Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/217810a0-746a-3413-84aa-94739e4164c9.roa
File:                     217810a0-746a-3413-84aa-94739e4164c9.roa (raw, json)
Hash identifier:          EPA/KuINyXHDS5PU4fmBzZsQL+QEbnP5oSfO5sd8V8U=
Subject key identifier:   D8:25:2A:16:68:FA:25:74:26:51:1C:3D:71:33:5D:0C:64:AE:2C:38
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858453747F8ACF87844E34341B880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/217810a0-746a-3413-84aa-94739e4164c9.roa
Signing time:             Fri 15 Mar 2024 13:00:32 +0000
ROA not before:           Fri 15 Mar 2024 13:00:32 +0000
ROA not after:            Thu 13 Jun 2024 13:00:32 +0000
asID:                     9416
IP address blocks:        2001:470:25e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:37:47:f8:ac:f8:78:44:e3:43:41:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 15 13:00:32 2024 GMT
            Not After : Jun 13 13:00:32 2024 GMT
        Subject: CN=b410bec3-7948-4be6-9fd4-fe2c769ebdbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9e:f3:40:32:86:38:df:37:7b:3c:98:05:f3:
                    e0:a1:e4:a2:9d:e4:f7:80:0d:89:f4:9d:17:ce:17:
                    82:10:8f:02:2c:7d:83:bc:79:44:3f:39:e5:f1:db:
                    b8:f7:72:82:a6:6e:13:75:15:24:e2:d5:77:d5:ea:
                    58:d1:1d:ef:74:e5:fd:d9:13:f1:ea:c6:ff:ba:0c:
                    dc:1a:35:4d:33:e9:50:54:0b:f0:fa:3b:e4:17:57:
                    cf:96:47:63:0f:ff:72:9e:a5:3c:20:9e:b3:8f:06:
                    de:e7:22:e4:95:95:84:09:f4:45:31:4f:a1:0c:dd:
                    b0:14:ec:af:a5:0d:82:c1:05:b6:cf:63:26:0f:e0:
                    40:3d:46:ed:b1:cc:b0:58:c3:17:b3:f6:7e:64:23:
                    97:74:bf:9b:4e:4e:40:b2:87:ea:d3:2a:8b:3d:33:
                    e0:d3:a1:20:e5:e0:5c:ea:4d:7d:e9:08:a7:24:f7:
                    96:5b:f6:22:55:8e:aa:d7:33:03:3d:89:5e:90:79:
                    0b:8e:dc:60:5d:46:e9:f8:b0:dc:51:6c:88:2d:ea:
                    80:e8:05:33:d6:ab:c8:33:f5:8f:c2:6b:f6:c9:96:
                    9b:3d:81:70:b7:75:72:0f:61:6d:3a:c7:05:41:05:
                    bc:bd:41:0b:f3:30:86:8f:43:33:bd:4e:7e:25:d9:
                    02:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:25:2A:16:68:FA:25:74:26:51:1C:3D:71:33:5D:0C:64:AE:2C:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/217810a0-746a-3413-84aa-94739e4164c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:25e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:ab:c8:bf:f2:8d:cf:e9:8a:d8:cf:e1:08:0c:4a:e4:b8:16:
         18:33:ec:54:6d:32:17:d3:19:c6:75:e7:60:3c:14:5e:c4:c4:
         f4:bc:32:34:94:8b:3f:7d:92:b9:a0:9f:a5:a0:7c:ff:fb:ec:
         8e:27:7f:19:35:f4:b7:9c:eb:73:5d:69:60:bd:fe:a3:44:b6:
         32:78:fe:ef:72:b3:66:85:6b:d1:48:92:c4:9c:d5:25:26:ab:
         35:38:ad:6d:df:55:c2:7f:bc:3f:3b:a4:46:00:06:f5:9c:ab:
         66:17:84:3e:1c:20:fd:f0:00:83:6d:3b:b9:64:27:3d:40:e8:
         3f:0c:03:91:a0:4e:31:86:05:53:7e:a3:44:7a:09:cc:28:13:
         0e:ce:71:b4:17:20:53:6d:e5:39:16:a6:59:0c:52:2c:f7:ca:
         cb:dd:05:a8:62:f9:e1:74:e9:98:82:16:52:67:b4:93:de:4b:
         25:21:9f:bc:f2:48:30:24:49:19:96:bf:15:44:89:51:f8:38:
         08:0f:84:09:0d:de:fd:a4:7e:d7:7f:e6:74:8f:c8:b4:4d:8f:
         9c:08:2c:b9:1a:9d:09:75:3f:f8:32:57:23:d1:36:ce:d9:38:
         3c:90:eb:de:6d:b6:6e:2b:32:35:0c:ff:45:a2:3d:ee:df:db:
         80:7b:c9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:17:08 2024 by rpki-client on console-fra.rpki-client.org