b-b6e2-aa6b10d4e73b.roa
File:                     26de12e6-55fd-3e2b-b6e2-aa6b10d4e73b.roa (raw, json)
Hash identifier:          tMUyjPvOpQzd8SqqpEFszKc79LbV1IK7tGlhY9TBBw8=
Subject key identifier:   25:FA:64:29:D4:97:71:4A:DE:98:84:92:7C:2D:2D:D9:E7:40:95:79
Certificate issuer:       /CN=d651f6e5-66de-4793-8c12-2261d5e62118
Certificate serial:       010D0C9F43285847EBBF7B9DDAF18C4036073F00
Authority key identifier: 02:93:6E:0E:A1:47:CA:5E:AD:54:25:C2:72:EA:78:EE:DA:C0:3A:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/26de12e6-55fd-3e2b-b6e2-aa6b10d4e73b.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     26721
IP address blocks:        2606:6380::/32 maxlen: 126

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/d651f6e5-66de-4793-8c12-2261d5e62118.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/d651f6e5-66de-4793-8c12-2261d5e62118.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:7b:9d:da:f1:8c:40:36:07:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d651f6e5-66de-4793-8c12-2261d5e62118
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=24a0bb21-1949-4307-a8ab-08fbbec5790a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:78:4e:ca:c7:09:d5:21:2d:06:0f:28:31:70:
                    a5:dc:ef:b6:af:81:0d:35:29:7a:03:3d:90:e6:03:
                    68:35:1a:49:8e:92:8f:24:8d:6c:00:cf:77:cd:1b:
                    fc:95:dd:df:98:a7:36:2b:79:3c:a0:57:4f:6f:27:
                    ba:48:fc:93:0c:6a:cb:6f:2f:1a:8f:e2:c7:6a:34:
                    56:52:7c:d4:d1:ff:3d:7b:96:c3:70:72:c5:e5:e4:
                    2c:af:c9:2e:e0:27:0d:1d:6f:8a:61:25:b0:14:ef:
                    2c:00:f0:2f:6e:48:6f:a5:3b:0a:f2:f4:25:64:f7:
                    13:13:f5:17:54:32:88:33:41:e0:ff:c2:62:e4:43:
                    36:96:36:97:43:48:1b:f5:fc:09:c0:76:b1:0d:81:
                    44:a3:e5:24:fa:e0:5e:a1:8e:af:e5:30:0c:1c:16:
                    43:e1:b8:98:42:30:91:2d:9e:b0:99:21:75:5f:53:
                    14:04:77:16:52:4e:cb:4c:4c:20:fb:2e:88:ff:55:
                    1c:82:ba:82:24:00:f1:1b:98:3e:a1:49:4d:53:6a:
                    0d:da:c5:5d:ee:a6:92:03:6a:f3:0e:11:ae:74:42:
                    f5:3e:9b:14:4b:b6:d0:0c:e0:d9:8c:28:4a:40:e5:
                    29:71:9e:1f:e6:c4:db:b4:f0:95:e5:93:c5:89:79:
                    bc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FA:64:29:D4:97:71:4A:DE:98:84:92:7C:2D:2D:D9:E7:40:95:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/26de12e6-55fd-3e2b-b6e2-aa6b10d4e73b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/d651f6e5-66de-4793-8c12-2261d5e62118.crl

            X509v3 Authority Key Identifier:
                keyid:02:93:6E:0E:A1:47:CA:5E:AD:54:25:C2:72:EA:78:EE:DA:C0:3A:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:1b:9c:e9:a4:01:1f:aa:db:eb:9b:52:32:8b:d3:fc:83:3d:
         3f:85:f3:f2:79:10:ca:5d:2d:49:7e:99:77:7a:7b:70:c2:30:
         f9:c1:aa:75:ef:91:fb:94:87:95:14:31:d7:75:d7:67:4e:ed:
         65:9d:7f:f0:b3:d6:23:c0:91:c8:52:ae:c0:9b:31:64:e9:75:
         f4:a5:ba:3a:03:12:48:dd:b9:15:f6:87:d2:f3:b7:ad:2d:8d:
         b8:97:44:9f:59:65:28:6e:c2:8c:31:67:7c:cb:0e:53:b2:c6:
         cf:94:d6:75:db:b0:58:99:de:b0:c9:65:05:04:06:9c:bd:ee:
         26:0e:c3:28:56:db:d6:29:31:58:74:66:61:86:6b:99:31:04:
         b6:0c:1a:67:26:d2:20:76:56:15:4d:8e:26:8c:9c:47:58:1a:
         12:7a:fd:2b:34:b4:69:88:28:4f:31:7b:02:85:90:80:7e:79:
         f2:b3:f7:fe:5a:9d:79:b0:46:6e:c3:f1:c7:75:c2:52:1b:c4:
         64:14:c7:e6:ca:e5:1b:46:b0:29:30:74:a4:e5:fa:55:db:77:
         b9:69:44:aa:26:15:24:f7:30:85:7c:54:1e:05:0c:a2:86:b1:
         5f:cd:72:cc:cd:df:a6:15:d9:93:4b:e7:1e:b4:39:f6:12:9a:
         1b:f1:66:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:13 2024 by rpki-client on console-fra.rpki-client.org