Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c86d58c-ea3b-34ca-87f5-0d6cb21fd43b.roa
File:                     1c86d58c-ea3b-34ca-87f5-0d6cb21fd43b.roa (raw, json)
Hash identifier:          fDkVYO+zRBgsmEVjbgs/wfygqDS2UBhILZhnoJevbkA=
Subject key identifier:   4F:A9:FB:B5:0C:D2:4D:5C:A0:99:FC:79:2D:1F:50:05:0E:3B:E0:DE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858456822E3A61D251386A7A44B80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c86d58c-ea3b-34ca-87f5-0d6cb21fd43b.roa
Signing time:             Tue 02 Apr 2024 01:00:26 +0000
ROA not before:           Tue 02 Apr 2024 01:00:26 +0000
ROA not after:            Mon 01 Jul 2024 01:00:26 +0000
asID:                     17117
IP address blocks:        2001:470:151::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:68:22:e3:a6:1d:25:13:86:a7:a4:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  2 01:00:26 2024 GMT
            Not After : Jul  1 01:00:26 2024 GMT
        Subject: CN=292de189-df2a-4880-8305-91c2c33a380e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:88:2d:2a:94:d6:97:da:69:39:ea:90:70:35:
                    93:77:8c:d8:6d:dd:55:6b:98:52:ae:d7:91:7c:69:
                    db:57:2a:31:6e:78:79:22:3c:d1:e9:dd:01:e3:52:
                    22:23:68:b7:df:3f:ef:a1:b6:5e:9a:6c:83:9e:21:
                    a9:24:39:32:ba:97:f4:a3:23:b7:31:36:cf:69:bd:
                    b5:95:05:8f:97:4d:61:1a:f3:56:f2:28:10:43:23:
                    68:a0:b6:e1:f4:63:50:87:ce:30:9f:da:40:78:ed:
                    c8:9b:48:88:11:29:20:94:a1:16:b3:c3:50:72:a6:
                    f7:08:75:f7:ed:44:e1:84:b0:51:c0:eb:4d:83:6c:
                    36:3d:f1:a6:52:4b:6f:ab:3b:ef:2f:6e:28:48:38:
                    69:8d:2e:07:89:f3:94:74:19:0f:b7:0b:59:80:d7:
                    ac:ff:08:b2:b6:35:4b:04:08:fa:90:5d:34:56:7a:
                    b3:af:c1:ae:d0:8a:98:ac:83:ce:74:88:52:fc:61:
                    91:82:f2:53:ee:de:5d:3e:6a:8d:28:83:7c:e4:8b:
                    c6:ae:0a:af:f3:44:9a:3a:95:36:a8:e2:ed:ca:45:
                    c0:c5:6b:ca:67:57:ce:35:8d:82:46:b6:22:48:04:
                    2f:7e:96:36:4d:10:fe:23:a8:db:88:34:db:79:a3:
                    cd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A9:FB:B5:0C:D2:4D:5C:A0:99:FC:79:2D:1F:50:05:0E:3B:E0:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c86d58c-ea3b-34ca-87f5-0d6cb21fd43b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:151::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:d4:43:ae:d4:51:8b:46:bf:d8:db:39:68:f3:dd:a0:8d:6f:
         3b:ae:01:1c:05:f3:7d:7f:e2:db:46:72:09:9f:2d:d4:7e:14:
         4a:25:57:57:25:d0:e0:90:cc:64:35:1c:8a:f6:64:ff:bb:a3:
         14:80:d2:cc:41:33:95:bd:1b:83:e4:9a:7d:9b:30:4d:5d:dc:
         f1:6c:d9:0d:0d:56:6d:b1:be:fc:70:a3:9f:db:1e:87:23:f1:
         d6:a0:c7:ed:13:6f:62:d4:2d:ea:b7:47:da:d1:79:80:45:3a:
         cd:df:90:17:ff:4e:fa:a9:9a:61:9d:43:db:6f:84:1f:61:5b:
         bf:d5:e4:d1:84:87:f4:06:22:19:be:94:45:42:45:27:2a:1e:
         46:53:72:9e:d4:f2:87:62:b2:d3:68:0f:d9:17:c8:16:c9:88:
         7c:a9:87:39:0c:06:a2:b7:8f:d3:23:cc:c1:63:9c:7a:37:9f:
         63:da:f1:e9:de:e8:09:47:30:4e:14:f8:f4:63:78:1b:79:92:
         85:ce:17:02:6c:7d:1a:30:bc:5b:9f:b6:d4:3c:21:f7:38:a2:
         74:6d:b4:3b:1a:f1:1b:35:51:e2:b9:f9:e7:70:f3:04:7d:6a:
         2a:1b:e8:5b:bd:d2:e9:8c:14:4f:4e:c9:57:e7:d5:56:0a:16:
         76:ba:8c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:50:41 2024 by rpki-client on console-ams.rpki-client.org