Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/41faa769-770f-3e69-895a-90ea2cb477bc.roa
File:                     41faa769-770f-3e69-895a-90ea2cb477bc.roa (raw, json)
Hash identifier:          2wdDeDkcVpU05FIuVWEGZ8jDl1oCwQsoXskRaZhUw2A=
Subject key identifier:   C5:B1:64:63:EE:80:10:A7:D3:10:F4:05:1B:A0:3F:EA:46:A0:6B:64
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F89568E2ED8B5F33CA1462C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/41faa769-770f-3e69-895a-90ea2cb477bc.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     393350
IP address blocks:        2001:470:58::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:68:e2:ed:8b:5f:33:ca:14:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=9d96b671-f4ac-443d-93fc-74348077db5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:dd:2e:76:03:23:57:c9:36:53:1d:df:a9:d7:
                    4f:68:2e:55:e3:30:ef:d4:46:f4:4f:c0:9f:84:b7:
                    11:25:1d:ab:af:95:e9:e8:fb:fb:c3:8c:8b:7d:05:
                    15:e2:d1:9b:49:1f:0f:c3:ae:e5:da:03:7f:35:cf:
                    46:45:b5:89:2d:ef:dd:77:f7:5b:be:42:ff:30:76:
                    19:e7:a6:97:47:ab:35:66:b8:84:4a:e5:0f:d7:fb:
                    90:ba:58:40:e4:b6:17:ff:93:6e:e1:f0:96:a6:ff:
                    c6:2e:31:2e:ed:0a:fb:33:dd:a8:a7:be:8b:2f:a2:
                    e8:5b:f5:1d:88:96:c3:7a:e4:e5:d8:6b:5a:79:3c:
                    ef:a7:ee:33:21:66:34:23:70:3d:1b:be:1f:84:ce:
                    9c:47:f6:33:ee:43:15:58:14:04:69:0a:3a:c9:35:
                    9d:51:b9:ad:68:cd:d5:ac:2a:40:f8:0e:ef:74:0d:
                    96:ce:23:2b:c5:f0:48:4c:48:11:fc:00:0d:f8:1a:
                    5c:05:11:de:fc:f1:e8:ae:71:39:56:f6:09:b5:7d:
                    ab:eb:ca:f7:15:d7:3e:82:01:a9:ef:3a:49:5d:03:
                    c7:0f:de:6d:ab:05:23:5b:db:2e:b3:ad:d5:84:b1:
                    ce:6c:ce:15:29:ff:69:5a:39:22:ed:c3:01:5e:6a:
                    4a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B1:64:63:EE:80:10:A7:D3:10:F4:05:1B:A0:3F:EA:46:A0:6B:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/41faa769-770f-3e69-895a-90ea2cb477bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:58::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:fb:fb:c5:a4:f3:66:43:6c:e4:b1:5a:8c:31:70:c2:50:41:
         a2:41:7d:33:20:75:b3:7a:2a:78:e7:fb:33:78:de:c1:a8:4b:
         47:2d:39:9c:23:ca:28:4f:7e:66:6d:e4:b8:55:51:f5:92:88:
         f8:eb:ea:d1:e8:ae:31:1f:79:44:25:06:97:26:40:d8:46:c5:
         0f:01:69:5f:a1:a0:bb:c7:8b:1f:fc:16:4a:76:ef:e5:cb:42:
         64:5a:09:f7:34:30:49:3b:59:cc:b1:f3:4a:85:6b:df:5f:17:
         25:08:eb:2b:f8:ed:c2:9f:ae:ec:e2:22:ac:76:cf:b6:06:52:
         d8:30:e5:1d:00:ff:43:80:2a:4f:e5:df:51:f8:78:0d:b1:93:
         f0:c5:16:5f:8d:be:bf:5e:af:50:c1:f8:6e:9b:4c:be:24:9c:
         e3:81:af:f3:a3:d2:9c:72:66:e8:19:78:49:a2:f2:91:a3:ea:
         b1:50:89:a6:e1:7e:87:1b:06:a3:51:ef:f0:f3:26:8a:1f:20:
         7d:ac:d1:e2:a1:17:da:65:a0:18:56:fb:b2:f7:76:06:2c:e5:
         84:38:08:56:88:d4:1b:be:15:8c:f4:76:ac:31:fa:80:39:a5:
         49:9d:70:fd:f6:6d:46:fc:ed:ec:db:4f:38:29:a8:82:21:11:
         95:ac:54:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:47:26 2024 by rpki-client on console-ams.rpki-client.org