Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393/6b13e27b-aa58-3502-8e4a-2abefb7d6eb6.roa
File:                     6b13e27b-aa58-3502-8e4a-2abefb7d6eb6.roa (raw, json)
Hash identifier:          qILXjBn+e6BWiuPgXN1pB12BjvnwmdU9W1/RkXffXfo=
Subject key identifier:   B4:04:2F:87:A3:80:84:45:BE:E5:A9:4B:FC:73:C4:FC:BC:84:AE:85
Certificate issuer:       /CN=9d8c68f3-ceba-4a62-b5b1-ecc9bc879393
Certificate serial:       010D0C9F4328584563F300DE7BEE33F23A9ADEA0
Authority key identifier: 2F:C5:AC:45:E8:78:AF:6B:C3:75:02:F5:24:25:14:4C:79:D1:6B:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393/6b13e27b-aa58-3502-8e4a-2abefb7d6eb6.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     5661
IP address blocks:        131.247.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:00:de:7b:ee:33:f2:3a:9a:de:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d8c68f3-ceba-4a62-b5b1-ecc9bc879393
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=78a12ad8-4b42-49b6-a8fb-068d335f309d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:21:20:32:83:96:a0:13:7b:88:0d:ea:d5:0a:
                    1a:81:2c:92:b6:92:89:8a:27:0f:69:6e:ae:ca:ba:
                    69:fb:87:cb:90:87:4b:20:6f:02:04:33:2d:24:bb:
                    b5:54:17:25:b2:73:0b:61:d2:eb:05:35:de:e7:b6:
                    54:c6:a8:66:3d:2e:6f:0a:c8:ca:ec:50:24:e2:dd:
                    35:ce:a4:57:47:6a:a7:3f:3e:d4:60:24:48:72:e8:
                    be:0d:c8:63:0e:bf:c9:3c:e1:0c:f5:e6:c9:a8:ef:
                    0f:f3:4d:21:da:17:9a:3b:37:d4:bf:6b:74:1e:21:
                    af:2d:e5:cc:70:d8:93:95:1c:50:df:e3:48:7b:41:
                    70:d8:cb:bd:76:44:f6:32:74:74:b2:29:a4:24:fe:
                    3a:9d:5a:54:15:a6:b6:42:89:64:62:3b:79:6f:a9:
                    d2:7c:0a:95:fe:08:9e:43:cc:d8:3c:17:0c:d4:3b:
                    c3:bd:91:9c:88:c6:d4:63:cd:04:ef:c5:2b:ce:2b:
                    0c:5e:0e:c0:6d:14:0a:67:c7:dd:25:cd:b1:f2:da:
                    74:65:14:67:a6:79:69:d2:68:29:89:cd:f1:ca:05:
                    9a:38:67:9c:e1:be:53:aa:b5:97:03:d9:61:d6:51:
                    5c:ed:a6:30:b9:d5:be:52:ad:a6:ca:37:b8:4d:60:
                    f9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:04:2F:87:A3:80:84:45:BE:E5:A9:4B:FC:73:C4:FC:BC:84:AE:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393/6b13e27b-aa58-3502-8e4a-2abefb7d6eb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393.crl

            X509v3 Authority Key Identifier:
                keyid:2F:C5:AC:45:E8:78:AF:6B:C3:75:02:F5:24:25:14:4C:79:D1:6B:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.247.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:e1:97:17:8d:9e:ac:b9:b3:2a:9e:e9:9f:c0:84:86:09:b4:
         c3:d1:9b:5e:95:35:2b:1b:52:30:0d:41:42:40:4f:46:df:97:
         0e:11:36:d5:c8:cb:59:72:52:5b:b2:12:56:50:d7:b1:42:4b:
         96:65:c2:56:43:87:78:e3:a2:f4:77:9d:b7:a6:71:ef:17:a2:
         90:e6:e6:bb:df:10:ad:1a:ff:89:01:a9:5a:e3:61:f6:75:c9:
         68:11:eb:f4:1a:55:d8:f5:c1:69:ab:36:bd:e2:67:8e:ba:b8:
         2d:42:ad:6c:9b:db:81:ea:5a:ba:fb:18:74:b0:d6:8a:9e:5d:
         58:3d:9e:bd:ca:bb:5b:dd:6d:d9:8c:14:53:60:de:9a:29:2d:
         a0:5e:75:36:6c:22:8c:fa:2d:c0:f3:03:a9:58:a6:c1:bb:90:
         1e:4c:fb:52:23:2d:30:c3:ac:96:39:7c:de:02:f8:c6:b1:fe:
         b2:46:42:57:57:67:ff:1a:2c:00:46:0b:84:f8:32:7b:f5:3a:
         3b:14:8d:90:1f:4d:f3:a7:3e:c2:1c:5b:39:30:3b:ad:c6:c8:
         40:51:71:5f:40:27:ab:7b:05:8d:30:3a:39:f7:17:18:7c:aa:
         07:bf:3d:8a:e3:ff:f9:27:1f:43:11:4d:01:ea:45:5f:a2:23:
         27:37:05:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 00:35:51 2024 by rpki-client on console-ams.rpki-client.org