Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0571457d-a13c-324e-b459-d3adaba8f6e6.roa
File:                     0571457d-a13c-324e-b459-d3adaba8f6e6.roa (raw, json)
Hash identifier:          ZAM4mHk8c+XXkGi/mW5Ug1MYzQ+WLEvVVj5ZeXEp4+w=
Subject key identifier:   0D:65:ED:A7:5F:85:84:5C:78:D0:30:EA:48:F2:98:18:98:38:67:1F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845148027CBA8FE5604E59F27D0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0571457d-a13c-324e-b459-d3adaba8f6e6.roa
Signing time:             Sun 03 Mar 2024 02:00:27 +0000
ROA not before:           Sun 03 Mar 2024 02:00:27 +0000
ROA not after:            Sat 01 Jun 2024 01:00:27 +0000
asID:                     17117
IP address blocks:        2001:470:ad::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:14:80:27:cb:a8:fe:56:04:e5:9f:27:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  3 02:00:27 2024 GMT
            Not After : Jun  1 01:00:27 2024 GMT
        Subject: CN=e72f1dbb-588b-4940-bb1c-8580fa675d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:88:6c:31:17:e1:64:a2:f6:fc:db:28:ef:c8:
                    34:4c:19:7c:78:40:fd:83:45:72:a0:23:e8:98:68:
                    8d:33:65:ef:e2:22:77:b9:8e:60:9f:83:21:8a:40:
                    8e:b1:1f:b6:15:68:22:4b:98:0e:9b:7b:e8:35:a7:
                    ff:7b:64:65:a0:78:31:51:00:08:b4:ab:a9:1f:24:
                    50:15:d8:48:67:da:67:97:70:42:b3:4e:a2:7d:73:
                    0b:2a:82:19:45:fc:fc:9f:88:cf:33:13:f8:d7:74:
                    6b:75:91:ea:f0:ce:a2:15:30:51:a7:c8:89:f7:51:
                    ff:f5:6e:b6:51:6f:ca:e9:17:66:3f:50:5c:fc:8b:
                    c5:49:ff:16:b1:27:58:a9:4c:d6:e2:91:08:70:3a:
                    7e:a9:c2:c8:fb:d3:f9:f6:f9:11:8a:0e:8f:c3:bd:
                    ea:50:8e:32:b2:13:90:83:62:84:d9:a2:04:60:bd:
                    63:30:a9:0f:0d:47:13:75:7c:4c:62:b7:1e:93:87:
                    fb:f4:9d:34:4f:f9:e3:40:51:4b:83:7d:f8:0f:3c:
                    6a:ca:f5:7b:da:95:70:d5:1f:0e:97:13:54:84:00:
                    83:b3:ea:27:50:3a:db:56:e8:e6:f7:a0:9c:2c:42:
                    1b:62:fc:99:b2:4a:0c:bb:58:8d:83:87:73:7f:53:
                    23:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:65:ED:A7:5F:85:84:5C:78:D0:30:EA:48:F2:98:18:98:38:67:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0571457d-a13c-324e-b459-d3adaba8f6e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:ad::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:56:74:bc:eb:02:a6:98:95:8e:32:ff:53:4f:fa:ff:f2:68:
         b3:45:c0:4e:bf:50:2a:8e:82:f7:c0:ad:ef:dd:15:45:47:d0:
         e6:25:97:c2:f5:a1:bc:1c:38:47:25:64:e5:99:ef:22:39:0a:
         b6:fa:c1:99:2f:0e:f6:35:bb:fa:23:e4:eb:9d:0b:d1:cc:f9:
         be:0e:40:5b:ef:8e:ce:39:57:4c:a9:c9:f7:a4:a3:4f:92:02:
         e3:25:d0:bd:8a:be:ca:09:a6:21:0d:f0:58:6c:1f:de:76:36:
         e8:07:e4:7e:ca:62:24:b2:b9:3c:14:f5:4e:d8:91:d4:fe:0f:
         67:55:2d:f8:de:38:80:01:1a:32:5e:eb:1e:61:0f:84:b7:4b:
         25:24:c4:38:86:80:9c:dc:a3:46:fb:e4:a8:a8:16:07:4a:19:
         b2:87:5d:1f:34:bc:46:a3:07:15:8c:e7:81:cf:da:f3:7e:b9:
         4f:cc:10:de:50:6e:c0:ed:3f:0c:55:0b:38:dc:94:0c:69:b5:
         47:f0:33:5a:f9:e3:65:81:ec:1d:34:54:26:80:66:2a:37:65:
         8c:71:9d:96:f7:4a:ae:bc:0f:a6:5e:74:57:49:c8:40:6a:96:
         94:8f:0c:81:cd:7b:0d:63:c8:35:66:8b:08:bc:e4:61:df:96:
         a0:cf:ec:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:56:10 2024 by rpki-client on console-fra.rpki-client.org