Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/74acb797-d55a-3c16-8cd6-b06d7b903689.roa
File:                     74acb797-d55a-3c16-8cd6-b06d7b903689.roa (raw, json)
Hash identifier:          uGpPo/KFQcvjgAWAGWhP5oZsoKfmApKzAH/VxcDnhqk=
Subject key identifier:   1D:42:69:15:21:DD:6E:7D:45:BF:F7:8E:D8:EE:ED:22:0A:F9:F6:73
Certificate issuer:       /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
Certificate serial:       010D0C9F43285845CE090B9FE3BA95FFFA9F8700
Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/74acb797-d55a-3c16-8cd6-b06d7b903689.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     237
IP address blocks:        2001:48a8:800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:0b:9f:e3:ba:95:ff:fa:9f:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=2762ae83-a352-4ade-b3e7-8180f077aa92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f5:e4:fd:01:ca:0d:06:85:11:ba:b7:bc:4b:
                    a0:b2:ad:63:d4:72:54:b8:55:fa:7c:46:ca:11:67:
                    89:c1:0a:cf:34:c9:de:bb:c3:cd:52:38:6b:0d:66:
                    00:0a:c1:44:b0:4b:82:a0:91:4f:ff:79:e2:70:6b:
                    49:a1:5d:a4:16:1d:e8:b8:a7:38:83:2a:c1:38:47:
                    fb:d0:ad:e0:bc:ba:d9:ce:42:d5:fb:0d:33:cb:be:
                    81:8c:93:c4:29:e3:61:ad:4c:22:7e:27:65:65:1d:
                    5c:cf:bb:d0:1f:b1:34:05:33:54:51:eb:5d:af:98:
                    be:ea:71:52:20:8d:2f:07:e5:08:ac:fe:59:4e:65:
                    d0:7f:60:77:b3:8d:d5:61:80:cd:58:ed:39:bc:39:
                    0d:15:f2:49:ff:9a:84:a8:45:97:f6:dc:54:29:7c:
                    b3:33:ed:40:47:53:44:69:03:ec:2b:61:2f:8e:f4:
                    76:73:23:f3:a7:b2:8d:d6:9c:74:db:3f:5b:f4:17:
                    b7:88:90:f9:4c:4e:63:91:68:ba:c9:da:c6:ea:70:
                    2f:78:4e:da:70:e4:bc:43:20:fa:31:3a:3f:72:ca:
                    57:eb:a9:18:3b:19:a9:bb:2f:e4:f3:6a:f1:ee:be:
                    20:6c:bd:ef:98:b5:a3:92:ad:d2:08:fc:cd:d7:4f:
                    b6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:42:69:15:21:DD:6E:7D:45:BF:F7:8E:D8:EE:ED:22:0A:F9:F6:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/74acb797-d55a-3c16-8cd6-b06d7b903689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl

            X509v3 Authority Key Identifier:
                keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48a8:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:96:81:a3:42:d2:71:db:ae:a0:02:03:51:09:5d:f3:a9:a4:
         63:64:1c:be:ca:70:7f:d1:85:e0:dc:0f:27:5b:32:2c:1c:3c:
         ed:a0:ed:57:06:05:de:ff:e8:0d:4c:e6:23:04:fd:a1:ad:bd:
         9c:68:10:f0:24:78:35:e5:ed:6f:c2:d8:e0:d4:2c:2d:76:b2:
         95:e5:7b:96:18:b4:e0:25:a5:11:76:4c:dc:54:04:95:96:64:
         47:7e:c3:6d:f9:1c:f2:dc:9b:c1:57:db:6a:b5:85:14:c2:f8:
         67:26:72:52:88:e1:16:eb:3c:9f:7d:5c:fa:14:04:dd:7d:be:
         cc:ef:4e:69:91:fb:e8:f0:ff:b5:4e:24:31:be:ff:37:d0:76:
         8f:02:3e:22:a8:3e:5e:35:1b:85:c8:fd:7b:26:df:c5:30:54:
         6c:ae:a6:95:47:1b:c5:62:82:0a:0a:38:22:29:7e:87:f3:f6:
         a9:5d:49:b8:5c:07:20:16:a6:5d:ce:bf:8f:e3:04:48:22:ed:
         dd:bd:bc:14:8c:07:ee:c1:6c:e0:9b:93:9b:f6:60:33:9c:3a:
         43:72:ed:3b:21:fd:d2:d8:62:00:43:58:e8:69:38:ba:1c:94:
         a4:ca:fb:84:95:18:ee:62:58:18:58:21:14:1d:18:13:f2:76:
         a6:51:d4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 17:09:44 2024 by rpki-client on console-fra.rpki-client.org