Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa
File:                     b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa (raw, json)
Hash identifier:          1FInhrE2So7Vp7dwe45ohM7PheoVmCU2sjMI2fMrkD4=
Subject key identifier:   40:30:2C:85:36:BA:FF:E2:71:FA:89:EC:39:E1:8C:1F:ED:4B:48:AE
Certificate issuer:       /CN=23f061ce-1a61-493b-8f3b-472334453f0d
Certificate serial:       010D0C9F432858453E42A1B00607A424F414F100
Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa
Signing time:             Mon 18 Mar 2024 01:00:25 +0000
ROA not before:           Mon 18 Mar 2024 01:00:25 +0000
ROA not after:            Sun 16 Jun 2024 01:00:25 +0000
asID:                     4185
IP address blocks:        2620:10f:b000::/48 maxlen: 48
                          2620:10f:b070::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3e:42:a1:b0:06:07:a4:24:f4:14:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d
        Validity
            Not Before: Mar 18 01:00:25 2024 GMT
            Not After : Jun 16 01:00:25 2024 GMT
        Subject: CN=0a929670-1ac6-4613-8c4f-569b4f1efa03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:39:0b:bb:db:11:a9:40:b7:e6:1c:04:0e:
                    12:ab:d7:55:d8:68:c6:fd:6c:28:c5:ec:78:33:43:
                    37:ca:e8:64:a4:d1:c1:78:58:a3:db:c6:db:6b:e1:
                    8b:9b:f4:85:a1:2a:04:a8:14:4f:6d:c6:b9:0c:e0:
                    4a:d7:09:23:33:12:ab:3a:ad:8d:c3:3e:93:bc:87:
                    a9:7b:18:fb:8b:45:d1:28:02:05:84:74:a7:dd:ee:
                    23:c0:7e:12:73:ee:29:df:6a:8c:85:bc:25:c0:35:
                    a6:a8:6a:34:7f:78:ea:34:83:ea:e2:bd:d9:df:e5:
                    5a:8c:87:9a:ce:e9:08:24:93:77:c4:58:8c:56:23:
                    e3:1a:dc:f3:ee:30:ba:2e:5a:f8:9b:9c:fc:1a:c7:
                    d3:89:61:0b:6a:65:79:c5:6c:0a:5e:f4:3a:46:0f:
                    c4:15:5e:bc:36:75:89:96:18:5d:ae:01:bc:4c:12:
                    74:0d:b1:9d:f5:1d:40:0c:d6:9f:a2:20:fa:ec:be:
                    d2:38:5f:13:67:e5:67:1f:a4:61:9d:17:76:6b:7b:
                    18:13:ba:8e:d9:70:a1:8d:44:53:6b:6f:a6:9f:bd:
                    f5:44:84:fe:ae:da:de:06:46:a6:e7:98:9a:56:42:
                    81:74:dc:4c:19:d0:b8:c2:89:42:f9:31:93:5d:a7:
                    4e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:30:2C:85:36:BA:FF:E2:71:FA:89:EC:39:E1:8C:1F:ED:4B:48:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:b000::/48
                  2620:10f:b070::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:04:6f:31:5f:70:72:6b:36:8c:41:28:93:60:d4:bb:76:ce:
         16:24:b4:2e:ed:99:eb:31:b5:e4:67:b2:b6:86:45:e2:00:61:
         6f:3c:3a:37:aa:53:b1:59:9a:56:a0:b5:88:64:c5:3b:a4:85:
         51:ff:d8:a7:bd:22:c1:6e:b5:0a:2c:35:37:00:8b:b8:6e:fc:
         74:4e:20:2d:23:82:ad:2f:0e:99:c5:14:c7:12:3a:54:b2:28:
         24:eb:d4:ff:dc:7c:a8:c9:af:3b:b6:57:2a:f6:f0:4b:35:3e:
         77:6a:9e:bc:de:01:58:70:28:47:7f:d2:27:69:c6:a6:8f:f2:
         93:c2:e2:be:33:13:ad:b3:6a:e9:dc:11:2a:5b:5f:06:18:00:
         1d:16:0b:9f:cd:de:68:68:53:ff:81:3a:5b:84:e3:2d:ca:c1:
         c4:97:51:ac:17:8f:da:1d:d7:95:c9:67:57:a4:33:1b:b4:a5:
         96:0d:f6:e0:fa:1b:f4:e4:09:24:7c:8b:21:95:c2:7f:40:01:
         2c:01:d8:05:4e:a3:81:38:69:1c:24:45:fe:d9:ef:32:a0:8c:
         95:8a:07:8e:c0:56:30:dd:dd:e4:92:bb:1e:65:07:b1:09:7a:
         94:89:4c:3b:a0:93:db:d9:a6:53:66:6f:2f:79:f1:5e:64:4d:
         56:64:59:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:15:56 2024 by rpki-client on console-ams.rpki-client.org