Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33d751ae-332b-3078-9d15-f636265b1d11.roa
File:                     33d751ae-332b-3078-9d15-f636265b1d11.roa (raw, json)
Hash identifier:          hQ1Qs5t+Pc6inrOAxBBNBxWpFJxm4qjFTjMvaNvBP/g=
Subject key identifier:   0D:74:1E:D3:B0:E3:E5:E9:59:A3:E2:30:DC:25:60:05:D0:0F:73:5F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858453747F729ED9C51ACA12AA500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33d751ae-332b-3078-9d15-f636265b1d11.roa
Signing time:             Fri 15 Mar 2024 13:00:32 +0000
ROA not before:           Fri 15 Mar 2024 13:00:32 +0000
ROA not after:            Thu 13 Jun 2024 13:00:32 +0000
asID:                     132046
IP address blocks:        2001:470:25e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:37:47:f7:29:ed:9c:51:ac:a1:2a:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 15 13:00:32 2024 GMT
            Not After : Jun 13 13:00:32 2024 GMT
        Subject: CN=2cb2092d-b5b4-4a0a-8c10-c3f85063947e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:18:c5:c2:d6:80:c9:71:8b:90:68:0b:7f:08:
                    1f:76:8a:5d:02:54:61:27:3b:6e:d0:3f:59:28:88:
                    01:b7:45:48:25:bc:ad:b8:47:6b:bf:1c:52:d0:06:
                    4a:58:a3:65:99:99:82:55:28:7b:21:c0:1a:40:e4:
                    59:0d:c8:8c:9f:e6:0c:4e:59:bf:21:0a:af:25:b4:
                    3d:a6:9c:51:f8:8f:20:ca:91:cd:d8:a7:cd:e9:ba:
                    70:85:f9:af:8d:e4:90:e2:d5:ea:7e:7f:40:ce:56:
                    00:ce:fb:57:31:44:02:64:13:a9:35:85:c7:3b:ec:
                    7e:10:e9:a9:9d:8d:60:00:07:d8:3e:66:93:72:27:
                    f8:8b:40:e8:94:46:b3:9a:a1:fb:63:4f:22:1d:f8:
                    86:5f:d2:9c:c1:59:2d:df:54:f3:98:af:8f:14:58:
                    08:66:5b:61:6b:98:f7:ff:fa:f3:f4:cf:3e:c6:8b:
                    16:3b:4d:b8:f5:d4:45:5c:68:52:a5:a8:3f:98:74:
                    f4:79:1e:bc:70:ab:5e:5e:97:04:8c:e5:95:66:96:
                    4c:4f:5a:be:35:a9:c0:0e:a8:3e:8f:53:4f:06:43:
                    31:51:19:38:ff:a7:0a:8f:19:c8:04:4d:1e:fc:b0:
                    49:64:f7:19:64:95:a6:88:21:ae:7a:01:b2:89:e3:
                    07:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:74:1E:D3:B0:E3:E5:E9:59:A3:E2:30:DC:25:60:05:D0:0F:73:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33d751ae-332b-3078-9d15-f636265b1d11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:25e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:b9:32:92:24:32:af:a6:8b:b8:b9:13:51:54:06:e8:79:8c:
         45:3a:70:d9:5c:2f:c3:48:2a:bc:9a:cb:bd:9d:a1:1a:7c:ee:
         00:41:26:6d:a8:83:99:ca:e0:4e:8f:4a:3c:f3:a6:cb:b1:60:
         54:39:7a:f3:36:ea:cd:ed:7c:19:08:d0:24:53:17:a6:34:fb:
         7d:83:13:eb:f4:8e:83:9a:51:17:90:07:6e:a2:f3:fe:1b:27:
         d3:a9:cd:db:ee:15:af:c6:3b:d3:97:7f:dc:10:83:c0:34:77:
         eb:07:bb:93:e5:ee:7f:8c:23:29:38:d1:1c:60:9f:62:68:ea:
         2d:86:aa:a1:f3:f2:2b:9e:07:fd:49:da:4b:a9:b2:74:51:52:
         ce:c5:ed:6e:aa:5a:d5:ac:38:da:08:3e:10:e5:01:f9:8e:8a:
         0b:73:77:94:14:94:11:e3:25:ad:82:13:a0:12:d8:4f:6e:8a:
         75:06:bd:eb:b7:4f:74:b2:6d:49:97:30:37:29:7b:60:9e:11:
         f3:22:fe:9c:4c:1c:f5:45:ee:b2:10:76:4e:0d:46:af:90:57:
         ee:b8:0d:3e:d2:cb:b9:b2:57:8d:bf:f2:46:cf:3d:89:b0:5e:
         e0:58:17:80:4f:e8:92:64:bb:91:16:cf:15:9d:e3:15:a6:16:
         de:f9:24:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:17:09 2024 by rpki-client on console-fra.rpki-client.org