Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d6789155-86b1-3972-a062-f4fb620bc8a4.roa
File:                     d6789155-86b1-3972-a062-f4fb620bc8a4.roa (raw, json)
Hash identifier:          /H+krFvhHAgUkhmZ21FtyTal8aFGTMGG7gZryQCH9RI=
Subject key identifier:   BB:C9:EA:FB:78:55:65:DC:CE:3B:E1:12:50:19:08:82:84:B9:BA:75
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285845B7B3887B951AEC07B2CAC3E0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d6789155-86b1-3972-a062-f4fb620bc8a4.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        2606:7bc0:1080::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:88:7b:95:1a:ec:07:b2:ca:c3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=f0324f73-3dd8-437a-a3a0-15e034ee69cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0c:c4:44:3f:03:03:ef:4e:34:cc:6b:50:91:
                    69:2a:1d:33:32:cc:8a:5c:7d:28:e6:05:51:fa:78:
                    05:9d:c5:73:17:86:32:f1:f0:dd:9e:9d:db:38:5e:
                    7e:d7:21:f5:42:02:1c:8d:00:60:70:a7:c3:38:68:
                    a4:04:de:12:a0:4a:a0:a1:3e:71:57:e3:19:46:a6:
                    29:9c:41:83:d0:0c:a3:86:ab:e3:aa:4b:f0:59:5e:
                    4e:f7:c3:3c:dc:e1:04:85:37:b8:22:b0:ad:c9:11:
                    72:22:ff:19:03:f6:3a:1d:52:16:72:98:25:9c:84:
                    cb:78:f1:70:92:4b:b6:51:4c:9c:95:bc:d8:05:cc:
                    15:41:81:45:f7:52:56:f0:07:45:4d:6b:dd:83:9e:
                    b8:d7:ca:1a:7d:9b:1d:04:15:b6:3f:71:14:51:51:
                    dd:a7:68:df:1c:11:46:a5:7b:35:64:1b:c0:ca:b1:
                    0d:02:59:33:f4:3d:2b:00:a3:1f:c6:ad:93:1a:18:
                    69:98:ed:c6:a3:f1:85:a2:32:46:25:f2:64:9a:1d:
                    fa:3e:a6:37:56:62:9f:d2:a1:82:56:66:7a:b1:37:
                    5e:fe:8b:01:3a:08:1b:35:c8:b9:21:27:03:b8:c7:
                    d9:cc:31:99:8d:c8:15:77:ab:1f:02:eb:c9:d1:d1:
                    89:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C9:EA:FB:78:55:65:DC:CE:3B:E1:12:50:19:08:82:84:B9:BA:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d6789155-86b1-3972-a062-f4fb620bc8a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1080::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:77:d7:4b:d9:76:2c:ac:3d:46:23:98:6b:8c:fd:4e:50:11:
         6b:14:cb:8e:00:3c:df:6c:c0:e5:aa:00:98:66:c6:91:18:ce:
         d9:cc:a0:60:1a:40:79:8b:be:f9:46:60:e7:59:10:36:d6:b0:
         19:26:50:26:73:4c:33:f8:83:3f:1e:48:9c:da:45:8b:5a:b6:
         e6:c0:fb:3e:22:4b:51:0d:72:a0:a3:d7:8e:e9:ce:d3:e9:1a:
         6e:62:51:ce:2b:7d:a0:51:06:df:13:6f:d5:a2:e7:42:2a:63:
         84:c9:4d:56:a8:cb:60:72:92:b1:2b:3e:b6:04:98:97:5e:bc:
         a8:d7:23:5a:14:8f:02:af:e2:3e:8a:49:bd:01:0b:0e:2b:94:
         1c:f0:ff:5d:99:73:d1:92:ae:39:d7:28:fc:f8:fa:80:a0:b7:
         19:48:f0:36:c6:bc:f2:eb:8d:d3:2e:a8:a0:43:bb:ce:d1:93:
         35:bb:e0:c7:2a:1c:5b:e8:49:fd:d1:74:84:3b:18:8d:4f:0e:
         29:c5:a5:f1:91:ce:fb:e2:c3:53:7e:d4:2a:ff:41:6e:b2:47:
         87:14:ff:69:02:13:a6:5d:88:be:7b:f3:3e:b7:f2:b3:04:b8:
         75:e6:04:e3:45:d1:f0:7e:67:fc:cf:eb:d9:d3:8e:f9:c7:a1:
         b4:d6:98:a0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEW3s4h7lRrsB7LKw+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI0MDQzMDEzMDAzNFoXDTI0MDcyOTEzMDAzNFowLzEtMCsGA1UEAxMk
ZjAzMjRmNzMtM2RkOC00MzdhLWEzYTAtMTVlMDM0ZWU2OWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwzERD8DA+9ONMxrUJFpKh0zMsyKXH0o5gVR
+ngFncVzF4Yy8fDdnp3bOF5+1yH1QgIcjQBgcKfDOGikBN4SoEqgoT5xV+MZRqYp
nEGD0AyjhqvjqkvwWV5O98M83OEEhTe4IrCtyRFyIv8ZA/Y6HVIWcpglnITLePFw
kku2UUyclbzYBcwVQYFF91JW8AdFTWvdg56418oafZsdBBW2P3EUUVHdp2jfHBFG
pXs1ZBvAyrENAlkz9D0rAKMfxq2TGhhpmO3Go/GFojJGJfJkmh36PqY3VmKf0qGC
VmZ6sTde/osBOggbNci5IScDuMfZzDGZjcgVd6sfAuvJ0dGJ7wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLvJ6vt4VWXczjvhElAZCIKEubp1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvZDY3ODkxNTUtODZiMS0z
OTcyLWEwNjItZjRmYjYyMGJjOGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBCA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGB310vZdiysPUYjmGuM/U5QEWsUy44APN9swOWqAJhmxpEYztnM
oGAaQHmLvvlGYOdZEDbWsBkmUCZzTDP4gz8eSJzaRYtatubA+z4iS1ENcqCj147p
ztPpGm5iUc4rfaBRBt8Tb9Wi50IqY4TJTVaoy2BykrErPrYEmJdevKjXI1oUjwKv
4j6KSb0BCw4rlBzw/12Zc9GSrjnXKPz4+oCgtxlI8DbGvPLrjdMuqKBDu87RkzW7
4McqHFvoSf3RdIQ7GI1PDinFpfGRzvviw1N+1Cr/QW6yR4cU/2kCE6ZdiL578z63
8rMEuHXmBONF0fB+Z/zP69nTjvnHobTWmKA=
-----END CERTIFICATE-----
Generated at Sun May 5 15:46:45 2024 by rpki-client on console-ams.rpki-client.org