Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa4138ed-6cbd-35cc-83f1-3641aa8bdfb5.roa
File:                     fa4138ed-6cbd-35cc-83f1-3641aa8bdfb5.roa (raw, json)
Hash identifier:          9o/13AIOvGvce9Wt27aer0NFo8HpnmKF1phlqUFm5hI=
Subject key identifier:   92:2E:2F:90:42:A6:EE:35:26:8C:22:1F:2B:47:5B:85:66:D1:ED:EE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845DD63A0CB91AE6E0F02D607D0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa4138ed-6cbd-35cc-83f1-3641aa8bdfb5.roa
Signing time:             Tue 14 May 2024 01:00:24 +0000
ROA not before:           Tue 14 May 2024 01:00:24 +0000
ROA not after:            Mon 12 Aug 2024 01:00:24 +0000
asID:                     62206
IP address blocks:        2001:470:2a1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:dd:63:a0:cb:91:ae:6e:0f:02:d6:07:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:24 2024 GMT
            Not After : Aug 12 01:00:24 2024 GMT
        Subject: CN=9e1bce9e-e910-4a1a-a1ae-5df1a0776a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e5:a0:5b:06:65:61:e6:3c:75:57:80:33:20:
                    a3:75:89:8f:3f:05:f4:a7:ec:3b:47:cd:5e:38:56:
                    ce:93:12:d5:56:2b:12:65:8c:90:7c:46:76:b9:8a:
                    5d:f1:82:98:2f:23:2e:ef:5f:de:2d:07:34:4a:81:
                    1a:fa:7b:0f:fa:de:8d:31:a2:ec:52:6b:47:54:57:
                    f5:45:3a:05:4a:00:68:c4:64:ce:fa:84:68:46:1c:
                    07:cf:f1:14:56:a8:0f:00:66:e0:18:e5:c2:cb:e6:
                    b4:48:c2:a3:6a:f3:65:c4:b8:ac:ac:48:cb:de:fc:
                    c4:0e:ed:a3:3f:76:b1:73:7d:73:9c:db:85:e8:a9:
                    89:c7:20:e3:d6:0a:c6:1d:02:ca:9f:fb:57:83:c8:
                    01:27:56:da:b4:1d:94:49:3f:d9:78:61:82:40:b2:
                    28:09:46:12:b4:c9:55:ff:55:b4:04:3f:bf:51:2e:
                    04:60:2e:e6:4d:ae:5a:8b:a3:d1:cc:47:5c:30:02:
                    08:fb:9d:8f:0d:f0:81:79:47:59:9d:d0:11:f7:fc:
                    be:8f:97:ec:10:ef:2f:bc:ed:04:0a:ad:a3:95:3c:
                    3b:f0:48:a3:4d:27:dd:24:d8:ea:21:e5:2c:d5:e4:
                    32:7e:31:98:a9:d9:51:39:7b:33:03:2e:a9:f2:f1:
                    48:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2E:2F:90:42:A6:EE:35:26:8C:22:1F:2B:47:5B:85:66:D1:ED:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa4138ed-6cbd-35cc-83f1-3641aa8bdfb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:52:dc:66:d9:f5:b7:8b:21:6d:fc:17:ad:a3:bc:52:d2:57:
         7f:8f:97:5f:d1:75:77:a8:a1:52:85:bb:b1:f3:77:1d:21:37:
         93:2d:8a:88:94:bf:2e:d5:b4:61:97:16:02:d0:39:92:2d:7b:
         c0:8f:bc:ee:39:95:1c:3d:48:0c:8b:47:19:54:6d:a4:bb:7a:
         3a:04:4f:93:9b:87:28:1c:62:e2:ea:9b:4b:5e:bf:e8:df:bf:
         ba:af:82:f3:ab:dc:9f:f1:69:8e:74:0f:5a:90:28:db:e7:94:
         36:29:e3:d4:fa:54:0e:2a:5a:0a:56:fa:b4:e7:5e:9b:f6:dd:
         4f:4e:55:69:24:4b:d4:d3:b2:82:8b:3d:b3:da:91:bb:04:0e:
         d4:c9:90:9e:01:fe:fc:79:12:8c:5a:48:6f:7c:38:23:5b:ee:
         e4:b2:2a:38:21:3c:43:73:d5:77:50:98:49:e8:68:07:cd:d1:
         1e:39:a0:5c:fa:57:39:ec:ff:e6:1c:71:68:cb:03:4a:48:95:
         75:b6:eb:0b:8a:80:ab:87:91:7c:7c:40:a2:7a:b4:15:f6:e3:
         ff:8c:52:85:51:16:42:4c:3d:67:bb:c1:24:05:4c:61:16:bf:
         13:ed:a6:e5:5e:dc:aa:46:41:b6:25:75:c1:e2:52:45:fb:f6:
         5c:e1:b7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:52:20 2024 by rpki-client on console-ams.rpki-client.org