Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c625fd72-037d-34e0-acb3-3db086a6a8b9.roa
File:                     c625fd72-037d-34e0-acb3-3db086a6a8b9.roa (raw, json)
Hash identifier:          0UrD14a8PvXFna6HZaf0HaFCUjYjHF4X1TWlU8gEiLM=
Subject key identifier:   1A:A9:4C:D8:09:01:5A:9B:C1:3D:2F:44:B3:D3:F8:12:F2:FC:7E:BA
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285844F80B0E95BDF8F8D32B931500
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c625fd72-037d-34e0-acb3-3db086a6a8b9.roa
Signing time:             Wed 21 Feb 2024 21:21:53 +0000
ROA not before:           Wed 21 Feb 2024 21:21:53 +0000
ROA not after:            Tue 21 May 2024 20:21:53 +0000
asID:                     14618
IP address blocks:        2606:7bc0:1065::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:0b:0e:95:bd:f8:f8:d3:2b:93:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Feb 21 21:21:53 2024 GMT
            Not After : May 21 20:21:53 2024 GMT
        Subject: CN=152de484-820a-436f-8470-2022273529da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:54:2d:0b:2f:c1:0b:ae:a0:f6:6e:84:4c:50:
                    9b:15:b0:da:46:c3:3f:89:37:f3:ab:2c:0e:4e:fe:
                    0e:42:db:83:f0:1a:01:b5:47:5b:66:f8:d1:83:b9:
                    0c:3b:66:72:20:e0:a5:e3:ea:fe:65:71:70:ef:c6:
                    f2:cc:b9:71:a6:a1:42:6a:59:ea:5a:7f:53:e4:a0:
                    18:47:9a:bd:1e:00:95:8b:79:b0:7a:50:15:04:f6:
                    ed:4f:c8:0a:d1:a0:93:6e:a0:6d:ed:43:c2:4a:4f:
                    63:7f:33:76:cf:c6:ca:20:26:97:40:7a:6c:cc:82:
                    4b:21:8e:65:89:75:b4:ac:49:d6:fe:d2:f5:a7:05:
                    dd:fa:0f:f4:8d:14:30:a8:5f:89:00:44:c4:b1:8e:
                    4d:4b:36:82:bd:bf:18:af:64:33:5d:4a:d0:2d:58:
                    72:b9:c9:42:62:ca:86:cc:35:9a:25:32:a7:cf:c2:
                    1d:6f:43:c8:3c:e0:9f:b5:2f:be:65:a8:50:94:af:
                    c6:75:8b:31:fa:c1:f1:8c:84:04:70:2f:db:16:81:
                    e6:70:65:53:27:89:7c:9c:aa:24:66:a7:5a:21:ad:
                    b8:61:47:68:0a:1a:c3:9c:5d:33:5c:87:3c:f5:46:
                    be:36:0e:a9:53:55:d9:3e:f3:b1:ad:12:f8:9e:64:
                    20:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A9:4C:D8:09:01:5A:9B:C1:3D:2F:44:B3:D3:F8:12:F2:FC:7E:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c625fd72-037d-34e0-acb3-3db086a6a8b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1065::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:2c:43:eb:c5:f4:75:9a:03:0b:4b:64:fe:61:d8:88:3d:7b:
         4d:6e:bc:9b:ba:e5:ff:a1:21:d6:d7:6d:f4:54:36:0b:bd:c7:
         3e:c1:73:38:88:cc:fe:4a:f2:27:a4:49:ea:b0:fb:3f:a6:20:
         ee:5d:cd:09:41:7e:a3:66:6a:40:88:19:ed:c4:fe:f1:c9:4d:
         c5:91:c2:5d:77:bf:b2:68:92:99:f5:cc:6f:44:67:64:6e:94:
         7f:3c:62:d7:43:44:99:11:c2:d8:f8:6b:e2:73:28:a3:78:52:
         ab:fd:c1:5e:91:f4:1b:46:0f:6c:bc:76:b1:b8:2f:27:87:ef:
         5d:a4:e8:54:6d:d2:86:8d:e6:22:b6:6f:2a:9e:12:f9:37:63:
         15:8a:e9:30:4d:9d:14:a9:f7:9e:b2:ea:54:30:fe:cc:ad:39:
         c1:98:25:af:a2:35:eb:f4:57:df:e0:99:70:2d:d8:98:9a:ee:
         4d:e3:c2:55:19:29:99:35:f7:a5:65:61:87:6a:6b:d6:13:5f:
         0c:b9:59:9b:ba:2b:ec:b8:ab:c0:bb:4c:33:ba:1b:0e:76:c1:
         6a:e2:e4:81:4f:99:fb:d7:04:05:fe:81:12:b2:f1:8d:b6:a2:
         8b:39:16:0b:d6:bf:71:6a:40:57:1f:e9:f5:31:27:b6:ff:6f:
         b6:0d:bd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:25:46 2024 by rpki-client on console-ams.rpki-client.org