Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0057f85a-c6bb-3ee8-a3f6-0c2630cff82d.roa
File:                     0057f85a-c6bb-3ee8-a3f6-0c2630cff82d.roa (raw, json)
Hash identifier:          DUTpRRtXim1eFyBsOTIoM7smbiwybSQMtlwbc6bv+EE=
Subject key identifier:   CB:20:EA:16:2A:8F:4D:3E:C2:9B:2C:53:BA:F9:AF:C2:86:68:B0:17
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845B64E087154175740EBD9CC80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0057f85a-c6bb-3ee8-a3f6-0c2630cff82d.roa
Signing time:             Tue 30 Apr 2024 01:00:25 +0000
ROA not before:           Tue 30 Apr 2024 01:00:25 +0000
ROA not after:            Mon 29 Jul 2024 01:00:25 +0000
asID:                     25625
IP address blocks:        2001:470:188::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b6:4e:08:71:54:17:57:40:eb:d9:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 30 01:00:25 2024 GMT
            Not After : Jul 29 01:00:25 2024 GMT
        Subject: CN=d98bfe02-25c3-4e8f-bee0-9c77af63f1c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:87:c0:7e:57:3b:57:8e:54:98:5b:99:14:d7:
                    14:b0:1a:e6:fa:3c:05:63:0e:a1:92:fa:74:3d:0c:
                    d6:c0:f1:6b:a8:f8:ef:0e:4e:ea:f8:5e:52:71:f4:
                    13:30:5b:61:75:49:26:cd:2a:ab:3e:ba:19:bc:60:
                    9a:03:ce:89:5b:0b:63:53:77:6f:25:fc:ee:6b:1b:
                    02:65:98:5d:1e:bb:f1:bd:68:6f:93:ff:62:a1:7d:
                    af:f0:6b:1a:44:f1:9c:7c:d3:7d:31:3b:3c:66:8f:
                    c3:cd:9b:3d:fa:8c:d9:cb:0d:01:e7:25:51:14:68:
                    13:13:43:a1:62:2c:e3:7e:3d:fa:a9:82:c2:32:94:
                    85:79:ef:f5:75:29:f1:ae:de:66:6c:6c:d8:f5:63:
                    72:2f:01:80:76:78:ec:db:f5:79:8a:4a:cd:28:9c:
                    a6:5c:6d:50:c2:fa:63:c1:9c:96:1f:95:0c:72:5c:
                    ef:21:71:b4:d7:c3:2e:4d:b2:de:72:ee:88:83:bc:
                    b5:a3:de:60:cc:3d:77:79:c5:67:9f:1e:71:d3:68:
                    8b:7f:e1:63:05:c0:f4:1f:7b:86:3a:61:ef:b5:be:
                    ab:cb:33:a3:9a:dc:bd:c7:a8:a3:de:e0:d3:76:b1:
                    65:f7:b9:fa:16:d8:3a:b2:e9:d2:18:46:8b:10:82:
                    58:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:20:EA:16:2A:8F:4D:3E:C2:9B:2C:53:BA:F9:AF:C2:86:68:B0:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0057f85a-c6bb-3ee8-a3f6-0c2630cff82d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:188::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:b2:5e:6e:7c:1d:da:dc:cd:53:04:cc:9f:c2:0f:ee:fc:89:
         66:15:9e:f8:79:fc:6e:f0:bf:42:ab:cd:9b:f5:ab:30:af:fb:
         43:d8:b9:78:01:d1:32:af:8f:fc:6f:33:29:08:2e:97:07:6e:
         5b:0e:3f:7a:9e:0f:93:e2:cd:6e:3f:f5:15:91:6f:32:50:e4:
         c8:ae:0a:5b:58:b1:fd:56:ff:1a:9d:1d:69:ac:11:2c:f5:99:
         c6:f0:52:e3:c6:e4:fe:76:1f:bd:6a:6f:3c:04:b5:ef:30:80:
         aa:3a:19:48:16:4b:3e:cb:0b:77:25:df:40:10:b7:36:1e:b0:
         70:64:96:61:b0:35:b3:85:d3:74:70:5b:66:6d:1d:1a:d4:3b:
         30:da:2f:bf:be:51:92:4f:44:d1:17:08:e4:05:fb:b0:3b:64:
         7b:b2:ab:0b:1a:82:e0:44:e8:c0:98:36:ce:49:f5:65:d4:b9:
         cc:41:a3:c7:32:dd:40:e4:dc:ee:ac:8b:0d:d2:53:86:50:93:
         9d:63:f0:c6:6e:bf:f1:83:41:44:5a:dc:50:16:83:8e:5e:de:
         b8:10:83:1e:b1:97:f4:b7:3d:52:d5:23:79:c0:53:a9:3b:10:
         e9:cb:40:d1:ac:00:10:92:f7:da:b4:c0:3d:f4:07:90:9b:82:
         af:15:d9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:09:25 2024 by rpki-client on console-fra.rpki-client.org