Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0c352cbc-b1ca-3380-9a74-f229b310b5e9.roa
File:                     0c352cbc-b1ca-3380-9a74-f229b310b5e9.roa (raw, json)
Hash identifier:          5GnZjT/RuHVcOoeuciqqo5RRfUJZjGDP5Py53+hNeQQ=
Subject key identifier:   DD:9F:1D:C2:45:A2:7F:83:60:80:6E:73:E5:33:0C:79:A1:6E:2C:69
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858453CDD52F1554652D6EDAD2800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0c352cbc-b1ca-3380-9a74-f229b310b5e9.roa
Signing time:             Sun 17 Mar 2024 13:00:30 +0000
ROA not before:           Sun 17 Mar 2024 13:00:30 +0000
ROA not after:            Sat 15 Jun 2024 13:00:30 +0000
asID:                     26311
IP address blocks:        2001:470:261::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3c:dd:52:f1:55:46:52:d6:ed:ad:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 17 13:00:30 2024 GMT
            Not After : Jun 15 13:00:30 2024 GMT
        Subject: CN=38c11066-7dac-4040-8068-ee7e4c218d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:13:12:34:f7:31:fb:2a:34:cd:2a:33:63:ff:
                    97:1f:b1:48:7f:61:12:f6:29:d5:13:d6:71:dd:bb:
                    ab:68:17:cf:f4:4a:cd:6d:0b:e4:7e:9b:e3:84:f4:
                    d2:d3:58:5a:76:f0:4a:0b:f3:6c:37:c7:b4:d8:28:
                    3b:56:72:33:eb:23:37:76:4c:d4:a7:ce:77:54:1b:
                    3a:42:65:0b:3c:4f:a5:59:8f:77:cd:ba:90:90:de:
                    90:61:d9:59:70:65:a9:e6:c5:fd:a6:7e:3a:11:97:
                    cb:66:46:c7:73:a1:80:ba:36:19:d5:2a:60:df:3f:
                    d1:b0:c3:8c:f6:c2:89:35:c2:50:bd:3b:41:89:64:
                    fc:cf:63:e6:82:04:33:f8:1d:87:18:4b:91:68:21:
                    d9:0c:e1:95:7b:ac:d7:58:8f:31:24:19:1e:38:6d:
                    11:46:2a:67:82:76:fc:cc:c3:94:fb:dd:fb:b5:12:
                    e0:50:93:8a:f4:60:b9:3e:a2:8f:48:e7:82:5d:fd:
                    2b:25:07:34:95:64:d2:99:3e:78:e1:52:ef:6b:88:
                    db:4a:27:28:da:1c:eb:d2:67:c6:cd:19:85:ba:70:
                    2b:05:55:70:d7:74:6a:c1:b0:58:f8:31:5b:f8:73:
                    ce:c0:83:d4:dd:a8:98:ec:ff:96:f1:d4:50:64:fa:
                    e5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9F:1D:C2:45:A2:7F:83:60:80:6E:73:E5:33:0C:79:A1:6E:2C:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0c352cbc-b1ca-3380-9a74-f229b310b5e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:261::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:14:23:47:1c:92:53:aa:11:4c:81:ac:30:7a:f8:52:6c:d9:
         52:a4:ea:c5:d8:ad:c5:77:08:83:d9:2f:53:35:0f:a3:5c:74:
         e0:79:79:69:75:b0:a9:bf:57:19:3c:d2:94:2f:b3:ce:21:33:
         99:b4:66:ee:e6:ae:cf:30:eb:2d:94:e9:6d:37:1e:a3:e4:aa:
         6a:2f:27:8c:58:86:0b:8e:12:7f:b2:cb:75:fa:28:68:36:ab:
         ce:3f:bf:19:57:9a:18:1c:2e:78:4c:db:15:9a:0f:16:ad:35:
         98:be:db:37:35:cd:3c:12:62:f8:a4:c8:90:09:75:93:ae:f9:
         81:34:c9:db:5f:54:81:1c:0a:aa:af:d0:6f:37:ac:3f:1b:cf:
         cd:ed:18:e8:23:35:8c:48:73:c5:df:6f:01:83:6b:63:8a:fe:
         9a:6c:09:d3:92:33:7b:43:5c:3e:64:fb:55:39:65:09:38:7b:
         03:fa:f1:85:03:15:26:6f:03:3f:c0:2e:fc:e1:78:4c:7a:91:
         d9:49:60:cf:64:05:45:1f:64:39:ee:39:fa:21:c1:ed:07:a0:
         21:83:9a:10:5d:e6:73:72:8b:39:a6:e6:5e:d6:a9:2f:79:6e:
         23:7e:0b:56:ea:cb:64:58:31:c1:2d:c7:a0:de:5e:48:66:dc:
         b5:dd:66:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:50:41 2024 by rpki-client on console-ams.rpki-client.org