Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/13d3d209-306d-30fb-b006-0cf3524201ad.roa
File:                     13d3d209-306d-30fb-b006-0cf3524201ad.roa (raw, json)
Hash identifier:          7dtFbZLIWkZeCJNnCE2nVG+U7IQqRR8G9LHO/De4h/U=
Subject key identifier:   CF:6D:FC:59:14:D9:0E:18:3E:8A:C1:74:90:2C:F0:5D:61:6A:99:70
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285845B7B388FEC9F7D4916CBDC400
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/13d3d209-306d-30fb-b006-0cf3524201ad.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        2606:7bc0:1090::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:88:fe:c9:f7:d4:91:6c:bd:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=4d485222-b28d-4352-81f1-8f8201b91f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:65:96:6c:91:32:58:59:5e:cd:85:0c:7b:97:
                    c3:91:f7:60:e6:2d:2e:1d:e5:04:f4:e5:c0:5b:1b:
                    94:b7:d1:15:57:b9:41:12:a2:6e:90:af:a1:23:07:
                    c1:2d:64:de:b1:0b:91:fa:7a:44:57:b1:d3:21:15:
                    80:01:5b:00:22:33:dd:76:2f:24:46:39:c3:1d:38:
                    e6:ff:4b:ac:15:43:6e:8f:4a:4b:1b:bf:73:29:8a:
                    24:bb:95:f4:4e:b0:ee:0a:11:e1:54:13:b2:fc:0c:
                    b9:04:fa:6f:59:6c:25:1d:49:86:b1:24:1a:d7:61:
                    ec:30:c9:ab:ba:7b:f0:7e:7f:69:cd:38:e5:d8:00:
                    74:95:cc:3d:f1:01:3e:55:41:b4:12:58:35:28:b2:
                    d7:bf:1b:17:e3:da:56:eb:03:b7:cc:de:2e:c3:50:
                    c6:5b:e6:78:bf:08:20:93:bf:0d:bf:df:a7:97:01:
                    24:c3:58:6b:eb:d5:db:f9:89:f6:6b:aa:0b:52:05:
                    d8:c3:74:bb:59:e9:5b:dd:6c:8f:0a:aa:44:c2:d2:
                    10:fd:90:78:24:1c:e9:36:25:00:91:5b:01:30:ca:
                    1c:f3:99:0b:51:72:88:f0:bd:ca:e0:ff:25:40:f7:
                    ac:f7:80:01:45:b1:ed:d8:63:ee:7f:a4:b2:21:f7:
                    58:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6D:FC:59:14:D9:0E:18:3E:8A:C1:74:90:2C:F0:5D:61:6A:99:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/13d3d209-306d-30fb-b006-0cf3524201ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:fb:12:34:c2:4c:cf:6d:e7:19:e9:aa:58:06:48:8d:b8:f0:
         f0:e4:36:10:fb:36:07:9b:21:95:72:e3:c6:5b:5b:2a:0f:60:
         12:c1:1b:fe:01:7f:cf:3f:8d:56:3b:43:48:01:87:a7:73:dd:
         31:7b:92:a6:5e:5c:f7:79:78:b7:c5:56:2a:51:7b:ee:7f:d1:
         7c:35:b7:4e:c4:68:3d:e0:50:ba:31:17:ce:6b:0f:42:cb:79:
         4c:b8:eb:ee:42:ad:8e:49:ba:19:6d:94:2a:3d:c7:61:89:6b:
         ec:cf:aa:0b:59:58:40:a9:39:b9:74:6e:c9:e0:c5:bc:cd:e4:
         c0:37:e4:4d:9f:00:cf:97:6f:b3:44:47:87:04:8c:51:58:1a:
         a4:a4:9b:5d:1d:42:83:fc:c2:98:b2:a5:b5:9e:d7:77:bc:f2:
         19:e7:6b:59:81:72:49:a2:8d:31:5c:9d:bf:e7:83:83:c5:8f:
         45:2d:94:38:d7:5f:42:36:54:0e:02:d2:81:35:f5:df:45:ad:
         96:83:a6:b0:55:58:3f:6b:4a:98:7e:03:6f:78:b2:9e:ba:6e:
         9b:8c:b2:57:65:7e:e8:42:c7:25:30:29:60:52:08:ae:29:86:
         9e:45:e3:e5:16:65:c6:9c:aa:26:e3:1e:31:8c:50:9b:0b:50:
         bf:9c:34:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:53:29 2024 by rpki-client on console-fra.rpki-client.org