Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3c58dacd-b17a-3904-a883-f1d2e402127c.roa
File:                     3c58dacd-b17a-3904-a883-f1d2e402127c.roa (raw, json)
Hash identifier:          lMB9mU0Gkdc7GB48bNZjPTRk3p/MfCTY7KCeqOPbrwg=
Subject key identifier:   EC:39:A3:AD:73:FF:C9:68:16:8F:66:FE:1A:6F:86:F5:9E:09:12:A6
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285849350EAB83028F3B44C4F53D18
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3c58dacd-b17a-3904-a883-f1d2e402127c.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     395831
IP address blocks:        2606:7bc0:1081::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:ab:83:02:8f:3b:44:c4:f5:3d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=ede9804c-eea1-4306-beb5-825b80473f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4a:81:bb:a3:82:5a:c6:f5:48:9f:55:64:65:
                    03:2e:36:8e:d6:47:99:15:2e:85:41:c9:0a:0b:0b:
                    7b:c2:b9:3e:36:1d:c9:39:c3:cc:c9:6c:0a:28:ff:
                    3c:04:cb:c6:dd:63:68:05:05:bf:9d:d1:dc:c5:6e:
                    c5:2c:37:92:46:c0:65:1d:95:09:fb:b8:ed:3a:98:
                    63:69:bc:9b:82:e6:29:a6:bf:32:b7:9f:b4:8b:20:
                    4a:8c:4f:dc:e1:c7:94:78:78:f6:38:28:96:f5:98:
                    96:57:93:33:80:36:8f:dd:c5:f8:94:93:27:fb:d9:
                    dd:d0:0e:1f:b9:5c:35:ed:13:46:61:02:89:63:52:
                    a9:0d:99:49:a2:1f:98:45:bf:52:c9:d5:e3:59:79:
                    b6:1e:ee:6b:19:20:8c:10:c4:ab:9f:24:95:d7:93:
                    2c:88:64:2e:44:b7:4a:5b:33:8e:9a:2d:5a:21:b2:
                    47:d9:6d:3c:d0:dc:42:c1:5f:87:9d:aa:51:70:37:
                    6c:28:38:54:cb:eb:56:b2:92:68:94:f7:78:b5:db:
                    4b:cc:e2:20:43:d1:6e:ca:1b:9c:70:db:86:08:6e:
                    1c:09:9e:ff:2d:e6:04:4c:9f:5c:90:8e:d5:0b:57:
                    9c:41:dd:49:13:d7:44:04:7b:63:e9:4f:4a:f6:5f:
                    58:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:39:A3:AD:73:FF:C9:68:16:8F:66:FE:1A:6F:86:F5:9E:09:12:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3c58dacd-b17a-3904-a883-f1d2e402127c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1081::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:cc:36:a3:ba:2b:9e:86:06:20:bf:6b:43:17:d6:f2:b6:f6:
         a5:1b:81:82:91:2f:9c:e2:eb:51:21:30:e9:86:5a:b8:72:83:
         59:cd:7c:6f:5a:c5:16:c4:2e:82:07:d5:a8:86:04:99:3e:02:
         d5:c9:76:d4:b3:26:46:af:fb:4d:e3:d0:94:e8:5a:c8:96:d4:
         51:b0:a2:0e:4c:f8:9b:9f:47:2c:d4:60:f5:2f:50:1a:81:f2:
         f6:d4:2d:51:ba:93:7e:ab:f2:39:df:d6:c3:89:e4:d2:25:8c:
         6f:c3:c3:c1:0a:2f:ea:af:dd:05:bf:74:ae:25:be:4c:b8:90:
         01:83:e4:b3:ad:46:15:4d:06:80:4d:33:01:f3:af:ca:2b:aa:
         89:76:4f:74:91:bf:99:90:20:d2:4e:23:6f:f8:9d:48:b7:e7:
         db:04:0d:b5:56:4b:00:db:f1:19:32:6d:e4:91:b3:dc:4b:f8:
         d4:ad:06:fb:b1:8d:93:8e:19:58:32:c6:33:de:e1:47:d8:88:
         01:99:2f:bc:47:73:b3:66:5f:85:0f:c0:46:ce:16:6c:9b:5f:
         49:47:bd:82:41:a3:80:69:f7:7e:44:7e:5a:36:d1:58:7b:bc:
         b0:69:55:24:79:d8:28:11:8a:61:fa:9a:2f:13:bb:29:af:fc:
         f8:fe:e1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:31:42 2025 by rpki-client