Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2ea405eb-09f9-35d7-9393-2cb2a772134f.roa
File:                     2ea405eb-09f9-35d7-9393-2cb2a772134f.roa (raw, json)
Hash identifier:          8eCKdRccOFxjna0TFV9p4RzUJO7LPgG+Z+zjmEJI/lM=
Subject key identifier:   62:EB:CC:48:E7:FF:8E:F0:5D:EF:64:D3:BF:29:07:08:D1:5F:BD:B6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845CB3E5B3A0D7475239D3BBDC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2ea405eb-09f9-35d7-9393-2cb2a772134f.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     60602
IP address blocks:        2001:470:230::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:5b:3a:0d:74:75:23:9d:3b:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=febe8b3e-ee46-4c7a-836e-76e5883aa05d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:90:36:68:8d:71:da:13:3e:f2:be:7c:dd:79:
                    1b:b7:57:b0:a1:d1:e2:cc:7a:f2:d1:a4:7f:65:64:
                    9e:34:e6:6e:3c:1e:32:a1:2a:f3:aa:4c:53:8e:c8:
                    4c:b7:88:a7:4c:d1:6c:73:b1:3c:74:0e:64:9c:76:
                    ad:da:1c:41:74:9a:e1:c4:cc:d7:04:22:35:73:57:
                    24:23:65:df:6d:02:6c:c6:0d:d9:aa:3d:7e:5a:98:
                    00:01:06:21:8d:41:b4:16:07:61:f5:7a:24:6b:d7:
                    19:cb:75:fe:31:3d:24:29:4e:6e:75:8f:9b:4b:95:
                    56:4e:96:67:07:3b:7c:79:ed:c4:c6:26:c9:d4:70:
                    2f:2a:a5:89:12:7a:f1:79:60:c7:22:c1:e0:4a:ae:
                    5c:0e:29:ee:5c:a7:a6:ce:52:9f:3f:a6:69:26:31:
                    80:d3:08:4f:73:5f:d9:e8:2c:69:c8:9d:2e:79:6b:
                    68:2d:53:5b:c6:20:57:10:9f:47:4a:a3:3f:a2:65:
                    56:89:32:6b:ac:14:a1:c3:a8:bb:14:d7:c8:61:5b:
                    8b:a6:f1:e8:f6:a4:d4:3f:5c:31:de:9e:0b:bc:79:
                    21:a6:3b:db:d6:a6:06:16:4d:00:c2:0e:34:20:9d:
                    7f:fa:33:de:ac:54:c4:2d:9c:c7:07:61:f2:8d:72:
                    16:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EB:CC:48:E7:FF:8E:F0:5D:EF:64:D3:BF:29:07:08:D1:5F:BD:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2ea405eb-09f9-35d7-9393-2cb2a772134f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:230::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:7c:f7:91:b4:58:42:45:4c:f7:3e:fe:d9:43:db:c0:bc:d8:
         72:0c:73:8b:12:a5:29:7c:61:8d:f9:da:39:2c:29:37:47:19:
         62:d2:fc:05:e8:d9:e6:eb:26:5b:b0:28:58:16:22:0c:c5:98:
         8a:6b:3f:0d:40:a8:7c:f1:84:6b:f3:78:2d:cd:d1:50:f0:ed:
         04:00:82:63:b4:10:15:24:5b:19:be:ed:db:ad:00:5b:61:c8:
         67:fc:52:13:38:d4:e8:aa:f7:26:63:9a:5c:65:aa:93:a1:a5:
         29:4a:95:c7:11:fd:43:3f:6d:fb:54:52:3c:fa:7a:86:da:74:
         b4:e7:8c:41:ef:dc:ee:f0:35:9c:c3:9a:a9:a6:d1:1b:47:e0:
         f0:58:36:9b:19:e8:d6:02:38:be:43:aa:19:32:03:99:34:e8:
         12:b7:fa:13:09:59:ec:d8:68:78:b9:a8:45:e5:81:bd:b5:9e:
         12:a6:49:b2:77:3c:3f:0a:90:21:30:2c:88:8c:e1:c2:fe:a0:
         39:f1:8f:93:4f:14:30:ac:37:6e:9f:08:6a:94:1a:ac:e5:43:
         bf:f5:b2:66:40:15:f7:e8:c7:fd:3c:8a:45:e9:d7:78:74:03:
         b1:78:11:38:31:89:4d:dc:d8:8b:74:39:f6:cd:8e:56:21:a1:
         0b:6c:d5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:52:17 2024 by rpki-client on console-ams.rpki-client.org