Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dafd021a-6ffc-38a3-9bd6-4aad8a058557.roa
File:                     dafd021a-6ffc-38a3-9bd6-4aad8a058557.roa (raw, json)
Hash identifier:          LCSvYbTA5PkvhAYdgGj327bmuRVkqa+yp9NZaMdNWsE=
Subject key identifier:   EF:BD:CC:51:3A:91:AF:65:CC:B9:A2:56:72:73:4D:48:45:ED:A5:3E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845E193D283ADF2D06D19F16B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dafd021a-6ffc-38a3-9bd6-4aad8a058557.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     24893
IP address blocks:        2001:470:23d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:d2:83:ad:f2:d0:6d:19:f1:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=c3e153bf-3654-4b49-ac4b-57719d210b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6e:e0:9c:35:18:08:30:fb:49:af:45:46:f2:
                    2c:22:61:7f:0f:07:f2:93:ba:c9:eb:39:b6:7f:aa:
                    7a:68:4b:9a:53:ad:b7:f3:7d:bf:f6:35:8b:71:86:
                    6a:d5:a5:59:83:19:2f:bc:30:27:0a:59:78:a0:ce:
                    18:d3:e1:de:30:48:bc:92:b2:28:d3:01:c1:82:f7:
                    d0:d3:91:6c:c1:4c:b3:75:67:fc:8c:a4:b3:ad:a6:
                    fd:a3:69:48:94:a8:1b:02:f6:77:42:d7:34:a8:78:
                    1a:63:2a:12:65:22:d4:0a:fa:f9:06:b6:83:dc:b3:
                    45:ef:22:0b:b6:e9:41:8e:1a:42:f4:1a:1b:eb:ee:
                    cc:1e:39:ec:eb:b9:81:76:04:21:af:50:20:69:1b:
                    e1:37:4d:19:9a:7b:6c:a0:a2:67:52:ae:71:bb:a2:
                    cc:14:39:fb:9b:a5:74:08:50:c7:d9:9d:5f:40:cd:
                    3d:d7:05:88:1d:2e:1c:a0:16:29:c2:fd:59:88:1e:
                    46:c7:59:03:92:da:95:58:d8:aa:88:a9:cb:4c:d7:
                    fd:b5:b0:59:ac:61:c5:e5:2f:d8:9d:12:1d:a3:a3:
                    c3:93:35:6a:62:4d:c7:a5:5b:42:5e:97:ea:cc:2e:
                    c1:87:be:37:de:39:eb:f5:95:ad:55:f2:a1:31:1c:
                    fa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BD:CC:51:3A:91:AF:65:CC:B9:A2:56:72:73:4D:48:45:ED:A5:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dafd021a-6ffc-38a3-9bd6-4aad8a058557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:28:ae:21:53:63:58:15:da:3f:12:b1:c9:ad:62:38:97:14:
         ec:48:bf:23:a6:6f:d0:d5:14:a3:53:df:b1:01:85:6e:e1:bc:
         78:3e:a0:c0:40:13:61:aa:e2:d6:dc:18:fa:9a:b3:d5:97:f0:
         73:fe:b6:cf:91:6a:e3:06:3b:1f:46:71:fe:d9:51:c0:2a:e9:
         fd:4a:75:28:e1:8d:39:6c:a8:33:01:68:58:a1:0d:e2:58:48:
         a7:80:e2:04:52:2f:9b:19:96:9a:cb:00:83:00:11:99:23:44:
         fe:c5:ab:ec:c6:5b:75:f1:ba:55:23:65:09:14:4d:cd:09:4d:
         d0:7a:23:00:b4:d1:ba:2a:d6:51:44:d4:74:3f:ad:b5:98:4a:
         9b:25:0a:78:fc:0b:4a:5e:d7:0c:71:9e:d6:dc:07:af:ad:7a:
         d0:41:66:ac:a5:d1:0d:8d:2c:4a:d6:90:45:fc:4b:c0:65:d7:
         d0:b4:ae:00:c7:24:79:0f:ea:8f:83:6f:4d:48:75:51:f3:0f:
         0f:55:b7:89:fb:f4:91:22:4f:c2:45:05:ac:63:37:10:2c:f8:
         4f:a8:66:a7:f6:44:a7:05:e5:22:40:e4:e0:f4:1d:89:29:c5:
         d1:eb:fb:38:0b:fa:c8:1a:4a:40:a2:4b:b4:01:5a:fd:74:7f:
         d3:a0:10:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 03:53:08 2024 by rpki-client on console-ams.rpki-client.org