Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/effb7561-5400-392d-8297-d59e3ea070dc.roa
File:                     effb7561-5400-392d-8297-d59e3ea070dc.roa (raw, json)
Hash identifier:          iG9ldZVC/lcWfkATqNGdmcFL8AeiMC54WEQil8mrYzo=
Subject key identifier:   0C:C5:1A:C4:F8:62:2D:9E:96:84:2F:EC:33:84:B5:2E:A8:0B:7C:24
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845D933B837298178F0187C9680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/effb7561-5400-392d-8297-d59e3ea070dc.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     394356
IP address blocks:        2001:470:e0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:b8:37:29:81:78:f0:18:7c:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=b4d7abc6-5667-4545-98af-63c395e15735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b3:7b:7f:b4:a2:6b:cd:4d:fa:3a:66:22:f1:
                    7b:dc:09:98:5a:60:e1:e2:5d:38:16:d6:98:14:b5:
                    83:90:6e:da:92:9b:c9:de:d4:f9:0e:50:eb:c6:b7:
                    e0:c3:d0:01:13:d8:34:95:59:bd:9c:3a:be:9d:1d:
                    fd:7e:88:52:50:67:5b:7b:55:20:1d:02:d9:e2:5a:
                    a1:33:ea:7c:d4:85:8a:c6:67:7c:be:45:b4:4a:a8:
                    5a:18:21:cd:23:03:77:b1:84:5a:1c:ee:f2:08:c3:
                    65:0f:2a:e0:59:6e:0c:2a:29:3e:0e:17:41:38:f1:
                    d3:4e:f5:f6:8c:ad:10:b7:8b:81:87:56:ab:45:dc:
                    af:4b:b3:26:30:a9:1a:6c:b9:8f:7c:0c:1f:fc:05:
                    d5:98:db:cf:26:65:fe:ea:7f:9d:19:d7:65:1a:eb:
                    ab:d5:f8:24:06:fe:11:41:39:34:4c:0a:02:21:1f:
                    23:f8:25:d2:0f:c8:31:b8:05:a1:1f:ca:5f:f7:e5:
                    56:63:85:9e:0a:d7:31:1e:47:f1:5a:78:0b:a9:9e:
                    b9:e3:37:cd:f2:f1:6b:c6:4f:3b:ff:b4:5f:43:9f:
                    e1:37:74:82:18:10:5f:2a:17:26:e8:0c:a0:b7:0a:
                    e6:c3:db:23:26:1a:90:06:c9:26:47:6b:15:54:03:
                    bb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C5:1A:C4:F8:62:2D:9E:96:84:2F:EC:33:84:B5:2E:A8:0B:7C:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/effb7561-5400-392d-8297-d59e3ea070dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:e0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:e9:ed:fb:90:44:f4:ed:1e:cd:c7:80:21:4b:f5:65:31:92:
         b8:b2:4d:a4:b3:ec:6d:62:a9:3c:c8:a5:60:fd:91:c8:1a:15:
         29:4d:24:e6:d9:a3:99:44:e4:d1:6c:08:86:8d:e9:a4:80:b9:
         cf:f6:2d:5c:eb:36:36:cb:78:35:37:65:73:f0:7d:65:8a:64:
         d0:a9:96:5e:dc:0b:a4:3c:c3:20:79:9e:7c:bf:a5:b4:32:7f:
         b9:72:4a:c9:6a:0c:28:8d:3d:35:9c:c3:54:ca:08:9b:31:61:
         ff:33:16:24:51:0e:a9:65:0e:f8:19:9c:cf:92:5f:56:d0:d6:
         96:09:b1:fe:29:10:70:d5:a0:d8:71:3f:c2:7a:b6:53:8a:f8:
         6b:ce:eb:0b:55:a1:fb:08:d2:90:0e:68:b5:ea:fd:d9:4c:c4:
         9e:90:8a:f9:35:60:33:9e:70:05:29:3a:60:e9:37:22:17:8d:
         7d:96:08:7b:20:5b:4f:7d:f2:5c:7e:ee:d9:ee:f3:5e:cd:aa:
         7d:99:a5:cd:6e:a1:63:4c:2b:07:e2:1d:77:39:94:c8:ed:77:
         23:7b:c2:1e:25:e7:dc:f0:14:d9:df:0b:e9:d6:08:fd:00:47:
         0d:0f:c5:99:14:28:29:59:63:b5:04:03:79:b4:5c:12:a1:64:
         11:d1:ff:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:52:47 2024 by rpki-client on console-fra.rpki-client.org