Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f5ebf1c-696e-39b0-8032-1f932a51a79e.roa
File:                     3f5ebf1c-696e-39b0-8032-1f932a51a79e.roa (raw, json)
Hash identifier:          Y9N1OvTqYoVgufwyuORPbZFsdbU6xvfoAWfGO8lryys=
Subject key identifier:   96:65:10:14:BE:65:F3:15:E5:94:C9:64:ED:D5:25:55:49:7C:9F:17
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845025AC7C0D290F13AB9A9F800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f5ebf1c-696e-39b0-8032-1f932a51a79e.roa
Signing time:             Sun 25 Feb 2024 14:00:34 +0000
ROA not before:           Sun 25 Feb 2024 14:00:34 +0000
ROA not after:            Sat 25 May 2024 13:00:34 +0000
asID:                     44411
IP address blocks:        2001:470:23d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:02:5a:c7:c0:d2:90:f1:3a:b9:a9:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 25 14:00:34 2024 GMT
            Not After : May 25 13:00:34 2024 GMT
        Subject: CN=5e8004fa-dd92-4361-bf1b-7f7944ce1521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0c:da:75:f9:70:38:70:2e:c3:1f:44:5c:0f:
                    7e:f6:82:00:0b:cb:bc:8c:6c:7e:49:ad:83:6e:45:
                    eb:8a:e6:b7:ad:54:08:47:10:11:e7:b1:58:ba:c2:
                    fa:8d:62:e4:d1:de:7d:1b:37:cd:b8:07:3f:3a:8d:
                    d4:19:74:48:b8:7c:44:2b:79:79:f8:79:21:e3:67:
                    9b:eb:12:05:d7:63:67:4f:fc:8f:e0:93:fa:09:3e:
                    6b:50:da:55:85:c7:a5:58:d6:42:67:27:d0:23:26:
                    19:0e:5e:d3:d3:1c:1e:46:4d:92:d4:72:97:bc:d9:
                    91:7d:f4:c7:80:22:4e:d5:4c:bb:2b:16:0e:8d:7e:
                    06:cc:b5:b3:68:0c:c0:b3:db:5f:fd:7f:72:2c:5e:
                    75:b2:fb:1c:00:84:9d:aa:b8:d1:61:7c:ae:44:aa:
                    d5:bb:27:81:d7:f7:a9:0a:eb:3e:ae:21:e7:fe:05:
                    51:ee:5e:09:74:89:d8:7c:26:18:d6:39:42:48:b7:
                    6f:00:f0:63:7c:e9:15:1b:e2:8a:24:83:3a:95:39:
                    c8:92:5a:91:9a:b0:2d:2c:cb:55:9a:17:be:b8:3e:
                    95:d2:b2:42:c2:23:74:2d:5f:71:ca:25:1e:e7:d4:
                    60:80:5c:07:50:f3:35:af:93:14:7a:67:7a:c1:2b:
                    9f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:65:10:14:BE:65:F3:15:E5:94:C9:64:ED:D5:25:55:49:7C:9F:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f5ebf1c-696e-39b0-8032-1f932a51a79e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:e7:d6:72:c8:71:48:72:c2:f0:bb:d5:3a:80:71:d1:e4:6f:
         7d:a6:42:06:48:45:c0:85:94:26:f8:80:15:ad:55:e0:9a:51:
         bb:98:22:a5:a4:99:01:6c:c0:e1:7b:7e:78:e8:ed:17:53:1b:
         d2:9d:c5:66:15:a7:01:93:b8:72:43:91:8a:70:84:aa:21:20:
         53:bc:8d:a6:87:9d:6a:52:a6:bb:d8:92:39:0f:7b:fa:7e:ff:
         8b:b1:a2:71:4d:02:ab:f8:21:7d:79:de:5c:92:82:33:a7:5f:
         b3:01:10:ed:16:ec:08:45:c5:90:c4:56:b9:59:fb:ba:1e:ba:
         27:29:ae:87:7f:d8:80:12:c4:7b:27:4a:20:47:18:80:ec:c1:
         dc:68:69:50:3e:ff:36:40:88:56:e1:cf:71:ff:88:f6:73:59:
         6f:12:a1:43:21:a8:6c:91:31:d9:e3:10:30:74:a6:a6:43:0e:
         6d:47:f9:3b:17:a4:cd:c4:aa:bf:49:f1:95:01:6e:2b:9d:9c:
         b9:b4:80:3a:ff:98:f8:21:f6:ee:33:25:5a:14:dc:22:30:c2:
         eb:3f:0e:a3:1e:fb:5a:b4:76:80:c4:b2:f9:07:2b:23:fc:d4:
         ae:e5:60:b9:77:0a:4d:b7:58:48:57:3b:76:cc:09:1c:84:b1:
         3b:7d:7b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:20:36 2024 by rpki-client on console-ams.rpki-client.org