Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/189517a0-16ad-3279-a639-25b88dfb1504.roa
File:                     189517a0-16ad-3279-a639-25b88dfb1504.roa (raw, json)
Hash identifier:          uRwf1aq8yL3mjO9m8NbJ9UVm7SP56j1UMvXvazAlW2k=
Subject key identifier:   76:ED:97:52:48:21:11:0C:8A:4B:73:66:2A:6A:E4:BE:D6:87:9B:2C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584594DCEFB52258D7D716E31B40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/189517a0-16ad-3279-a639-25b88dfb1504.roa
Signing time:             Thu 18 Apr 2024 01:30:52 +0000
ROA not before:           Thu 18 Apr 2024 01:30:52 +0000
ROA not after:            Wed 17 Jul 2024 01:30:52 +0000
asID:                     400765
IP address blocks:        2001:470:2de::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:94:dc:ef:b5:22:58:d7:d7:16:e3:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 18 01:30:52 2024 GMT
            Not After : Jul 17 01:30:52 2024 GMT
        Subject: CN=7ee4c10b-ff99-4776-8c37-e9193ac3d50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:f4:ce:ff:bf:cb:9f:4e:9b:61:cf:60:35:
                    68:f9:e0:ce:17:c4:f0:b1:bf:61:e4:ca:7b:52:b2:
                    fa:08:a7:84:25:f1:fe:df:a3:9c:2f:55:e6:24:01:
                    75:63:a7:1f:53:58:5b:52:f5:00:69:56:96:f1:1b:
                    05:77:7b:fe:f4:4c:1c:b3:c5:38:d9:74:f8:51:fd:
                    8c:b3:ed:33:7b:43:76:f3:1b:ba:a5:ec:88:35:3c:
                    36:54:56:f8:8c:3f:2f:e4:30:71:17:cd:53:a9:98:
                    28:d7:52:0e:97:f9:45:fe:ef:06:a7:a9:2a:e3:f0:
                    14:6f:6f:85:1d:46:8e:fb:ab:58:3e:bd:3e:e5:b7:
                    92:30:95:be:ed:0a:9a:f6:9c:c3:2a:f6:09:b1:c4:
                    e7:9f:8b:86:4c:71:64:b5:88:57:e6:18:15:76:74:
                    e5:4c:a6:b7:f5:40:c2:a4:66:26:e4:d8:cb:17:e3:
                    49:fa:d1:77:3e:7d:13:77:86:c2:70:88:70:4e:6f:
                    a5:03:ca:ed:ea:51:1f:b9:97:79:b8:2e:1b:f0:73:
                    51:e4:3a:64:97:e1:c5:46:c5:e9:30:76:90:b2:d0:
                    06:f9:1a:6e:a0:fc:5d:7f:c2:bc:2b:53:62:f3:b6:
                    01:e6:88:26:63:85:2a:ff:9e:22:ba:60:81:09:09:
                    47:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:ED:97:52:48:21:11:0C:8A:4B:73:66:2A:6A:E4:BE:D6:87:9B:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/189517a0-16ad-3279-a639-25b88dfb1504.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2de::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:7e:16:46:48:5f:da:b5:a6:4f:0a:97:2d:b9:0a:61:c1:07:
         ff:49:09:d0:c5:8d:68:e2:e9:fc:89:8b:fb:4f:ca:6b:42:0a:
         44:52:07:0c:a0:39:a9:08:cb:f4:b2:0e:7f:9d:b4:c4:fb:1f:
         16:d8:82:ab:ba:26:e7:c8:46:3b:ce:a4:af:c8:fa:34:12:38:
         e4:00:c8:6e:94:75:b2:7c:bb:c1:58:bf:b1:eb:79:d0:89:f5:
         cb:89:10:83:f9:e0:22:df:c3:8d:60:90:c5:8b:54:cf:62:19:
         21:ae:78:3d:a1:56:cb:d5:39:fc:86:da:3f:8e:b8:71:4f:f4:
         b6:91:71:d5:92:b0:8e:8d:8f:f6:12:24:dc:47:70:ac:b3:95:
         6c:7e:a6:87:3a:86:9a:98:96:c6:c0:0a:0d:6a:ee:26:75:c5:
         b7:a4:65:1e:6c:68:50:6d:8c:22:10:af:d2:76:76:f5:a4:17:
         3e:08:9b:e7:5c:7d:e4:17:6d:92:87:82:9e:43:bb:b9:e2:c3:
         3d:ae:e1:d2:74:4a:29:34:83:a7:5f:1f:4b:29:cb:42:df:10:
         b4:d8:93:86:08:53:90:71:f5:28:31:75:24:c9:22:d1:50:66:
         e3:d4:6e:29:54:ae:e2:af:0c:ac:a6:e3:05:ce:32:f1:84:6d:
         1f:6d:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:20:34 2024 by rpki-client on console-ams.rpki-client.org