Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/01b005ad-afcb-33ae-b312-fd75fea79d2e.roa
File:                     01b005ad-afcb-33ae-b312-fd75fea79d2e.roa (raw, json)
Hash identifier:          PC4BNj7lCyWumzReEnUy+HaSM7e5gFvmcYC0nBKI4eU=
Subject key identifier:   B2:E9:99:9E:98:24:42:4D:BC:D5:F4:E8:96:BF:7E:8B:55:EA:44:43
Certificate issuer:       /CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2
Certificate serial:       010D0C9F43285845AC88C4E6C116F0FB58263500
Authority key identifier: 52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/01b005ad-afcb-33ae-b312-fd75fea79d2e.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     6528
IP address blocks:        2607:cd80::/36 maxlen: 36
                          2607:cd80:a000::/36 maxlen: 36
                          2607:cd80:6000::/36 maxlen: 36
                          2607:cd80:c000::/36 maxlen: 36
                          2607:cd80:2000::/36 maxlen: 36
                          2607:cd80:4000::/36 maxlen: 36
                          2607:cd80:3000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:c4:e6:c1:16:f0:fb:58:26:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=83b9006c-b749-4c34-9142-41e70dc8ff8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e1:47:ee:24:4f:41:9d:15:50:74:d0:b3:71:
                    70:71:63:98:bf:5b:de:f3:df:6d:65:09:93:bd:19:
                    7e:29:08:db:9d:09:26:e5:22:8c:57:7c:ff:62:1d:
                    4c:da:80:ba:51:ed:e4:ef:68:24:6b:3f:45:17:70:
                    86:49:2d:f1:71:f8:6c:e6:e4:27:cb:0f:25:36:46:
                    aa:40:11:21:a9:24:be:7f:21:5c:1f:ce:cc:70:7f:
                    56:d6:f7:09:fe:0f:6b:d2:23:df:54:d1:3b:6d:07:
                    f8:97:d9:32:02:25:49:06:5d:f4:11:62:f1:8f:91:
                    18:5a:bb:9b:f5:6f:83:49:3d:f3:13:5c:20:b5:d5:
                    e0:d8:cc:2b:5b:b9:9e:8e:aa:6a:24:ad:ad:79:08:
                    63:88:2f:c0:9f:a1:24:59:bf:6a:dc:e7:c8:ae:db:
                    e4:ed:59:96:80:fe:fd:68:17:2a:28:fc:9a:58:77:
                    e8:9d:46:44:d3:a1:f4:35:4d:c3:66:20:eb:79:b8:
                    79:29:bd:fc:14:7b:a1:e2:be:a3:af:a8:0e:33:2e:
                    5f:b6:f3:ac:55:41:54:78:95:c6:cc:86:0e:02:b1:
                    35:0b:69:21:9a:b0:96:2a:53:d4:d1:5c:d9:2e:90:
                    67:d7:a2:0f:2a:53:15:21:cc:55:28:e8:f8:91:17:
                    5a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E9:99:9E:98:24:42:4D:BC:D5:F4:E8:96:BF:7E:8B:55:EA:44:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/01b005ad-afcb-33ae-b312-fd75fea79d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl

            X509v3 Authority Key Identifier:
                keyid:52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cd80::/36
                  2607:cd80:2000::-2607:cd80:4fff:ffff:ffff:ffff:ffff:ffff
                  2607:cd80:6000::/36
                  2607:cd80:a000::/36
                  2607:cd80:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:54:33:71:fe:0a:27:ef:b8:a6:05:2e:fe:64:82:b2:fc:a4:
         40:4e:31:a0:80:34:a8:78:da:a9:f9:c7:9c:e3:7d:65:1d:aa:
         5e:c9:e6:6a:e7:92:6d:3e:21:7e:9c:d6:cd:94:0a:16:7b:10:
         e5:02:8b:1e:b4:ec:3e:47:7b:72:cb:87:9f:2e:35:c6:71:58:
         ff:dd:9d:25:6d:16:05:1d:53:ab:0d:0f:f3:7d:41:9b:4f:40:
         c5:9f:bd:21:c9:51:47:0c:bc:12:fb:7a:56:29:e7:2a:2a:6a:
         e9:93:f6:de:bb:0a:1d:d9:fb:01:7b:61:ef:27:f2:30:84:1f:
         16:01:f2:49:93:2b:98:38:5e:3c:09:a1:c8:09:4c:32:6b:61:
         15:93:8d:f8:d2:da:e5:ef:43:cc:71:97:b5:b9:79:00:56:52:
         0e:cd:40:80:c5:fa:36:7d:26:b8:0e:89:ae:f7:50:d1:4a:ac:
         d5:e3:5a:b8:08:7f:ca:76:53:50:7d:0e:2e:48:29:51:51:89:
         f0:1a:5f:3f:0c:2e:28:3a:56:7e:b8:1a:af:dd:e9:fd:e9:5c:
         d0:20:8c:19:ea:9f:33:41:a5:a8:8d:bf:69:12:bd:08:c2:da:
         18:a8:79:25:55:1e:1d:ea:ff:c3:4f:7a:c1:9a:6b:61:97:7e:
         1a:38:25:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:40:46 2024 by rpki-client on console-fra.rpki-client.org