Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3c58dacd-b17a-3904-a883-f1d2e402127c.roa
File:                     3c58dacd-b17a-3904-a883-f1d2e402127c.roa (raw, json)
Hash identifier:          a1tFT2zGe8aobxRIkZVHteCLjUD70mQPwQmPsXLM7UE=
Subject key identifier:   79:0E:D5:9F:DE:FA:01:E8:78:F6:89:13:D8:7E:95:3F:07:C1:45:D2
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285845B7B388CF14D3FD4074F3B240
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3c58dacd-b17a-3904-a883-f1d2e402127c.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     395831
IP address blocks:        2606:7bc0:1081::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:88:cf:14:d3:fd:40:74:f3:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=04b86508-6ba7-4536-9d17-efd680624b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:56:9a:5b:14:72:c3:0f:08:d9:91:4d:08:14:
                    86:d8:a4:cd:ae:98:b2:ce:38:0d:2a:c2:45:24:cb:
                    26:2e:9d:ab:77:f1:1a:49:34:f4:d2:9b:c8:98:4a:
                    21:e6:86:db:ba:ad:e9:48:3e:03:22:d8:bb:f7:de:
                    a1:30:06:29:82:3d:f0:6e:6e:84:3a:9f:07:c7:45:
                    3a:76:15:02:71:cd:1e:36:11:80:95:5b:05:08:8b:
                    fd:1d:15:8a:31:f1:b1:28:3d:a7:82:c1:8b:4b:70:
                    05:cb:a0:99:4a:52:d5:8a:f8:dc:21:4c:4e:90:16:
                    98:96:0e:2a:fa:bd:7a:94:13:74:c1:fb:e9:56:ba:
                    46:d1:41:8e:54:c7:d9:eb:75:03:e2:64:7a:eb:c7:
                    4a:b8:f3:71:45:c8:f5:51:37:94:c7:b3:c6:49:cb:
                    70:70:d3:c5:d4:b0:72:ed:d7:73:7f:bf:ce:67:ff:
                    3e:80:5c:72:72:cb:8c:85:7c:77:d5:54:97:e6:be:
                    62:8c:71:a5:cd:5c:e6:29:0f:48:fd:77:84:70:e1:
                    5f:37:18:e2:c3:e4:3c:6b:ae:60:cd:2d:d0:84:ff:
                    9e:dc:94:81:7c:97:1e:e8:4d:62:3d:bd:7b:66:5b:
                    ce:3f:0b:e5:16:35:68:2c:03:3a:bd:5e:c1:78:13:
                    c9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0E:D5:9F:DE:FA:01:E8:78:F6:89:13:D8:7E:95:3F:07:C1:45:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3c58dacd-b17a-3904-a883-f1d2e402127c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1081::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:d5:46:c8:47:3c:d6:7b:88:39:73:97:bd:11:29:67:22:a2:
         ef:76:76:69:26:ea:bd:23:d6:f1:83:98:d5:64:13:61:0c:d3:
         24:a6:56:4a:5f:3a:51:32:a3:3b:f8:2e:22:d1:c4:b2:72:93:
         12:d5:8b:bc:e6:47:71:0b:a2:48:ad:0b:e6:21:c4:bb:de:83:
         e8:11:f4:23:56:97:07:82:ed:8c:8f:8f:91:d9:64:05:fa:e1:
         63:68:1f:c5:f2:81:07:de:c0:a6:0b:94:4c:ef:59:a1:54:6f:
         31:12:c0:f6:c8:e9:a5:28:58:2e:7f:b5:91:b9:bf:3c:7f:01:
         52:8f:5d:f7:04:dc:ca:b3:c3:b7:9f:11:f3:63:28:7b:63:f0:
         3f:21:b7:a2:89:1f:98:0d:af:3d:2a:e4:31:77:95:87:fb:06:
         66:10:40:6c:0b:c6:5a:f2:88:55:9a:ad:09:4b:09:d6:4a:0f:
         2c:ac:ee:d0:1f:cd:6d:1d:8a:95:a0:46:f6:3c:b6:bc:28:27:
         7e:cc:62:71:8e:18:94:5f:16:ef:9b:28:06:c2:4b:ba:c2:ca:
         a1:43:6b:e6:7f:6f:80:18:00:fc:09:bc:81:be:e9:a9:61:44:
         91:c9:a3:11:8b:f3:2d:5a:94:32:63:c0:52:65:44:b4:e0:d2:
         05:74:b2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:33:45 2024 by rpki-client on console-fra.rpki-client.org