Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0452df61-e995-35e9-86e5-b10629f6d4f2.roa
File:                     0452df61-e995-35e9-86e5-b10629f6d4f2.roa (raw, json)
Hash identifier:          BJVwEHUN4ORRcPDyvP64RiJ0zDyqp+XusVyj61h1LVM=
Subject key identifier:   58:F5:A2:78:24:5D:9B:21:29:C1:61:B7:75:38:FE:6C:E2:F5:94:44
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584505256CD73C239A7FB34924A4
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0452df61-e995-35e9-86e5-b10629f6d4f2.roa
Signing time:             Mon 26 Feb 2024 14:00:31 +0000
ROA not before:           Mon 26 Feb 2024 14:00:31 +0000
ROA not after:            Sun 26 May 2024 13:00:31 +0000
asID:                     151374
IP address blocks:        2001:470:b4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:25:6c:d7:3c:23:9a:7f:b3:49:24:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 26 14:00:31 2024 GMT
            Not After : May 26 13:00:31 2024 GMT
        Subject: CN=9a50c777-4d85-4ae1-ad54-a4f77eac5ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b9:fa:31:22:a6:0b:8c:6b:76:e6:c8:55:00:
                    01:63:c3:bf:e0:e5:fe:4b:b4:be:90:87:54:20:57:
                    44:80:3d:68:3c:c7:80:ee:75:5b:0f:34:37:6e:59:
                    0e:ea:81:3d:17:c5:7a:a8:9d:ff:50:29:21:0c:6f:
                    87:45:2e:43:58:40:1b:46:12:d5:47:8b:ef:df:92:
                    2d:b4:e4:6a:7c:db:b8:c1:42:8a:f2:06:c2:bc:ab:
                    16:ba:09:9e:03:b9:3e:ea:3d:52:e5:24:8c:e5:19:
                    33:84:82:3d:af:81:71:a4:07:67:16:8c:c1:93:1d:
                    ac:64:41:5b:e2:78:4b:41:e9:5e:cd:d9:06:99:01:
                    71:4a:5c:fb:6e:cc:ea:2f:05:6d:a4:5f:86:23:81:
                    45:db:c5:54:78:58:e6:b2:8d:66:52:ad:28:3e:e1:
                    c3:53:6b:66:d2:5d:59:54:69:22:6e:7f:cf:77:99:
                    29:05:bb:b2:2e:05:5c:84:53:79:63:0a:18:51:17:
                    ac:21:7e:62:4d:31:e7:4d:85:b9:6e:e8:21:f4:42:
                    bf:8c:9d:5e:ba:e9:e8:e8:92:8f:b4:85:9b:89:30:
                    99:d7:fb:e7:74:74:30:71:17:ab:10:bd:b4:17:d7:
                    1b:9c:f6:b5:4f:ac:f6:db:46:a5:a3:f3:36:2f:97:
                    1b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F5:A2:78:24:5D:9B:21:29:C1:61:B7:75:38:FE:6C:E2:F5:94:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0452df61-e995-35e9-86e5-b10629f6d4f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:b4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:dd:77:89:21:7c:13:7c:5e:6c:9a:f7:56:02:00:e8:31:eb:
         a3:5f:db:42:72:f5:ac:67:90:b5:7b:59:1c:cc:07:4f:40:7a:
         03:d9:5e:42:bf:89:04:c8:13:c6:c0:f0:89:73:ea:7b:39:4e:
         60:39:8b:b6:ae:ed:c8:c2:a0:63:04:45:54:27:fa:e9:56:8f:
         bb:9d:20:74:44:6f:82:48:cb:53:10:a9:da:40:90:72:64:08:
         3b:80:38:0a:44:1c:b1:b1:c5:35:2d:d7:63:2a:e3:b9:04:c4:
         eb:d3:83:dc:3f:8a:e4:ac:b5:69:ea:dd:c0:d2:48:d7:93:9d:
         fa:2a:91:0f:af:ca:32:98:0c:8d:32:c8:0c:e3:cb:37:a1:3c:
         bf:99:8f:15:96:5e:c4:21:59:be:df:e0:ab:a4:fd:8f:3d:ce:
         55:3c:88:c7:92:07:fd:51:13:7f:04:50:7d:3a:aa:71:bd:28:
         02:5c:0c:1a:50:e6:76:41:7a:55:1c:f9:30:4b:cb:19:8b:ca:
         f0:ad:1b:04:4d:10:50:85:16:12:04:c3:7c:36:f7:36:39:10:
         ac:11:16:19:4e:33:91:11:a1:64:50:17:d1:cf:de:4c:ee:47:
         94:fb:9e:b9:7d:51:ab:f6:89:a8:d2:79:a6:17:a1:bc:cf:c7:
         db:14:dc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:13:31 2024 by rpki-client on console-fra.rpki-client.org