Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/9d0b6b72-0245-3b5d-b7db-598515453663.roa
File:                     9d0b6b72-0245-3b5d-b7db-598515453663.roa (raw, json)
Hash identifier:          Csftr2sGZz992R21ocFSsdmajpBHvVfh7GZZpERZuwM=
Subject key identifier:   2D:98:24:FF:AA:AB:44:17:23:DE:84:74:76:13:7F:6C:35:65:90:99
Certificate issuer:       /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
Certificate serial:       010D0C9F4328584532465448514DEFFD03A8EE80
Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/9d0b6b72-0245-3b5d-b7db-598515453663.roa
Signing time:             Wed 13 Mar 2024 17:58:12 +0000
ROA not before:           Wed 13 Mar 2024 17:58:12 +0000
ROA not after:            Tue 11 Jun 2024 17:58:12 +0000
asID:                     237
IP address blocks:        2001:48a8:7800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:46:54:48:51:4d:ef:fd:03:a8:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
        Validity
            Not Before: Mar 13 17:58:12 2024 GMT
            Not After : Jun 11 17:58:12 2024 GMT
        Subject: CN=ddfc79ec-0693-463b-8c80-3eb6ef113e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b8:b3:a6:e3:f4:c7:45:d2:49:62:8d:5d:b3:
                    4c:96:85:93:a7:97:65:4f:be:c3:17:21:a3:4f:76:
                    0e:52:c7:c9:d9:bb:4b:03:56:b6:26:57:a6:a9:e3:
                    fa:50:b8:61:fe:0a:c6:78:06:4d:3d:3a:ec:48:4b:
                    c0:68:b2:aa:bf:e8:7e:71:e4:00:b5:63:6f:da:70:
                    e2:75:9e:7b:e9:13:79:25:83:4b:90:95:94:76:55:
                    d2:16:59:25:c8:4a:5e:7d:20:4b:62:18:8a:c5:d4:
                    ed:29:87:94:c4:84:77:92:08:af:fa:f2:eb:29:a9:
                    01:22:f3:59:32:f1:3e:20:d7:12:74:0c:bd:6a:b0:
                    0e:83:e6:5f:7f:e7:26:56:f8:37:99:90:e6:f1:47:
                    d2:e9:d3:b8:e1:aa:10:5f:7e:78:73:4a:95:ce:61:
                    14:d2:ba:a4:f3:da:4d:3a:d0:2a:6b:7d:27:72:6d:
                    6e:90:5b:35:c4:44:b0:1d:f9:57:60:61:e4:e5:fb:
                    4e:c8:47:ea:9f:9f:6b:f4:5b:bc:27:b2:7c:79:5f:
                    0d:a1:73:40:71:fc:c4:1d:35:65:3d:9b:bd:dd:ef:
                    97:21:31:8c:a5:f6:c1:f9:34:6f:5e:18:6c:0c:62:
                    3f:5c:96:cd:67:b0:88:ff:96:f7:e1:40:7b:c5:81:
                    1e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:98:24:FF:AA:AB:44:17:23:DE:84:74:76:13:7F:6C:35:65:90:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/9d0b6b72-0245-3b5d-b7db-598515453663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl

            X509v3 Authority Key Identifier:
                keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48a8:7800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:e0:91:ac:00:7a:fb:00:ad:ff:b5:7d:12:09:fe:c1:75:4c:
         31:ea:41:0d:2a:4c:c9:fc:d9:19:be:14:b8:53:5c:91:85:a3:
         75:07:a9:b0:79:43:21:85:25:23:c8:6e:6e:5b:cc:55:10:ac:
         05:ee:d1:70:8e:8d:e5:ac:52:06:9b:f9:c7:f6:8f:7c:5c:50:
         8e:5a:26:86:0f:e4:4e:0e:ac:0f:10:4b:85:56:0d:36:c1:58:
         be:53:01:5a:49:91:e2:92:42:53:59:53:98:53:d5:cb:30:9a:
         20:b4:7a:26:70:9e:3a:07:19:92:94:a0:12:c8:e4:49:b6:7b:
         75:ef:e3:bd:6e:27:86:90:24:85:19:91:9b:7d:3e:68:05:b4:
         62:d5:d0:23:bc:82:0a:96:29:87:dc:1d:29:81:b3:a8:d7:50:
         ec:3a:52:c0:9e:45:f2:2d:ad:92:da:a6:a1:49:1f:fb:ce:88:
         49:84:c0:13:17:3e:75:ab:fe:ad:04:0e:56:cd:bd:69:d2:6f:
         06:e5:05:70:44:5b:d5:fd:a4:4e:41:f8:84:22:3c:48:97:ca:
         77:cf:6b:c8:c8:19:16:6e:66:cb:4c:b9:fb:77:03:43:1b:5c:
         77:3a:ec:a6:f2:a1:8c:b3:4a:4a:b7:25:7d:70:52:c2:3f:0a:
         8e:24:38:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 02:07:13 2024 by rpki-client on console-fra.rpki-client.org