Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7079fe14-3249-37c2-8eb8-5ed3de5fb0e4.roa
File:                     7079fe14-3249-37c2-8eb8-5ed3de5fb0e4.roa (raw, json)
Hash identifier:          644YlghLYNBrcdzCAboOfUBs3LK3LjiMv+mDYY0lkiY=
Subject key identifier:   94:F9:BE:85:7A:62:E7:C3:74:B3:22:3E:44:1D:7A:94:AB:3B:B6:FD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845D933C213B695AEFFA5DE86C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7079fe14-3249-37c2-8eb8-5ed3de5fb0e4.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     46886
IP address blocks:        2001:470:3f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:c2:13:b6:95:ae:ff:a5:de:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=fa66e64f-e6da-486a-823c-b262a12e572b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f5:a9:f9:94:13:78:c8:16:f4:b8:42:3b:5a:
                    35:f9:03:84:ae:6a:84:b3:43:42:68:a4:09:ea:1b:
                    eb:6a:b4:a5:9b:0a:aa:43:30:be:16:7d:95:e6:4b:
                    77:32:28:2a:31:78:86:68:6a:b5:2e:43:ff:4c:9a:
                    cd:6d:58:a4:a7:14:0c:50:61:67:8d:f3:e0:ef:0c:
                    9f:df:f5:20:d6:d1:cd:4a:86:67:d2:e0:b7:d5:40:
                    aa:a9:ce:cf:7e:8b:ef:db:fd:2f:f1:b8:22:a9:d3:
                    97:ea:65:11:18:b2:23:e8:75:83:84:80:78:ed:af:
                    7f:bd:ac:80:96:8d:43:18:fa:76:9c:79:a7:5a:38:
                    f9:91:f0:e4:33:f8:73:d6:78:e1:6b:ef:ca:22:d6:
                    d9:2a:e7:73:95:68:d2:03:8e:36:04:60:a5:ad:b6:
                    81:8d:85:b8:71:e0:1b:f0:f8:e0:ee:f3:36:35:ce:
                    e0:71:a3:26:21:85:2f:96:cc:dd:48:f7:c9:ce:66:
                    c3:b0:92:32:a7:83:cf:91:5a:11:e0:3a:8d:47:7f:
                    0c:db:06:b9:80:ea:25:ff:00:2d:90:97:65:2d:2b:
                    2d:65:de:2a:19:9b:ae:5e:44:63:f5:6e:90:aa:10:
                    c0:3a:4c:f1:e6:e3:61:1e:cb:09:1a:34:e6:36:a7:
                    c4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F9:BE:85:7A:62:E7:C3:74:B3:22:3E:44:1D:7A:94:AB:3B:B6:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7079fe14-3249-37c2-8eb8-5ed3de5fb0e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:5f:ad:b9:2b:76:99:eb:1f:16:46:11:28:0b:41:05:1a:ca:
         68:c6:79:a4:58:fd:43:10:29:47:72:c3:d3:a4:3c:58:96:c7:
         cc:93:a5:39:43:6c:4d:66:93:1e:45:05:8c:c1:dd:3a:a7:44:
         31:71:c4:33:11:eb:27:06:88:1b:40:15:dc:ed:21:42:98:3b:
         38:b4:8d:bd:ba:52:6e:90:b1:5a:03:4b:a5:ee:cc:23:59:aa:
         cb:89:73:81:e3:7f:5b:34:ac:34:ce:08:a1:46:bc:9e:76:60:
         07:1c:e0:ca:b6:cc:87:8f:1d:7b:13:55:bf:9a:77:05:06:34:
         69:0f:e0:34:47:be:54:5a:e3:96:11:40:ac:5e:02:61:e1:b9:
         f6:0b:e4:74:6a:24:fa:0a:3b:00:6a:d5:a0:d7:8a:13:e8:d7:
         34:13:e0:e1:d6:d6:02:20:eb:5f:9f:68:61:aa:f7:b6:00:c6:
         33:6d:39:03:a5:2b:cb:93:1f:69:0b:7c:12:91:96:fc:fd:5c:
         5f:79:0a:ac:8f:f1:04:46:fd:52:29:1d:bf:67:d7:4a:e8:0e:
         07:7f:dc:82:a2:d3:fc:55:fa:1b:90:2c:e7:0e:ad:e2:56:8a:
         13:06:ba:0a:2c:a4:b5:e8:97:56:f2:31:37:30:b3:fd:40:45:
         36:02:bb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:52:45 2024 by rpki-client on console-fra.rpki-client.org