Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0dd7d6cc-21a4-3809-a688-e96b0d031295.roa
File:                     0dd7d6cc-21a4-3809-a688-e96b0d031295.roa (raw, json)
Hash identifier:          UHyQ0ze7UhY4z8zR+nMWtvwIXaqSohGXHyRX31k2D9k=
Subject key identifier:   2C:5A:97:35:C4:3D:46:7D:A4:29:24:7D:71:FC:2D:22:43:CA:60:92
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858457FDDD93A3A84E39AD57E8F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0dd7d6cc-21a4-3809-a688-e96b0d031295.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     1008
IP address blocks:        2001:470:145::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:d9:3a:3a:84:e3:9a:d5:7e:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=a269925d-438b-44c6-be26-ff2fff05619a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a4:87:f8:77:4d:c9:c1:a4:b9:60:ff:71:38:
                    5b:53:80:67:35:1b:aa:39:0b:46:9d:3f:66:da:a0:
                    ac:62:fa:bb:94:05:62:93:64:c4:55:69:d3:6b:d6:
                    3c:f6:bb:1c:17:cf:7f:75:c7:37:99:69:cf:c1:fd:
                    85:a2:fc:53:8a:fc:3c:08:68:57:2c:81:49:64:ee:
                    aa:7d:9e:7d:df:c6:46:1b:ea:26:9c:e2:81:7b:5d:
                    67:7e:12:b0:4d:0f:a6:a5:03:27:9d:d8:b6:c1:ee:
                    46:19:62:61:54:f8:20:2c:55:d2:9b:49:4e:10:35:
                    61:e3:da:14:eb:0b:72:0a:8a:aa:5d:be:dd:6d:cf:
                    70:a1:9b:08:bc:b9:a2:20:12:21:5c:13:e3:3e:8f:
                    d8:c6:2c:19:81:d5:55:e7:ee:b1:04:d3:b5:a8:81:
                    46:88:bb:e4:ba:e9:e4:20:6b:b8:12:87:54:7e:1e:
                    ce:34:c4:5b:8d:82:75:86:f2:b1:25:a9:f6:ce:b8:
                    80:7e:37:a1:9a:4c:07:05:92:bd:cf:cc:1b:f6:79:
                    44:13:a5:0f:45:8f:c2:b9:ed:8b:82:48:23:7d:41:
                    2f:78:d9:58:39:74:f5:d1:62:34:05:aa:26:c9:5a:
                    b8:a5:a8:89:04:e6:ce:93:f3:92:a8:69:8e:5b:aa:
                    e1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5A:97:35:C4:3D:46:7D:A4:29:24:7D:71:FC:2D:22:43:CA:60:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0dd7d6cc-21a4-3809-a688-e96b0d031295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:145::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:10:f7:68:1d:00:5d:a0:7f:1e:70:6f:69:f8:30:51:a5:2f:
         0e:6f:f5:fc:ca:3c:30:bb:b9:41:48:95:6f:0a:d5:f7:77:de:
         71:6f:60:66:45:5e:be:b9:48:9a:0d:86:35:72:e8:c9:1a:31:
         f3:dd:b2:b2:4c:9c:95:40:2e:84:05:b0:e1:09:0e:17:98:dc:
         84:f8:5b:76:f3:f4:27:ed:0c:84:cc:a3:ab:04:71:ef:0b:63:
         87:f7:27:92:de:54:a5:7e:83:17:99:0e:37:03:c1:63:73:fd:
         8a:bc:da:bc:44:16:f2:fc:a7:d6:48:63:2f:c0:69:e6:9a:d5:
         c3:65:14:14:dd:0c:52:91:e4:97:ec:ff:d3:86:f8:bb:29:1b:
         79:b2:61:9c:78:36:a1:c7:00:00:b0:84:12:bb:c9:ad:68:1f:
         28:45:bf:fd:7a:23:cb:57:7e:78:26:16:c7:fb:13:0b:76:00:
         e9:99:29:8e:09:55:08:a1:be:c5:19:3b:ab:d8:ad:27:4c:55:
         ec:e3:9e:a0:8e:a4:ec:87:d3:a0:30:ad:35:9e:d6:62:2b:ee:
         1e:96:d5:7c:f7:55:a2:d8:dd:08:ae:8a:c0:96:89:ee:a0:0a:
         b8:54:13:06:ba:27:95:5c:00:66:4b:4a:4c:4f:de:dd:cf:b0:
         c6:6b:b1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:56:11 2024 by rpki-client on console-fra.rpki-client.org