Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c591c20e-0b3d-3241-ac9b-f8ad968aa3c4.roa
File:                     c591c20e-0b3d-3241-ac9b-f8ad968aa3c4.roa (raw, json)
Hash identifier:          a6nWVDUylVgvg9plpgaq/xgB/N6rwRf5bpbbojbBRyk=
Subject key identifier:   CA:3C:AA:C6:44:A3:62:5E:8D:AB:ED:B1:1A:60:3D:B5:B2:08:2D:1E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845F7E9443362A2F5D269657520
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c591c20e-0b3d-3241-ac9b-f8ad968aa3c4.roa
Signing time:             Thu 23 May 2024 13:00:34 +0000
ROA not before:           Thu 23 May 2024 13:00:34 +0000
ROA not after:            Wed 21 Aug 2024 13:00:34 +0000
asID:                     140736
IP address blocks:        2001:470:246::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f7:e9:44:33:62:a2:f5:d2:69:65:75:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 23 13:00:34 2024 GMT
            Not After : Aug 21 13:00:34 2024 GMT
        Subject: CN=924e3cda-1666-44a1-b636-631d3c6a92cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:43:09:f7:aa:6b:e3:cb:4b:a2:3d:64:28:
                    45:e5:f8:ba:69:f5:e0:c9:15:81:d1:5f:15:d7:84:
                    bc:20:2d:e6:9c:79:48:70:33:35:eb:64:36:86:fb:
                    91:2e:32:a8:6c:ff:23:d5:a7:60:f0:64:b3:97:59:
                    42:ec:8c:f9:f0:eb:94:1a:ec:41:35:66:32:a9:60:
                    66:65:e3:7c:e4:6d:b7:5a:66:74:dc:cd:8e:b0:5f:
                    d6:fe:0e:56:e6:ef:6c:3d:c2:99:37:89:78:59:e2:
                    0d:df:7a:94:da:63:22:cb:0a:37:29:2d:c2:bf:31:
                    71:6f:3e:ab:0f:18:80:47:d0:90:0a:4c:89:ce:e0:
                    77:1e:b4:71:9f:9f:c3:ca:ee:0f:08:f8:70:e1:fc:
                    12:21:b7:18:36:70:15:67:16:3d:04:bd:bc:53:88:
                    d2:8b:12:43:70:a2:6c:ab:cb:be:98:67:ea:d2:60:
                    fc:35:6f:6a:99:90:45:c0:f1:e5:ec:8d:5d:71:64:
                    ae:84:84:c8:4c:9d:37:64:07:b1:33:e9:2c:3c:05:
                    3c:55:f7:28:86:5c:04:d0:be:3e:c1:0e:01:08:47:
                    aa:a1:e6:56:e6:bb:fb:3a:6b:35:6d:e7:88:b0:9f:
                    e7:69:c4:ad:a1:96:85:04:ae:5b:a0:8b:4e:4b:d8:
                    42:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3C:AA:C6:44:A3:62:5E:8D:AB:ED:B1:1A:60:3D:B5:B2:08:2D:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c591c20e-0b3d-3241-ac9b-f8ad968aa3c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:246::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:66:f0:1c:ef:01:e8:8f:a5:3b:e3:a0:95:be:85:ae:d6:a1:
         df:f4:44:87:6b:b7:92:95:cb:73:ef:62:2b:41:f2:2d:49:2a:
         8f:48:d8:41:d7:45:e9:75:16:2c:aa:83:82:90:8a:57:b9:b0:
         c8:08:5f:68:c4:a8:43:1e:77:d8:4f:7a:91:10:c9:24:72:b0:
         1b:80:8e:e0:64:e5:7e:d3:8a:9b:91:ba:f9:68:89:64:44:8a:
         f6:6d:97:92:f0:98:51:a9:ff:08:36:c4:3e:9b:78:16:d5:fb:
         6a:24:a6:a7:4d:bb:0b:ff:d2:d2:7b:bc:84:79:c7:66:4c:1b:
         53:87:a4:4e:f6:a1:3b:bc:4d:d8:67:11:7c:ff:36:86:44:ff:
         83:e1:3c:ba:87:01:85:96:ba:65:e2:ff:55:a4:b6:8a:9a:e7:
         ca:be:8c:4a:4d:8c:ae:e2:69:2c:f2:be:60:da:70:57:9a:1a:
         43:68:68:31:17:35:86:fd:38:d5:b0:66:45:cd:2f:28:8a:2d:
         f1:dc:cf:47:b7:8b:4d:c4:56:d5:99:42:eb:b2:f6:1f:d1:2b:
         f4:6f:2d:f6:16:0f:38:1d:33:09:07:e0:6a:a0:88:5b:ed:04:
         f7:ad:65:cf:9a:8d:2e:c1:8d:c8:8b:8e:b4:98:83:69:74:ec:
         a4:5a:3d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 02:52:05 2024 by rpki-client on console-fra.rpki-client.org