Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/761ff082-6d79-3fea-abf3-b88cda23baf6.roa
File:                     761ff082-6d79-3fea-abf3-b88cda23baf6.roa (raw, json)
Hash identifier:          Cl84AfyMVaPlXfCT1fynnOKU+SmlNww0zP6jfaPT8bI=
Subject key identifier:   C0:EF:4B:49:6C:B6:02:1E:C8:19:38:13:25:A7:2C:31:6A:20:21:45
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584598FE0DCCDB6615DF9E9CAFC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/761ff082-6d79-3fea-abf3-b88cda23baf6.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     38158
IP address blocks:        2001:470:193::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:0d:cc:db:66:15:df:9e:9c:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=84f32635-0244-4037-bcfa-5261cfc0250e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:97:81:b4:b8:66:35:cc:46:19:4c:75:e0:53:
                    f2:94:f9:f1:bc:92:d4:86:d2:83:62:e5:22:f3:4a:
                    17:83:87:b2:a4:ff:46:02:09:35:4a:40:66:de:51:
                    ba:b2:07:18:e7:e3:7b:51:c2:23:23:f0:45:3c:07:
                    8b:8d:31:d6:8d:54:19:3b:b1:c2:4c:1c:4f:68:c2:
                    59:db:be:d1:de:20:98:4d:0a:49:5a:d7:aa:e6:a2:
                    3f:f1:be:8f:79:7a:41:d6:72:ea:f3:38:09:53:c8:
                    d5:81:5c:8c:8e:23:44:f5:51:0c:cc:72:fe:ac:8b:
                    d6:02:f9:de:31:c4:15:c9:e0:10:64:e4:35:76:a2:
                    98:9f:5a:e7:24:8c:61:ef:7e:71:c0:a1:b3:3f:31:
                    c1:f3:04:c9:aa:85:78:45:c2:73:5f:51:2b:d4:df:
                    92:9b:d0:1e:e6:8e:c3:20:7f:77:57:19:04:68:0a:
                    db:ec:8a:4d:b9:84:0e:8a:a3:4b:44:c8:e7:bd:21:
                    42:f4:5e:73:a6:73:33:bb:77:4a:ff:8d:e8:91:79:
                    c0:33:a0:87:b6:71:91:59:4d:bd:45:37:77:50:01:
                    e6:20:6b:76:f7:87:c3:4c:cf:cb:7f:b0:c4:e4:95:
                    cb:49:fd:08:dc:cb:9f:ca:65:b4:99:fe:35:7c:c2:
                    86:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EF:4B:49:6C:B6:02:1E:C8:19:38:13:25:A7:2C:31:6A:20:21:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/761ff082-6d79-3fea-abf3-b88cda23baf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:193::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:0e:f9:2c:91:87:3b:12:c2:d7:77:74:e7:16:45:5e:8a:da:
         ec:65:84:26:61:a6:f1:36:78:ac:8f:fd:97:1b:08:9a:69:59:
         3d:ff:9d:1c:c0:a2:f2:21:a2:a0:16:d1:85:8c:ad:63:07:17:
         6e:7f:53:da:9e:ad:1b:f6:6f:a6:17:ba:80:31:df:d6:92:d7:
         e4:19:1d:af:c3:6e:c3:49:f0:cb:e6:b3:d4:40:1a:18:a9:8e:
         e4:55:f9:74:2b:33:aa:18:44:36:b9:31:0c:d2:1f:37:c7:0e:
         40:03:0a:0c:83:79:e4:6a:e0:e5:73:2f:b6:bd:3f:12:f9:86:
         b6:6c:47:30:a5:4d:e0:8b:92:cc:ec:de:57:28:c7:8d:55:f8:
         9a:57:b7:4b:af:79:6a:5c:54:c8:58:e8:e6:2f:e8:fd:ed:c6:
         1f:08:c2:66:88:43:b1:65:31:1f:6e:09:19:a6:85:a2:ef:fc:
         a8:58:1c:b8:0d:b0:c3:8e:dc:62:e1:73:cd:36:b0:f4:fa:6c:
         d9:c1:b7:05:6c:e8:69:62:31:3c:1a:2f:5b:4e:84:49:f3:fd:
         e0:3a:ad:db:b2:cd:c0:80:0e:f9:f4:23:54:1a:23:3e:27:61:
         10:fd:d4:f5:85:24:5d:ae:f1:e0:c7:84:52:0f:8e:23:65:00:
         88:9f:c0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:39:01 2024 by rpki-client on console-fra.rpki-client.org