Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c04eae26-66e7-330c-8da9-b02ffb952def.roa
File:                     c04eae26-66e7-330c-8da9-b02ffb952def.roa (raw, json)
Hash identifier:          PjYKPjdrXwqWpbImowYNoG3d5hk6W4oFgQ+njz9kqXw=
Subject key identifier:   36:45:76:C7:72:BA:46:34:BD:15:36:55:04:3C:B8:9E:B6:9F:05:CB
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F43285845174ADDCCF7C785EA83CB2CA0
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c04eae26-66e7-330c-8da9-b02ffb952def.roa
Signing time:             Mon 04 Mar 2024 02:00:26 +0000
ROA not before:           Mon 04 Mar 2024 02:00:26 +0000
ROA not after:            Sun 02 Jun 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        2606:dc00:ff00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:17:4a:dd:cc:f7:c7:85:ea:83:cb:2c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Mar  4 02:00:26 2024 GMT
            Not After : Jun  2 01:00:26 2024 GMT
        Subject: CN=49f352e8-6894-454a-a291-0e6efc53f8d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:34:e3:7c:4a:a3:20:c4:22:50:9b:09:0d:7a:
                    a0:81:71:c5:e4:42:4a:76:bc:f2:5d:58:0e:b8:65:
                    49:76:d6:6c:6b:3d:5d:5c:21:3f:5b:62:25:c9:7d:
                    2d:75:58:c7:2b:45:67:92:31:fa:d9:d4:d1:8a:18:
                    92:8c:aa:f1:f3:ec:85:7e:17:eb:1f:05:65:4c:bb:
                    93:1d:45:4c:7f:15:18:9e:44:1d:13:db:4c:e6:c5:
                    be:1c:e5:a3:19:81:86:57:0a:74:46:a2:80:b5:1d:
                    25:18:50:8c:32:32:2b:3f:08:de:3d:27:ff:6c:af:
                    ed:c2:e4:03:f2:1b:ba:8f:66:90:91:80:35:33:54:
                    b9:87:b8:7c:01:c6:aa:c1:69:ba:a9:66:3c:ae:df:
                    5a:2a:92:af:f3:b0:12:b1:3b:a1:49:87:36:ab:19:
                    28:03:a7:78:23:6f:35:ce:b7:fe:42:24:1a:76:09:
                    b8:48:01:8f:8d:f7:50:b5:99:92:f0:79:19:b2:8e:
                    6b:fc:28:62:34:58:9e:e4:8a:92:8e:88:9f:f3:c1:
                    51:e5:fb:81:eb:14:a1:ec:6b:ce:65:09:80:8c:5a:
                    9e:b5:5d:9b:db:f8:09:40:8f:ce:75:dc:0b:f9:f6:
                    49:3d:c6:30:50:2c:c0:db:a2:3b:3f:e7:11:71:a5:
                    cc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:45:76:C7:72:BA:46:34:BD:15:36:55:04:3C:B8:9E:B6:9F:05:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c04eae26-66e7-330c-8da9-b02ffb952def.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:dc00:ff00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:a3:37:38:ce:07:55:8f:55:b0:c4:92:32:a0:61:ff:16:a7:
         f3:b1:d9:90:3d:7a:e8:77:db:2a:44:db:48:74:f0:fc:cc:e5:
         69:e5:22:41:a2:9e:b4:87:78:2d:e4:0e:5f:63:5a:d6:ae:54:
         9e:18:99:a1:6c:1e:f0:73:7c:f2:a8:e2:f9:d2:1d:cb:d1:2d:
         90:94:2c:24:f0:a8:75:52:0c:71:7a:7a:a8:c8:78:8c:68:e4:
         16:8a:6a:0b:14:85:6d:29:5f:00:f7:8b:3a:40:6c:36:d7:df:
         a8:a5:f7:a7:55:c8:30:29:23:8c:76:73:ca:cd:65:72:0d:45:
         1b:f5:2c:71:ec:db:a6:ea:a5:44:b9:2e:09:94:e6:1e:96:0c:
         ca:39:98:23:01:c2:1e:12:97:12:66:8a:3d:6e:e1:df:13:5b:
         19:a7:48:ac:bd:1e:86:c1:26:83:be:e7:86:fc:49:87:da:39:
         a0:cf:b1:7b:e9:e3:a2:7e:72:4f:fb:d4:db:d3:5e:86:7c:1a:
         e1:25:e1:a7:81:ab:d0:cf:13:93:4e:a1:3b:07:6f:09:75:0a:
         d8:7c:cb:41:8d:9f:6e:d9:d3:cc:7e:b7:42:3d:b7:63:5d:cb:
         df:55:ff:58:b9:ad:4a:c3:bc:14:dc:b8:95:6d:3a:15:fa:5c:
         57:1b:e5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:37:17 2024 by rpki-client on console-ams.rpki-client.org