Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/fef891a5-b993-3e38-8e28-d12d12385a6a.roa
File:                     fef891a5-b993-3e38-8e28-d12d12385a6a.roa (raw, json)
Hash identifier:          bnHW79SH9S2Y0S1UkNVRtsNLJc8l0E2/VwP4KP5qrvw=
Subject key identifier:   48:51:1A:02:B0:E2:F4:67:3A:C4:73:83:78:39:67:71:6E:4C:2D:2E
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285845B7B3888BE04ACBE49CAE6F80
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/fef891a5-b993-3e38-8e28-d12d12385a6a.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        2606:7bc0:1080::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:88:8b:e0:4a:cb:e4:9c:ae:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=59917b2f-eebc-48de-bfc9-db3010caaab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:92:6c:0c:39:94:15:37:01:91:55:8f:6e:bf:
                    f1:b6:c7:18:8d:24:ba:e3:38:07:c7:08:fe:df:c0:
                    36:52:a3:d2:04:07:65:fe:da:19:db:6c:0c:66:3c:
                    3e:25:2a:c8:2e:31:1f:e7:91:44:75:4d:80:8b:e0:
                    37:fc:11:12:d6:0e:91:00:52:aa:02:cf:b0:25:ef:
                    0e:d1:1d:56:3c:b4:b9:1b:eb:01:25:8d:17:98:e3:
                    b1:cc:4b:83:d6:e7:d9:4e:0f:5a:5f:b9:ea:0e:2c:
                    ca:b2:e4:ff:dc:24:9c:45:7f:07:49:32:09:82:69:
                    54:58:6c:92:2b:7e:3f:cc:85:26:6b:40:90:6e:45:
                    ae:2c:df:c4:f8:29:69:a3:9c:0d:69:5b:3b:4f:11:
                    31:71:5e:22:6d:42:e6:14:87:83:43:a0:a6:5f:c8:
                    0d:8b:37:0f:41:7a:c2:f6:f7:7a:74:24:0b:d1:ab:
                    ef:30:69:90:df:0b:eb:66:26:0c:17:d0:94:eb:e0:
                    fa:52:41:4b:6e:0a:0d:b6:d7:ab:55:23:f3:84:9f:
                    dc:fb:a6:78:47:28:29:bb:42:f7:87:b6:dd:f2:05:
                    09:c2:d3:b8:7f:c9:5a:f1:68:50:b7:57:1b:46:bb:
                    89:84:09:c6:4f:b9:3f:5a:27:b9:8f:ac:40:7f:db:
                    e3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:51:1A:02:B0:E2:F4:67:3A:C4:73:83:78:39:67:71:6E:4C:2D:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/fef891a5-b993-3e38-8e28-d12d12385a6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1080::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:5a:f6:33:33:af:32:6b:0a:f7:b0:84:0d:ee:d7:60:f0:f5:
         2d:d6:3a:8d:7c:61:cd:51:f8:21:b3:d3:be:91:f4:2b:61:12:
         8f:35:ec:6c:d0:97:bc:1e:e3:7d:d6:64:28:f8:3d:a2:23:d8:
         72:dc:2d:bf:63:fa:d5:ad:a2:b5:21:00:3b:33:30:ce:60:c7:
         92:0d:b2:24:39:0d:2d:3a:4f:24:fe:c4:dc:6c:fb:e7:68:4e:
         50:4c:e5:4f:d0:cc:a1:df:c8:0e:e3:18:df:3b:7b:c3:95:ba:
         77:51:31:0d:60:60:85:da:cd:25:38:e7:fa:b3:33:c5:ee:cd:
         36:28:88:72:85:ac:1a:40:af:27:89:35:44:4b:e2:81:ca:6a:
         5b:69:46:28:60:a8:17:06:84:ec:c5:43:19:20:21:e9:93:43:
         d8:d0:92:16:c0:26:a9:2a:7e:26:8f:a9:15:f4:5b:a0:ec:4e:
         38:7d:ae:c8:c5:23:b9:e5:da:a1:cc:a7:93:d2:ca:92:02:cb:
         0c:6f:93:07:78:81:ca:14:54:1e:45:96:3e:60:e9:65:c2:9a:
         ce:d4:76:2a:e3:ec:e9:ef:6b:96:98:d3:b2:ef:3c:a2:15:bd:
         d9:5b:b2:d6:2a:af:47:26:5e:d5:08:70:16:0b:39:18:94:6f:
         b7:ee:35:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:53:29 2024 by rpki-client on console-fra.rpki-client.org