Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/118ec752-47f0-3cb9-a916-0ba7ab1c05e8.roa
File:                     118ec752-47f0-3cb9-a916-0ba7ab1c05e8.roa (raw, json)
Hash identifier:          XFTVADehfxpY9h/Z9LYXevLS7h4z0PTLTo/GwRPuUac=
Subject key identifier:   77:3D:B7:BA:C3:D5:69:DD:CB:B4:DE:AA:E4:AA:99:CD:74:DE:E5:36
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845735CB43B1B468BCBF9BE9680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/118ec752-47f0-3cb9-a916-0ba7ab1c05e8.roa
Signing time:             Sat 06 Apr 2024 01:30:49 +0000
ROA not before:           Sat 06 Apr 2024 01:30:49 +0000
ROA not after:            Fri 05 Jul 2024 01:30:49 +0000
asID:                     56786
IP address blocks:        2001:470:230::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:5c:b4:3b:1b:46:8b:cb:f9:be:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  6 01:30:49 2024 GMT
            Not After : Jul  5 01:30:49 2024 GMT
        Subject: CN=0f8be72e-d6ae-4df4-ae70-f274cb86e634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c2:fe:3e:1e:71:cc:44:01:73:46:c5:d1:58:
                    dc:fe:e6:b6:2e:af:af:0f:b8:3b:ae:11:3e:12:c0:
                    f9:95:af:ca:86:0f:f5:b6:92:87:1b:0a:2e:d5:11:
                    ab:a6:d1:7f:48:f4:3e:94:e4:f0:c2:48:c6:d0:75:
                    ba:57:2f:a1:5e:99:e9:ca:0a:42:1c:dc:da:4c:e7:
                    b9:bf:ef:ee:ec:6b:e8:d1:f8:ea:d4:76:62:d9:94:
                    cd:69:10:87:52:48:3a:52:51:36:7b:f5:e8:db:c4:
                    a5:37:65:eb:01:9c:bf:47:ec:2c:20:d3:38:c9:31:
                    9c:aa:ef:da:dd:0b:c9:dd:85:4b:74:d0:44:2f:cb:
                    a7:23:a3:5c:a9:b3:27:49:3b:c2:d6:0a:b0:04:4a:
                    de:64:71:53:b0:7b:fb:a4:7a:8f:b4:97:34:ff:67:
                    fd:95:f2:c8:28:67:4d:67:2e:ab:e3:38:b0:28:f0:
                    a2:54:b7:0c:94:1a:8e:cc:4c:c2:66:04:0a:70:1a:
                    b3:f4:9b:55:dc:73:ac:9e:7f:b0:23:61:ed:93:48:
                    b4:18:ac:6f:50:92:14:67:e7:33:05:e5:14:07:f6:
                    3c:86:b1:6c:9b:2f:ce:89:6a:c8:1e:7b:c6:59:fa:
                    bb:ba:e9:f2:d6:64:a4:99:26:c4:d4:52:88:ed:cb:
                    cb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3D:B7:BA:C3:D5:69:DD:CB:B4:DE:AA:E4:AA:99:CD:74:DE:E5:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/118ec752-47f0-3cb9-a916-0ba7ab1c05e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:230::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:01:b4:9d:27:d1:31:a2:7c:dd:60:60:ab:6f:9a:2b:8d:c7:
         a2:14:b9:23:84:dc:4f:62:a0:68:7b:02:1e:f7:04:3d:4b:66:
         91:22:e5:c0:66:fc:41:86:c4:b0:dc:ef:94:72:db:1c:ce:64:
         1b:e1:1d:a3:41:ac:c2:73:73:dc:f7:d1:a2:f9:70:06:61:c4:
         a3:97:f1:ae:23:33:a8:09:b5:6d:52:7a:8b:2e:44:25:36:92:
         f9:c3:63:e9:e7:7a:e5:68:a7:fa:97:9d:8c:10:e6:40:96:d3:
         c5:e8:89:4d:a8:b3:1a:b3:99:bd:99:fb:1b:12:53:22:d6:3c:
         c2:49:9d:de:ca:02:0e:05:9c:38:ad:ad:bf:bb:17:e4:f3:28:
         53:70:ec:93:d9:66:11:cf:8e:b5:03:73:e7:34:e5:32:e6:82:
         68:66:ab:dd:04:07:27:16:02:8f:da:53:c0:cb:69:cb:9b:8b:
         b9:42:d9:28:83:87:68:2a:a5:ad:a5:b6:bc:41:67:5a:74:b3:
         fe:93:53:ef:8c:9d:06:1b:8e:ef:03:0b:06:a9:6e:af:9a:f6:
         0a:1b:e0:0a:88:af:35:65:69:6a:69:fa:99:5c:7d:3e:f3:20:
         5b:28:73:8a:d0:5c:17:96:ce:7b:df:e4:bf:f2:95:2a:2e:9e:
         2b:6d:24:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:19:45 2024 by rpki-client on console-ams.rpki-client.org