Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1045f31e-6b22-37bf-9fbe-1a014f0ee38f.roa
File:                     1045f31e-6b22-37bf-9fbe-1a014f0ee38f.roa (raw, json)
Hash identifier:          HyUQPQ7SwdqU2WoEjsCvOc6ZEaUQywV2uDmQpB2f+9s=
Subject key identifier:   32:8D:0A:3C:75:70:59:F9:DE:DB:DC:A6:40:AF:CF:3D:E4:D9:21:F3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F895774B6465B5430C4CDB80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1045f31e-6b22-37bf-9fbe-1a014f0ee38f.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     396097
IP address blocks:        2001:470:ce::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:77:4b:64:65:b5:43:0c:4c:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=03ade6be-28c5-4e36-bb97-3b40feb8b34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:ce:dd:53:9e:c7:4f:07:6b:62:b0:ff:46:
                    b9:e1:93:7d:1c:a5:53:67:c0:5c:35:5e:b7:6b:92:
                    de:39:67:88:49:84:e6:46:3d:8d:de:55:9d:a7:ec:
                    aa:47:00:65:a7:62:d0:02:e0:8a:71:eb:a6:91:cb:
                    1a:05:90:01:ef:54:50:5f:39:c0:eb:00:d9:1c:47:
                    fc:11:ba:fa:56:a6:da:0f:a1:27:0c:87:2a:de:e0:
                    ad:fa:9e:55:1a:b5:72:4d:b0:90:58:0b:b5:e6:c4:
                    d9:62:ba:6e:85:9c:9e:22:06:a1:a0:58:a0:ac:e1:
                    d9:cb:68:5d:0c:4f:36:f9:ee:cc:ee:40:8c:b5:a6:
                    e4:6f:ad:8a:c1:f2:71:d9:9b:60:66:0f:ba:09:9c:
                    95:c5:bd:98:2a:ea:02:82:64:2c:6c:e2:34:04:f1:
                    97:ed:e3:95:e2:06:49:35:d2:1e:ba:15:c3:a9:80:
                    c9:4c:08:85:1e:62:60:e4:04:67:c4:d9:eb:20:9f:
                    cc:14:29:94:73:ec:3c:bd:8b:99:54:12:ef:b7:ec:
                    e8:6c:ca:a7:c9:d6:26:0d:1e:90:7f:45:06:92:0c:
                    1c:95:14:54:0d:f3:03:f1:bc:01:99:28:0c:97:a5:
                    47:38:6d:bf:3b:35:55:6c:a9:de:5b:d2:8e:44:4b:
                    91:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8D:0A:3C:75:70:59:F9:DE:DB:DC:A6:40:AF:CF:3D:E4:D9:21:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1045f31e-6b22-37bf-9fbe-1a014f0ee38f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:ce::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:9c:e5:04:92:c3:f0:77:e8:c8:b8:a6:5c:43:0f:29:26:7b:
         0a:32:79:7a:9f:33:44:3e:1a:8d:3e:9c:df:81:ed:c4:c5:5b:
         e7:f5:ba:e1:35:3a:2d:39:9d:20:b4:04:9c:5d:d1:3c:a5:29:
         b1:8c:df:83:f9:19:3c:e9:9b:dd:75:f6:5f:29:68:01:bd:8d:
         af:80:b5:0c:24:30:f4:e5:51:fb:9c:82:e5:0e:d6:65:27:c2:
         ed:ab:8e:8a:29:38:01:28:c3:16:ff:aa:c4:86:fd:21:3a:12:
         3d:11:3c:cf:b6:d5:b6:25:2f:4d:42:5b:ff:6e:a1:71:0c:b4:
         3d:ac:c9:f2:36:ee:fe:e8:5b:8e:09:ca:cf:60:fc:b6:ba:2a:
         2c:c3:db:f9:4f:9e:f3:da:10:88:b8:2b:32:2c:92:9f:b4:3b:
         a0:60:10:5f:6c:6d:29:e0:98:6b:2a:58:13:8f:e8:fd:ad:09:
         e3:8b:80:d8:a0:59:29:e5:96:27:ea:d7:34:bf:77:19:23:5c:
         ad:b5:5b:34:84:4a:1a:ac:55:aa:4f:8f:46:e4:24:db:85:bc:
         1c:81:43:45:ac:93:99:f2:04:8f:fc:64:07:c2:6d:a3:e8:d2:
         6a:69:7a:c0:89:64:df:31:83:cd:de:03:fd:a9:a8:65:5c:d2:
         d2:11:4e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:09:13 2024 by rpki-client on console-ams.rpki-client.org