Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cb08f5b-8826-3e8f-bccc-e024a0076ac3.roa
File:                     2cb08f5b-8826-3e8f-bccc-e024a0076ac3.roa (raw, json)
Hash identifier:          Dv9rkR2hPLvOGj2jwMLSg1AC/EnS+Rw2a3SgHHu7804=
Subject key identifier:   DE:BC:FD:12:C3:D1:90:F1:08:A3:60:70:AD:EB:E5:2A:31:90:EC:BB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F8956E024B7E45DCBE237980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cb08f5b-8826-3e8f-bccc-e024a0076ac3.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     8158
IP address blocks:        2001:470:9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:6e:02:4b:7e:45:dc:be:23:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=f2b6f182-03da-4ae8-93b1-433722ec7e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:04:19:9f:5a:de:26:5c:0e:30:63:c8:f7:99:
                    9a:b5:87:ea:e5:ff:0b:01:bb:5a:a9:35:03:81:5d:
                    b6:91:ae:7a:ec:97:85:2a:69:8a:e8:19:7b:b7:ce:
                    9f:95:5a:d9:50:8a:ee:eb:df:12:53:19:26:e6:52:
                    ff:96:49:9a:b6:77:0a:10:69:1a:56:b8:40:32:76:
                    2f:e4:15:a1:74:40:1a:c3:ec:ab:2d:70:c1:98:09:
                    6e:f7:8c:ed:42:72:98:de:30:25:81:2e:31:8b:4c:
                    c6:ec:50:0e:40:73:c3:e8:c8:58:45:43:d8:dc:b2:
                    c3:99:74:2f:3e:bf:30:ca:15:3d:08:bf:d5:80:f8:
                    cb:16:79:f2:f8:03:75:04:60:c1:28:a1:76:b4:00:
                    cb:74:7c:31:31:6c:f8:ff:46:ed:6d:03:7c:11:54:
                    a1:4b:b4:ba:ad:83:76:96:51:0a:db:a4:13:c0:f9:
                    ca:c1:6b:f7:9a:0a:bf:19:f2:6d:12:bb:9b:d5:36:
                    da:81:a4:c3:c4:97:30:78:5b:07:14:ab:ab:47:fe:
                    de:04:40:cc:69:33:37:90:44:d2:3f:09:eb:84:b5:
                    bf:84:09:9c:46:f2:87:17:7e:d3:4d:b9:c2:68:89:
                    71:aa:9f:b1:5c:29:e2:f6:04:92:28:51:d3:05:08:
                    3b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BC:FD:12:C3:D1:90:F1:08:A3:60:70:AD:EB:E5:2A:31:90:EC:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cb08f5b-8826-3e8f-bccc-e024a0076ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:19:af:51:ba:ca:ba:fd:ba:a6:5b:5a:8a:99:80:fe:e1:6e:
         08:8e:10:02:36:46:dc:56:4a:b1:a6:5d:fe:14:6f:bb:ef:80:
         7f:81:5a:5f:b4:92:17:b3:d4:01:89:b9:bc:8e:63:0b:d8:1f:
         fc:d8:fd:1d:87:35:29:88:67:74:93:ba:f3:80:5d:dd:6d:e8:
         d9:3f:8b:02:d8:5f:42:84:b9:e2:6d:59:24:0e:5d:ea:04:37:
         1e:b3:62:c6:68:ae:63:09:af:c6:9e:b0:ee:94:e6:86:24:30:
         b7:17:09:f1:1f:8a:71:60:51:13:d4:36:8b:3f:e7:76:3f:2f:
         96:8c:cf:e1:f2:f7:e5:cc:c7:de:3b:5f:d6:f3:14:a6:e7:3a:
         c8:c5:a1:06:bd:62:ea:c5:8e:74:5a:f7:f5:dc:f8:4a:0c:95:
         7f:73:7a:0a:de:67:03:35:38:35:4b:20:47:24:85:88:11:29:
         08:18:dd:3e:00:79:2a:94:e8:33:5b:2d:af:01:64:24:2a:9c:
         65:e2:86:68:61:9e:10:a5:f1:0e:9a:6d:10:c1:1e:0d:26:aa:
         68:27:a1:08:d4:16:ef:33:a2:1d:99:90:4c:51:55:bd:ec:61:
         39:74:a1:ba:ac:98:c3:cb:98:91:29:71:5d:08:5a:64:c0:04:
         b0:88:99:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:20:35 2024 by rpki-client on console-ams.rpki-client.org