Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26af95f6-dc6f-34c4-905d-93cd444a3d49.roa
File:                     26af95f6-dc6f-34c4-905d-93cd444a3d49.roa (raw, json)
Hash identifier:          GM23nbHhNpEZl8oe7x9RtTB+M0hbiT0k8o32b9orcOI=
Subject key identifier:   74:96:24:C9:36:46:A1:11:30:5C:94:8A:CB:BD:0D:B4:0E:1D:40:C0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845211051012F7EBF0240B08E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26af95f6-dc6f-34c4-905d-93cd444a3d49.roa
Signing time:             Thu 07 Mar 2024 14:00:32 +0000
ROA not before:           Thu 07 Mar 2024 14:00:32 +0000
ROA not after:            Wed 05 Jun 2024 13:00:32 +0000
asID:                     398358
IP address blocks:        2001:470:1c1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:21:10:51:01:2f:7e:bf:02:40:b0:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  7 14:00:32 2024 GMT
            Not After : Jun  5 13:00:32 2024 GMT
        Subject: CN=5ee2babb-1df4-4a38-8ffd-ae2dc2c02afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d4:0d:e8:52:f3:75:bf:20:6d:d9:e7:2b:49:
                    8c:f4:f3:dc:f3:73:ff:90:24:a2:4e:e7:79:0f:c8:
                    06:86:c1:d2:0e:36:13:1e:ca:8c:6a:32:19:af:6a:
                    a2:79:f8:a3:8c:fb:c3:4f:ab:b8:f6:6b:4c:87:b0:
                    45:fa:d5:fa:b4:95:55:a8:59:7c:54:2a:10:5f:11:
                    0a:65:88:07:39:02:75:8c:a3:ae:48:fd:86:da:7b:
                    17:83:86:e2:50:ed:17:a8:1e:5c:cc:5b:84:83:b4:
                    f2:61:84:7d:e6:da:c4:3c:74:d0:f2:3a:72:50:20:
                    a3:52:85:86:bf:89:bf:12:58:2d:de:0c:3b:b4:7f:
                    52:84:4a:4e:98:83:de:06:0b:3b:fe:65:1b:39:8f:
                    f0:6a:00:7f:e3:22:51:94:83:c1:18:d4:8a:b6:d1:
                    a4:4b:5e:06:68:98:fd:75:0a:83:67:f4:64:eb:43:
                    df:ac:9e:5c:46:08:b8:47:ad:10:32:e9:3b:de:04:
                    98:37:e0:da:34:4a:b9:86:d0:80:dd:cf:f7:04:56:
                    d4:b9:69:f2:c4:a9:37:42:38:d5:a4:ec:a4:9a:27:
                    ab:a6:90:9c:a6:c5:a6:95:29:9e:57:f4:82:95:45:
                    77:79:8c:74:06:a0:cd:68:13:be:74:0d:d0:b5:61:
                    32:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:96:24:C9:36:46:A1:11:30:5C:94:8A:CB:BD:0D:B4:0E:1D:40:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26af95f6-dc6f-34c4-905d-93cd444a3d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:3c:0e:7a:53:ad:3b:34:9f:b3:0f:0a:06:ad:52:d9:2c:82:
         f2:c3:55:3f:d9:78:d7:f9:2b:7d:eb:c2:fa:2c:4c:2e:aa:0d:
         7e:02:82:3d:6e:76:ec:27:c4:1b:63:43:d2:2b:6c:aa:b0:22:
         57:f2:87:2e:eb:f5:fa:05:9b:f7:42:ca:8f:eb:df:d7:43:2c:
         0b:2b:fe:5e:e0:61:6a:74:2f:3b:6e:68:c1:83:09:e3:15:fb:
         50:bc:b9:54:b4:f7:41:39:d0:53:8c:13:4e:aa:b6:42:a5:3c:
         b0:80:60:2e:76:51:c3:a9:e6:df:d9:48:88:74:4f:f5:b6:7b:
         60:2f:e3:06:05:47:e1:13:6b:6b:23:01:59:16:64:f2:a0:64:
         2a:cf:97:8b:99:8e:6c:2f:87:a3:da:31:14:ac:3c:46:1d:6f:
         a4:67:4e:00:de:46:c1:69:74:ad:c6:59:e8:54:c5:e7:ac:c4:
         89:d2:c6:09:d9:86:19:f2:a8:f0:71:19:bb:87:0c:05:0c:85:
         0d:49:cd:0a:22:c7:d7:b5:bb:31:09:71:bc:42:d6:f9:41:28:
         f7:6f:ee:e3:aa:c3:99:86:23:c7:4c:88:71:fc:59:63:40:e8:
         0f:7a:18:b9:c6:f8:21:4f:5e:fd:e6:f0:bf:25:eb:1e:d4:20:
         51:d0:94:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:30:30 2024 by rpki-client on console-ams.rpki-client.org