Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/d7c0a3e5-ce7d-36ad-b1be-ece4e08b6d54.roa
File:                     d7c0a3e5-ce7d-36ad-b1be-ece4e08b6d54.roa (raw, json)
Hash identifier:          dIEPZFLMG5B8NoxDSchtkszSnXadHGDfuuzLBYkmejc=
Subject key identifier:   8A:47:CF:1D:E3:0F:2F:3B:D3:33:7A:EA:0E:FD:E0:0D:09:EC:37:61
Certificate issuer:       /CN=58eef8b8-39c9-495c-b889-44faff13a8aa
Certificate serial:       010D0C9F43285845E729287AFBCD1D93C32EB860
Authority key identifier: DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/d7c0a3e5-ce7d-36ad-b1be-ece4e08b6d54.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     397016
IP address blocks:        2606:aa40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:28:7a:fb:cd:1d:93:c3:2e:b8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58eef8b8-39c9-495c-b889-44faff13a8aa
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=2fd37be3-e884-45a7-bd87-fceaf3260211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:68:6a:5b:55:f9:f2:30:49:1b:61:06:8c:
                    b6:bf:c5:65:cb:04:b2:a6:d0:45:2f:7b:36:53:1b:
                    b0:f7:3d:df:b6:d7:f0:04:41:2c:99:2c:d0:9d:4e:
                    97:17:a4:a5:89:c9:99:67:92:9d:fd:f2:39:3e:b0:
                    3c:94:30:2b:75:ef:ed:5f:36:f4:a3:97:37:87:aa:
                    98:5b:37:de:71:b4:6b:e3:ba:0c:a0:95:03:99:82:
                    09:59:aa:23:cc:2f:99:df:b4:0c:b2:8d:86:3f:81:
                    c6:d2:a4:e2:c8:55:1a:c5:d6:41:23:30:c4:ef:50:
                    80:21:73:b0:a5:e9:7c:b2:7a:80:b4:79:54:18:d0:
                    5a:a5:a7:da:7a:ad:70:94:9e:1e:95:a4:88:c9:3c:
                    e9:1c:5c:56:4b:2c:8b:40:f4:bf:2e:03:e2:82:8c:
                    4a:e2:06:c4:0b:0c:ae:e9:45:f1:35:64:4b:21:44:
                    03:50:ee:a4:ef:49:5c:36:e9:e4:f8:31:5a:5f:d5:
                    cb:de:6d:80:23:c7:ff:3a:38:c8:fe:f7:c3:b5:ca:
                    1b:fc:9d:50:b9:92:10:b4:a4:d5:91:d5:5e:a6:9e:
                    5e:96:ef:90:03:66:dc:d9:b8:a7:99:f7:8b:39:26:
                    e0:79:22:92:fd:e0:c0:b6:57:a1:78:29:a6:2f:85:
                    3c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:47:CF:1D:E3:0F:2F:3B:D3:33:7A:EA:0E:FD:E0:0D:09:EC:37:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/d7c0a3e5-ce7d-36ad-b1be-ece4e08b6d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl

            X509v3 Authority Key Identifier:
                keyid:DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:aa40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:6e:fb:e0:83:d7:47:89:5c:6c:24:d9:56:cc:26:85:ac:9d:
         35:a1:f4:0b:9b:19:f8:7f:64:97:37:11:a5:0d:70:96:0a:39:
         bc:33:db:c8:39:d5:96:02:f7:dd:76:fe:78:a2:69:3f:d8:89:
         db:d7:01:bb:7b:a8:14:dc:3a:72:74:fd:1e:41:f7:2d:2d:6a:
         6d:f3:be:43:1a:be:58:ad:29:fb:b3:32:89:f6:39:6d:d9:ce:
         51:2c:28:09:a2:36:4f:b8:be:de:1b:84:7f:ab:83:63:4c:42:
         4f:15:49:14:47:36:30:d6:68:fd:fa:4b:5d:06:d1:7f:0c:4c:
         93:4d:59:2b:46:35:22:9f:c8:3e:61:75:b2:51:65:46:ec:84:
         85:0f:76:23:18:4b:db:73:9e:a2:25:18:35:d4:50:77:27:4d:
         74:50:38:0e:cb:40:89:dd:0a:75:7e:0c:bf:62:bc:c9:7e:b7:
         e2:76:3a:92:92:1a:fb:a1:a4:aa:33:99:d5:2e:f9:69:08:be:
         58:5a:11:cc:4c:c0:e9:3c:3e:95:d3:33:f5:29:37:4e:0f:6a:
         38:85:3c:cc:d2:1d:45:00:e9:c2:48:20:ff:03:9a:a5:96:99:
         62:bf:be:38:b7:b4:ef:82:6e:2d:c8:bb:5e:0f:dd:7e:11:3c:
         b1:75:e3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:07:11 2024 by rpki-client on console-ams.rpki-client.org