Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b049a726-f48b-3502-9d13-078b45d29f96.roa
File:                     b049a726-f48b-3502-9d13-078b45d29f96.roa (raw, json)
Hash identifier:          BcN8emFHLyuvPcMGH6YyOcegKTaY+/M4k41HuqKKf94=
Subject key identifier:   68:43:DD:A3:09:0E:CB:D4:A3:D3:AF:13:7D:71:E9:F0:4B:EC:E3:A3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845CF7D5D24E1D123F7689E8680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b049a726-f48b-3502-9d13-078b45d29f96.roa
Signing time:             Thu 09 May 2024 01:31:00 +0000
ROA not before:           Thu 09 May 2024 01:31:00 +0000
ROA not after:            Wed 07 Aug 2024 01:31:00 +0000
asID:                     36958
IP address blocks:        2001:470:2fb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:7d:5d:24:e1:d1:23:f7:68:9e:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  9 01:31:00 2024 GMT
            Not After : Aug  7 01:31:00 2024 GMT
        Subject: CN=6a3ded63-1759-4a4b-a4c9-39de3462e9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b5:24:84:b5:ef:14:8b:c3:9d:50:a2:67:ef:
                    6d:0d:71:64:a5:16:1b:21:55:3d:40:3f:4e:0d:c6:
                    09:da:5a:5b:72:a2:46:52:9d:55:ec:b4:c4:63:d4:
                    8c:01:9c:0d:44:8c:19:5f:12:cf:eb:f8:7b:87:c7:
                    20:76:56:0a:7a:ce:3b:64:7c:d9:6a:d4:fe:1a:ba:
                    c4:26:79:c5:91:2f:10:58:71:bf:8f:cd:54:f0:cd:
                    1b:e1:fe:5c:70:d8:80:14:53:e4:09:b2:80:1f:75:
                    7f:f9:ec:80:72:b6:9b:f5:d0:f3:8a:88:40:65:da:
                    5b:a7:6c:56:93:b2:62:af:9d:6f:54:27:77:77:63:
                    51:36:d1:47:30:11:bf:1c:c1:de:cc:ee:09:02:86:
                    16:99:bc:ae:b9:c6:0d:b7:e5:a2:71:71:5f:28:80:
                    2b:fa:95:c3:d9:8d:36:aa:2e:6e:f1:a9:74:5e:a1:
                    83:f0:08:f0:a3:07:7c:16:74:72:57:67:2c:70:6a:
                    60:b1:8d:67:7f:1e:4e:c2:51:58:fc:46:a1:ed:49:
                    db:e6:99:ee:81:24:b1:e8:39:4b:89:36:c0:ee:23:
                    23:ea:f3:90:18:b8:09:f3:49:c4:f0:fd:eb:b9:2d:
                    cb:4e:9b:d2:21:a0:d4:e8:e2:46:ed:d4:da:d2:80:
                    cf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:43:DD:A3:09:0E:CB:D4:A3:D3:AF:13:7D:71:E9:F0:4B:EC:E3:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b049a726-f48b-3502-9d13-078b45d29f96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2fb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:df:f8:92:53:d7:ff:2e:12:76:42:a5:8d:6f:50:ea:5d:eb:
         bf:dc:84:2a:3f:52:ce:f0:e7:c0:d4:e5:10:88:d7:71:9d:09:
         c0:ad:61:0b:c9:b0:d4:d5:b1:6a:4b:6f:65:80:96:8f:27:b0:
         ee:71:12:91:83:7f:2f:29:cb:dd:7b:64:32:53:a9:9e:2d:b2:
         7c:ab:40:26:1b:a9:bf:1a:f8:64:ad:c9:94:ea:9f:ed:63:a1:
         1d:9e:ad:04:2d:8a:63:0d:e5:a1:e0:7b:e7:08:d6:72:45:00:
         e8:94:7d:b0:a3:c5:2c:ec:64:40:9d:90:94:74:a0:22:5c:8f:
         58:b6:19:f9:06:a2:25:7d:ed:1d:d9:27:7f:03:e3:1c:bb:41:
         76:47:1d:75:66:09:0b:2c:66:da:02:96:a8:23:15:80:d8:b6:
         7b:d8:d0:6e:d3:7c:60:35:1e:47:9d:26:4c:82:94:4d:1d:cb:
         b2:9d:a9:4a:c1:e8:1b:bd:cb:61:59:6a:fc:55:90:ee:d1:a6:
         a5:19:3c:7a:c3:ab:7a:cb:e9:d7:63:22:b3:98:a7:e0:50:45:
         fc:5a:47:05:94:60:29:21:62:56:ca:46:cf:27:c4:b6:e0:31:
         8a:65:97:a4:8c:3f:c9:9d:f6:d6:30:80:4c:18:c2:35:28:1f:
         fd:3e:ac:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:52:19 2024 by rpki-client on console-ams.rpki-client.org