Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4882896-1f17-3057-a63b-4c883a259284.roa
File:                     f4882896-1f17-3057-a63b-4c883a259284.roa (raw, json)
Hash identifier:          chxZIlHl83vunbFjIVnGMybNEQX+8dbbZMbI3LP/BMw=
Subject key identifier:   3A:00:F6:08:6B:1B:A0:DF:64:67:89:30:B6:E8:65:23:F6:BD:CC:D7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845CF7D5E39577E089E70392280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4882896-1f17-3057-a63b-4c883a259284.roa
Signing time:             Thu 09 May 2024 01:31:00 +0000
ROA not before:           Thu 09 May 2024 01:31:00 +0000
ROA not after:            Wed 07 Aug 2024 01:31:00 +0000
asID:                     400318
IP address blocks:        2001:470:2fc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:7d:5e:39:57:7e:08:9e:70:39:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  9 01:31:00 2024 GMT
            Not After : Aug  7 01:31:00 2024 GMT
        Subject: CN=20a5a0d7-7247-4f97-b29c-9d42eb69b4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:df:05:eb:8a:c8:54:f0:96:21:b1:1e:a5:48:
                    fe:a0:16:70:6a:e4:bd:ce:44:1e:b8:29:58:f9:39:
                    e2:85:e1:c2:d5:7e:47:83:f2:43:91:d3:43:a3:bc:
                    d3:41:d4:36:ab:b1:b3:f8:98:0e:7d:e3:b4:75:65:
                    48:ad:a8:2a:a4:3f:a3:31:d2:ff:c0:18:c0:0b:90:
                    2c:e7:ef:0c:94:07:70:74:a2:cb:92:e4:31:1f:a7:
                    3a:67:81:4d:0b:90:ea:3d:0d:22:93:fe:35:8c:7a:
                    0f:6b:a5:8c:f0:32:5f:3e:55:51:5d:d4:6e:0a:b2:
                    9d:b4:da:b2:9d:ed:d5:21:7e:b9:a7:b5:9f:20:fa:
                    c5:06:c7:d1:e1:03:3c:0e:4c:06:69:f6:92:40:75:
                    c6:f1:4b:c9:a0:5f:32:93:73:d0:47:22:c4:0f:be:
                    70:3d:57:5c:ad:c4:09:66:ee:bc:54:f9:26:8f:84:
                    5d:b4:3f:bc:d8:2a:05:4a:4a:be:2d:59:f2:4f:df:
                    ca:a4:c0:0c:20:44:19:8f:db:53:02:3d:cf:d3:f6:
                    55:71:63:34:f7:8c:22:7b:fb:00:76:1d:62:72:25:
                    c4:8c:ec:42:1d:ac:fb:bb:37:14:29:a0:12:48:cd:
                    bd:b5:22:14:0f:86:b9:4b:4f:a9:72:13:3b:aa:30:
                    a1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:00:F6:08:6B:1B:A0:DF:64:67:89:30:B6:E8:65:23:F6:BD:CC:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4882896-1f17-3057-a63b-4c883a259284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2fc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:85:54:e7:d1:7b:17:a2:4e:47:96:4f:af:69:30:97:19:8d:
         aa:6b:8d:9b:6c:27:94:ff:32:6c:8c:1f:1f:d0:72:6a:eb:3d:
         ca:3c:99:e1:e1:62:4a:a7:ed:f7:0b:62:f2:ce:67:1b:9c:13:
         a3:62:16:ca:80:2d:3d:6a:52:96:db:d2:08:a3:8f:7b:34:a9:
         ab:58:d6:d4:4e:81:63:92:98:82:0a:2f:ad:8a:43:00:62:59:
         10:39:20:0a:9c:1a:73:f7:66:a8:f6:8a:a1:57:ad:30:c0:35:
         30:7c:e4:23:99:8a:d2:96:b4:83:54:c1:c5:df:c7:13:b8:01:
         dc:9b:d7:b5:76:ed:a7:9f:c0:ac:48:56:80:38:13:49:69:a3:
         5a:22:14:84:70:c6:46:0b:e5:87:3c:d9:c7:e8:8b:37:01:1d:
         29:46:4a:35:6b:ec:d8:c3:89:b1:ee:b5:95:11:40:b8:a1:34:
         52:da:06:52:73:be:0d:e9:3d:7d:e5:9c:6c:db:5b:5b:bc:38:
         e2:a1:d1:05:17:27:9a:2d:46:17:ed:99:3a:61:6b:78:db:3a:
         2c:19:fb:2f:32:dd:35:b0:48:ee:12:30:49:de:fb:ea:09:05:
         a7:3a:ed:41:b3:34:bc:a3:99:a7:6d:60:7f:01:b9:d4:bc:13:
         44:64:fa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:36:17 2024 by rpki-client on console-fra.rpki-client.org