Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/262e2d2e-8603-33d3-9a00-e06501b05b17.roa
File:                     262e2d2e-8603-33d3-9a00-e06501b05b17.roa (raw, json)
Hash identifier:          hXDtNoiCArz8G8x7rTCrLKuYKjF2bgu3hEiRDmeOD+s=
Subject key identifier:   C5:FD:D0:C7:B2:B5:00:A5:E0:EC:27:97:FC:86:28:81:99:1E:39:1F
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285845B4E8D6F2A9040A0DD4DD8480
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/262e2d2e-8603-33d3-9a00-e06501b05b17.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     395831
IP address blocks:        2606:7bc0:1060::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d6:f2:a9:04:0a:0d:d4:dd:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=874b54f9-2c6e-40dd-8e47-34ebfa37518a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:eb:09:1c:b4:05:3d:25:4b:b7:0f:38:89:
                    e2:98:ce:a7:76:bd:25:33:14:19:27:b9:5f:3a:f2:
                    41:da:62:b5:1f:a9:27:66:e4:02:78:40:e8:eb:a1:
                    90:85:70:0f:1e:4c:0f:eb:e4:9e:a6:75:a7:23:4a:
                    52:95:28:a5:58:2d:82:ed:54:de:1f:86:62:3f:d2:
                    6c:84:b3:b7:ba:70:fe:dd:c6:4c:bd:a2:bf:63:2e:
                    4a:ec:85:11:98:af:e2:66:aa:df:61:c0:96:c7:e7:
                    3c:24:d4:35:36:21:dc:3f:bc:af:89:e8:22:53:22:
                    73:5c:6b:52:ed:33:48:3c:1f:ec:54:7a:e3:1d:9f:
                    43:62:c9:94:ec:67:7f:d3:69:92:63:75:3f:52:cd:
                    ec:4a:6b:89:9f:2f:d0:81:e0:30:45:6f:b6:31:dd:
                    65:ea:4d:59:18:21:13:e0:08:92:29:6d:bd:d5:4f:
                    cd:75:bd:c1:d3:d7:3f:5d:73:0c:54:db:79:e6:2e:
                    20:b8:a4:79:c4:e2:6f:3c:38:79:11:80:20:d0:e2:
                    49:bd:db:d3:d9:fb:e5:ee:f4:98:66:94:0d:2a:79:
                    9e:3e:a2:56:7d:85:af:d8:bb:15:51:3e:3a:62:62:
                    6d:3f:09:50:98:3a:04:0b:58:c4:42:b3:98:41:c9:
                    66:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FD:D0:C7:B2:B5:00:A5:E0:EC:27:97:FC:86:28:81:99:1E:39:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/262e2d2e-8603-33d3-9a00-e06501b05b17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1060::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:87:ba:a3:17:b2:70:af:6b:26:34:23:9e:14:a8:cc:07:01:
         64:54:f1:38:fa:69:1d:78:8b:58:c9:af:f9:18:80:58:a4:47:
         f5:67:ac:82:84:af:2e:0d:fe:b8:0b:d0:b2:b3:e5:03:8c:ad:
         76:14:13:e3:cd:b1:4a:81:7b:6b:c8:c6:6d:a2:88:a5:22:16:
         c6:ac:5b:bb:93:93:04:ec:c7:ee:da:b6:2d:05:64:c3:32:5e:
         a3:f9:b7:20:80:15:d6:27:85:6b:82:53:d8:91:37:70:cc:93:
         aa:af:de:53:f3:c3:3c:d2:3e:bd:10:d9:52:49:56:79:c0:fb:
         b4:68:23:c0:0f:67:43:f9:71:d1:d2:f5:13:b2:3d:5c:f2:c8:
         cb:74:7b:a8:18:4d:2d:16:76:07:a6:e7:96:b3:42:95:9d:79:
         02:07:fb:71:a7:42:00:65:8e:6d:e7:33:bd:77:16:29:27:c2:
         7e:f2:99:e9:b3:4f:c5:34:99:17:aa:47:ca:af:8a:cc:cf:e0:
         50:fc:91:dd:87:2e:72:60:e5:c9:86:10:44:25:3e:48:97:9e:
         aa:bd:d4:fb:e4:0e:43:74:d2:fd:8d:21:61:94:19:3c:a4:b3:
         15:a7:c0:c9:91:ad:bb:93:4f:2c:3c:dc:3c:60:e9:bb:af:c6:
         31:55:58:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:03:09 2024 by rpki-client on console-ams.rpki-client.org