Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3751c7b7-9d93-3f6d-93a6-d4623fb5b927.roa
File:                     3751c7b7-9d93-3f6d-93a6-d4623fb5b927.roa (raw, json)
Hash identifier:          137h7xNzc//F90HXU2Ioq8USVAHa77VMiwHNSAwyRCY=
Subject key identifier:   CB:8D:BD:26:35:93:F6:F4:CA:1A:16:B6:77:7B:2F:6F:40:DB:56:92
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845B927D794F8BC00586A7C5300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3751c7b7-9d93-3f6d-93a6-d4623fb5b927.roa
Signing time:             Wed 01 May 2024 01:30:54 +0000
ROA not before:           Wed 01 May 2024 01:30:54 +0000
ROA not after:            Tue 30 Jul 2024 01:30:54 +0000
asID:                     207821
IP address blocks:        2001:470:2f1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b9:27:d7:94:f8:bc:00:58:6a:7c:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  1 01:30:54 2024 GMT
            Not After : Jul 30 01:30:54 2024 GMT
        Subject: CN=13a98f53-0943-4df2-b1e5-2d9be30283aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:a2:9a:07:85:5e:7d:d4:16:2c:79:cc:a2:
                    87:c2:78:96:21:35:98:f8:65:d1:40:da:90:19:2f:
                    10:af:17:a8:2c:2d:da:f4:25:60:7f:7c:e4:71:78:
                    52:9e:7d:09:96:40:c5:52:b6:84:16:c5:3f:59:2d:
                    7f:40:41:e4:48:d8:d6:0b:00:bf:c0:67:f4:82:06:
                    40:80:f9:a1:fc:15:fe:0d:e6:c7:15:04:4f:06:62:
                    85:75:86:25:8e:38:d4:29:5a:21:68:b1:be:a7:4f:
                    2b:51:dd:2a:13:96:b5:65:66:e9:75:fe:27:eb:bc:
                    91:98:e0:73:ff:f5:c8:4e:bf:46:08:46:6a:3d:61:
                    e2:8f:42:a5:b2:f6:b1:4d:b6:f0:39:56:dc:12:3a:
                    68:03:97:b1:a2:45:5c:38:76:e6:3d:72:a2:20:d6:
                    62:48:38:43:45:63:fa:6a:9e:4e:3d:b4:69:78:ab:
                    d1:78:a9:6f:32:e5:57:b3:0e:3e:60:ec:15:dc:d0:
                    a2:9b:89:14:47:12:4e:d2:d1:82:ae:be:fc:a5:c0:
                    ef:ec:22:a2:c4:17:e2:0a:f0:65:99:45:ef:ea:89:
                    85:04:8e:de:7b:71:26:95:b4:59:8e:a2:18:78:c3:
                    76:a9:8a:b7:4e:23:96:01:27:c1:55:21:ed:c4:ca:
                    68:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8D:BD:26:35:93:F6:F4:CA:1A:16:B6:77:7B:2F:6F:40:DB:56:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3751c7b7-9d93-3f6d-93a6-d4623fb5b927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2f1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:4c:30:7a:d6:80:41:91:7f:16:ce:20:a1:2b:cd:27:86:c6:
         e6:cd:55:84:bf:84:ab:04:74:7c:ed:d0:58:39:9d:b5:cd:8b:
         a8:a4:d1:ad:3a:69:88:9b:af:c8:96:42:46:1b:72:5b:b0:4e:
         16:be:a8:97:d2:da:1d:45:9f:c4:38:63:ed:42:8a:48:5e:37:
         ec:01:62:02:4b:fd:e6:9b:ea:0f:15:e7:37:ce:3d:b0:6d:f0:
         5a:82:b1:3e:0f:9e:31:b0:64:09:7a:aa:d5:d4:ba:50:78:64:
         07:9d:39:4f:14:96:7d:78:19:fe:69:69:44:c4:80:0f:4e:84:
         2c:05:bb:83:22:a6:fc:b9:83:c4:0a:30:ee:7c:81:a3:14:d4:
         68:ed:fc:df:5d:51:0d:62:89:1f:08:7d:0a:8f:b6:15:bc:13:
         e7:0f:5d:41:26:64:f7:99:de:69:da:ae:e2:da:7d:ba:0a:ec:
         75:bb:01:99:30:3a:3c:7b:be:4b:2b:cb:77:a5:ff:5a:b7:cb:
         c7:65:8c:84:15:a8:51:a4:48:d5:f2:1b:10:1e:f9:af:89:62:
         cf:ce:91:85:78:78:9f:89:fc:41:15:2e:4a:e2:7e:1a:29:7d:
         8f:c3:df:9f:0c:9e:ea:c9:5c:f8:18:5c:ad:71:21:5b:4f:26:
         a9:47:f8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:13 2024 by rpki-client on console-fra.rpki-client.org