Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a252cb2e-6ee2-36a7-8b22-60156f9e9046.roa
File:                     a252cb2e-6ee2-36a7-8b22-60156f9e9046.roa (raw, json)
Hash identifier:          ot76Ki5Gd68VJUBKVgQtmUiWyklRTrcc2/WfKIijk80=
Subject key identifier:   C1:3C:0D:D6:41:F6:DD:11:3D:E5:0F:AE:14:17:2F:A1:05:6E:05:4A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845D933C160D867B8CDCB754B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a252cb2e-6ee2-36a7-8b22-60156f9e9046.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     396385
IP address blocks:        2001:470:cd::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:c1:60:d8:67:b8:cd:cb:75:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=513f48a4-cbcf-4180-9b0a-b7348de43a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:13:aa:9a:7a:00:d3:ba:af:f9:4e:fc:c0:88:
                    23:65:33:6a:58:f0:f5:7d:8f:cb:10:99:be:3e:bb:
                    56:7e:51:12:8b:1c:16:e8:f9:32:a2:fd:b3:d1:45:
                    49:f1:6d:33:48:d2:9e:f2:e9:e2:e3:26:68:23:b7:
                    d3:e4:e4:be:eb:1c:08:66:9a:3a:93:f7:50:1f:07:
                    b6:ec:5a:19:b7:21:4d:c8:1e:b9:f4:33:19:c2:0e:
                    1f:db:1b:a9:df:c9:ed:80:af:58:4c:ed:6c:ec:37:
                    3b:88:b9:09:90:8f:ca:64:c9:24:26:b9:64:e8:4d:
                    a1:8e:80:e7:bf:f4:3e:9a:d5:a2:98:f3:3e:6b:f0:
                    ed:5c:37:28:8d:60:c4:47:4b:d4:61:70:06:a1:57:
                    19:f0:1e:45:5c:08:00:97:9f:fe:fc:bb:61:b3:7a:
                    a5:5f:cd:0e:ba:fc:bb:93:e3:1d:fa:18:76:0b:50:
                    12:23:2c:29:ce:0b:c9:82:c6:64:57:ce:36:5a:fe:
                    93:ca:a8:13:b6:6a:1f:fe:85:b2:89:84:7b:85:2a:
                    8e:3a:6c:af:18:40:71:75:9f:6e:be:5a:81:d4:a5:
                    16:95:68:56:31:58:d4:2a:5a:c0:73:4d:b1:05:9e:
                    1e:70:e9:ad:2b:d9:1d:30:c2:55:88:65:ce:31:da:
                    c5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3C:0D:D6:41:F6:DD:11:3D:E5:0F:AE:14:17:2F:A1:05:6E:05:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a252cb2e-6ee2-36a7-8b22-60156f9e9046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:cd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:ee:52:0b:7f:08:c7:f0:82:98:2c:59:ff:09:82:15:ca:af:
         a4:b6:5e:e5:57:e3:1a:d7:83:0b:3a:02:a6:5e:86:c3:31:f5:
         a4:3b:81:30:44:e0:70:23:30:7d:a4:31:e0:65:c2:4e:e7:a0:
         b9:be:3f:96:9a:ab:30:13:ae:d2:12:a5:0e:bb:3f:f7:b9:ab:
         82:61:68:20:53:50:ce:03:4b:40:1e:1e:4b:11:fb:4c:0d:f8:
         23:2f:fd:b3:d8:65:41:ba:55:1c:21:76:f7:31:13:1d:2e:8c:
         38:59:df:b1:83:eb:76:ce:e8:42:f5:52:55:9d:4e:70:f6:df:
         a1:4a:3f:b8:fd:37:c8:fe:f2:5f:80:03:85:a5:5a:3d:86:4a:
         79:ee:2b:87:0f:e2:90:c1:46:bb:67:74:36:7a:76:b6:d7:e6:
         65:8e:cb:f5:a7:72:42:11:cf:36:67:3b:f2:51:0e:75:8e:e2:
         39:86:e6:16:ba:0d:a8:43:03:7f:fb:8b:a4:44:a1:7f:e3:59:
         f0:fd:0a:3e:88:cd:2a:54:17:b2:bc:2a:ac:63:62:ae:41:a9:
         7b:3f:dc:df:43:e0:c6:91:5d:e3:16:63:f3:07:f4:65:fc:53:
         70:85:0a:de:2b:e0:25:a2:36:69:ac:16:1b:a8:d1:93:7a:4a:
         9d:35:24:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:52:46 2024 by rpki-client on console-fra.rpki-client.org