Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d6789155-86b1-3972-a062-f4fb620bc8a4.roa
File:                     d6789155-86b1-3972-a062-f4fb620bc8a4.roa (raw, json)
Hash identifier:          eyBaycFTnJbkHFzvEC+Kci6I/k1naCPtwoqHU+URUNg=
Subject key identifier:   10:56:A8:5F:4A:86:95:12:3D:B6:F9:3B:59:96:A9:69:9C:F9:E6:F0
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584855D59A8AC24194D4A1266500
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d6789155-86b1-3972-a062-f4fb620bc8a4.roa
Signing time:             Thu 26 Dec 2024 14:00:52 +0000
ROA not before:           Thu 26 Dec 2024 14:00:52 +0000
ROA not after:            Wed 26 Mar 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2606:7bc0:1080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:55:d5:9a:8a:c2:41:94:d4:a1:26:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Dec 26 14:00:52 2024 GMT
            Not After : Mar 26 13:00:52 2025 GMT
        Subject: CN=863abe9a-1910-4036-887e-469c09c9a3e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6f:ba:0b:c5:6b:fc:94:b3:36:d0:96:8d:69:
                    18:c2:e6:ce:a4:20:96:54:30:28:7c:29:13:72:d2:
                    39:22:bd:ec:1f:49:0d:43:af:2d:bb:b3:1f:68:fb:
                    dd:fe:19:fc:ac:3f:cc:15:02:de:f6:b2:69:22:ca:
                    27:6d:a4:41:4b:fc:a1:b3:12:c7:2c:3a:be:4a:9c:
                    a0:e9:7b:4f:62:b1:4d:fc:44:85:bf:62:0b:39:c3:
                    55:d9:7d:15:9c:9c:c2:26:e0:68:ca:36:6c:6a:fe:
                    9e:d5:c1:1f:47:b7:f2:c7:6c:1d:1f:7f:a7:69:10:
                    da:e2:1f:03:45:70:7a:9e:5b:53:c0:eb:28:d4:b3:
                    c0:9b:87:ca:90:68:0b:49:91:3d:5a:db:7e:ee:a0:
                    70:bd:40:18:c9:5b:7d:ab:94:cc:a1:23:21:ec:1d:
                    b6:04:be:9d:be:1d:f5:24:30:6c:1e:ee:0d:74:58:
                    4c:7f:3c:26:80:71:9a:0b:d2:a7:e4:19:2e:d0:3e:
                    f0:1d:57:e6:16:3c:e7:69:1b:21:65:b1:e0:12:4d:
                    e2:65:ff:0d:d6:5d:d1:56:4e:06:91:13:4e:09:85:
                    ad:39:5b:11:ee:3b:2b:50:20:eb:c0:9e:4d:3c:46:
                    05:1b:91:4b:b7:c2:24:cd:3a:cd:87:6d:d8:0d:51:
                    61:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:56:A8:5F:4A:86:95:12:3D:B6:F9:3B:59:96:A9:69:9C:F9:E6:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d6789155-86b1-3972-a062-f4fb620bc8a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1080::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f7:95:f6:ff:e1:c4:c6:39:49:45:49:72:d5:46:cf:ef:48:
         0e:e3:c7:ba:ef:09:5e:e3:e0:a0:74:4c:20:44:0d:af:ae:92:
         14:6e:cc:6c:cd:e5:fc:86:d5:eb:6a:17:05:c8:a5:8b:ea:8c:
         da:ce:94:4d:e0:6a:3d:ef:95:9d:9e:9e:00:c2:0a:60:63:66:
         fc:ce:5f:a3:44:ff:08:32:60:9f:12:74:98:ff:0f:8e:f5:b5:
         13:e1:ef:e7:05:99:42:4e:0a:3b:42:ba:73:30:6d:93:27:96:
         39:1c:00:9a:ce:6e:b3:98:0d:e4:79:68:bb:bb:31:f1:c8:a6:
         66:a0:10:da:ae:14:2a:ed:68:17:4e:d8:7a:2f:30:de:82:e5:
         0f:e5:e5:9b:1f:c8:00:ed:82:fb:c4:db:93:25:cc:3c:bc:16:
         d1:47:b5:a2:7f:6e:d3:c2:0a:7a:f2:6e:05:c6:cc:db:a6:76:
         9f:a8:8a:bf:5e:06:87:ce:b0:11:41:a5:1d:7c:32:eb:2d:f3:
         05:96:81:af:14:2d:6e:44:8a:5a:a8:f5:62:24:02:62:09:59:
         ed:fa:7b:0a:e9:4f:83:21:10:b0:5f:cc:85:0c:aa:e8:28:5c:
         6f:53:6e:df:b0:c7:b7:54:78:6c:61:ae:88:0c:4a:6b:b3:24:
         a5:5d:73:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:50 2025 by rpki-client