Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/093308a4-58a5-3f5f-9bfc-1975acf7d8fb.roa
File:                     093308a4-58a5-3f5f-9bfc-1975acf7d8fb.roa (raw, json)
Hash identifier:          gk8IRG92pkkVPEHBTZOpjWpw4PhbEodRmwk4uxPDQJ0=
Subject key identifier:   5C:A2:94:94:C7:51:87:E4:90:99:80:13:2B:66:37:3E:11:B7:3E:70
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845D39E67C7C5957E552A96E1C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/093308a4-58a5-3f5f-9bfc-1975acf7d8fb.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     983
IP address blocks:        2001:470:21e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:67:c7:c5:95:7e:55:2a:96:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=c6ff4bd3-f005-4eae-a113-dcb6783518ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e6:97:00:c7:ce:2f:98:b2:22:f8:ab:3f:29:
                    64:3c:6f:a4:b1:26:81:f2:5d:78:30:8b:d2:f3:9e:
                    5d:76:54:c1:1a:35:9d:a5:e6:ce:11:84:72:7e:6b:
                    5c:66:49:51:6b:47:eb:c6:79:0a:94:ad:89:ee:f0:
                    c8:be:7c:dd:f5:7d:3a:97:38:10:06:70:38:0b:7f:
                    6f:24:d6:0f:a6:4a:78:9d:78:81:ea:38:d6:f4:0b:
                    93:af:30:3d:14:c7:6e:cf:d6:21:a9:7c:b7:84:bd:
                    45:4b:2e:5b:f2:73:8e:fa:4e:17:95:e3:16:fa:c9:
                    21:b4:10:ba:b1:51:c1:ce:24:cd:53:1c:5f:a2:16:
                    3a:c1:15:a6:34:60:9f:17:11:a8:36:6b:af:2d:65:
                    49:26:86:0b:b2:26:5f:72:0c:ce:81:06:6e:47:56:
                    00:c8:2d:17:0c:95:c9:a8:8c:f7:5c:fc:87:63:de:
                    35:56:ea:8a:45:57:d4:bd:db:c4:5a:ee:8a:6b:44:
                    6f:0e:63:1d:fa:6c:59:53:eb:08:d6:86:b8:aa:4b:
                    b6:f6:30:16:0e:f8:d5:09:ca:83:ef:47:01:09:bd:
                    18:4b:b6:2d:66:48:a1:44:99:24:5d:a6:d0:39:c7:
                    4d:e1:ca:68:20:3e:6d:35:54:09:ea:ed:2f:ab:44:
                    11:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A2:94:94:C7:51:87:E4:90:99:80:13:2B:66:37:3E:11:B7:3E:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/093308a4-58a5-3f5f-9bfc-1975acf7d8fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:21e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:23:06:01:f3:bb:a7:df:ef:c9:ae:22:f2:0f:a5:73:7d:df:
         88:3c:81:a4:a4:44:68:e4:15:b7:af:c5:4b:69:1d:a3:40:6a:
         fe:a4:4a:eb:99:ee:09:72:51:0a:b5:d6:2b:fa:72:5c:bf:88:
         f5:b7:12:21:23:10:7e:7c:d1:62:fa:f0:09:3c:31:ed:96:4d:
         52:aa:d1:e2:1f:75:27:fe:ba:de:a0:01:85:17:61:87:09:34:
         4d:90:97:13:2f:66:9d:5d:c4:05:44:0f:31:9d:95:46:26:b1:
         67:60:b1:98:4c:59:d9:53:ab:8e:a0:af:e9:7f:dd:15:af:6b:
         af:5d:1f:0d:49:27:9c:c0:a8:71:33:2a:00:f1:06:5a:5f:66:
         3b:f4:3e:1e:c8:4e:d2:9f:52:94:bb:df:63:5b:be:42:53:24:
         23:7a:54:01:0c:b5:30:50:33:10:5a:f4:65:03:93:77:e6:1e:
         b7:ac:1e:3a:cd:4d:e4:ed:c9:e2:20:ed:ab:f2:6c:c4:5e:4f:
         26:25:a5:aa:d9:33:85:7b:94:49:e9:ff:2b:68:17:23:c3:34:
         4b:07:92:0d:dc:53:5e:95:ad:3c:2e:99:11:ed:b0:c8:d5:16:
         a6:a0:c9:9d:a9:e8:bc:06:8b:80:e5:0b:78:0b:2a:9b:bb:cf:
         74:c8:d6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:52:16 2024 by rpki-client on console-ams.rpki-client.org