Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/01def8ab-b2d5-3097-b1c6-801f14c9d253.roa
File:                     01def8ab-b2d5-3097-b1c6-801f14c9d253.roa (raw, json)
Hash identifier:          I7rKOZSpxDaDE0j8GiLR3cuOEVs/+RxH1zrXFwuiJzQ=
Subject key identifier:   B6:CF:9A:58:41:23:E0:3A:99:6D:8B:D2:27:8D:1E:E6:6A:88:18:0C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844EAAEEE822B16558D2DBA6E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/01def8ab-b2d5-3097-b1c6-801f14c9d253.roa
Signing time:             Sat 17 Feb 2024 02:30:45 +0000
ROA not before:           Sat 17 Feb 2024 02:30:45 +0000
ROA not after:            Fri 17 May 2024 01:30:45 +0000
asID:                     7480
IP address blocks:        2001:470:299::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ea:ae:ee:82:2b:16:55:8d:2d:ba:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 17 02:30:45 2024 GMT
            Not After : May 17 01:30:45 2024 GMT
        Subject: CN=72af3979-c6da-4dfa-b6a5-67a59f798ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7b:cf:9b:fb:63:c4:9d:e2:03:a7:f9:b1:5f:
                    35:7a:1f:a9:bd:01:ea:65:b8:05:16:c9:07:48:b0:
                    8d:7b:cc:d2:d5:07:a3:b3:5e:b4:3c:41:1b:67:91:
                    f6:2e:5d:81:8e:b6:48:a4:2f:d4:8d:dd:d7:17:d5:
                    7e:d4:1f:7b:05:65:d6:74:d2:f1:32:9a:17:2e:2e:
                    08:1f:c9:76:fe:56:7e:b7:9c:67:41:02:3a:4d:80:
                    71:3c:f6:6c:aa:01:78:c3:08:e6:b4:9e:1a:70:de:
                    17:e1:52:e2:01:63:ea:e3:94:ed:d7:2c:b1:84:06:
                    45:5a:cd:a4:78:41:4c:25:c3:12:5a:25:d5:c3:00:
                    d9:a5:0b:2a:e5:12:13:59:95:ec:c7:11:b7:d0:27:
                    12:2e:f6:1d:4b:8e:3c:03:6a:30:a4:08:fe:1f:92:
                    9e:56:62:d7:45:11:c7:86:37:25:35:0f:d3:97:74:
                    10:d0:c5:24:46:55:65:dd:e6:99:7e:b9:4c:d7:3f:
                    1b:bc:e1:e8:53:67:ea:89:89:be:ed:a4:72:ea:2b:
                    e2:4a:8b:13:fb:d2:40:12:58:28:b9:c2:ab:f4:93:
                    a2:9e:89:d3:be:ef:76:04:50:93:e1:87:12:f8:0f:
                    78:38:23:04:64:ca:d4:c5:78:13:82:2d:c8:32:d6:
                    8c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CF:9A:58:41:23:E0:3A:99:6D:8B:D2:27:8D:1E:E6:6A:88:18:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/01def8ab-b2d5-3097-b1c6-801f14c9d253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:299::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:39:f6:d4:ba:e0:b7:1a:a1:ec:0f:75:92:a0:d7:86:d9:ba:
         98:65:9c:31:79:6a:1c:44:e2:91:6f:87:f3:26:1f:66:a0:3c:
         0f:0f:e4:83:b2:39:bb:f4:41:3f:aa:dd:4c:7e:d2:3d:b5:9c:
         b1:67:90:a1:67:50:68:9a:c4:98:e1:3f:e5:fc:4f:98:bc:dc:
         92:4b:cc:59:da:e1:05:c0:cd:c6:2b:ea:07:d0:da:94:f9:2d:
         12:c8:72:8d:a3:76:28:2e:c9:10:1e:aa:4b:2a:92:ab:b3:8c:
         bb:bf:27:ac:6b:3e:57:f6:07:92:43:06:b1:fd:1b:c6:1d:7b:
         06:e2:1c:f0:bd:7b:0c:63:ca:b4:92:7c:39:4a:81:ca:92:1f:
         84:14:0f:8c:a7:83:f6:97:7f:04:95:5b:90:b6:b9:1f:c8:19:
         03:57:80:a8:82:a1:67:22:a8:e1:2d:78:66:40:dd:4a:7a:80:
         77:16:8e:35:ab:4d:a9:bc:90:07:ab:a1:c1:c5:4e:12:53:f8:
         ec:7e:19:7c:33:05:8c:95:4d:1c:a2:23:b9:18:07:0f:fc:23:
         3f:bc:4d:37:df:b9:8f:d5:ce:99:ee:03:ed:58:d1:3e:be:29:
         b0:e0:63:3a:48:bb:e7:5d:c8:99:ce:9c:af:76:79:c7:64:eb:
         9c:39:13:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 17:12:41 2024 by rpki-client on console-ams.rpki-client.org