Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/56b67b65-bcc6-388a-bdc7-48c93624f168.roa
File:                     56b67b65-bcc6-388a-bdc7-48c93624f168.roa (raw, json)
Hash identifier:          fxw7amfNSHqxJ3spmfIgEk6IA1pOjfV247Zo3cEcnY4=
Subject key identifier:   3A:28:8E:17:AF:75:78:DE:30:E2:08:CF:3B:1C:C7:C5:66:7C:6B:85
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845025AC8DC5504590354DE5000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/56b67b65-bcc6-388a-bdc7-48c93624f168.roa
Signing time:             Sun 25 Feb 2024 14:00:34 +0000
ROA not before:           Sun 25 Feb 2024 14:00:34 +0000
ROA not after:            Sat 25 May 2024 13:00:34 +0000
asID:                     57332
IP address blocks:        2001:470:23d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:02:5a:c8:dc:55:04:59:03:54:de:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 25 14:00:34 2024 GMT
            Not After : May 25 13:00:34 2024 GMT
        Subject: CN=64699686-c5d4-450f-be49-3782b7764b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9c:f3:45:05:76:69:b1:46:9d:8b:cb:4e:12:
                    92:43:d8:b8:b9:bd:46:34:6a:40:dc:ac:72:22:10:
                    0a:ec:87:c6:ea:11:d7:1b:80:a3:8d:c9:36:50:f5:
                    d0:27:56:01:3d:1a:e7:08:79:d6:d1:5a:d4:07:75:
                    5c:6a:1e:83:76:3a:9b:5a:30:a6:a8:63:5c:be:b8:
                    23:03:16:ce:ac:44:18:91:98:f9:7e:84:70:9d:47:
                    87:e4:c0:7a:7e:31:55:aa:bd:2d:ca:fc:f2:92:31:
                    bb:60:a0:df:60:7f:7f:e8:98:8c:84:da:8c:ee:8c:
                    a2:95:94:cf:a9:14:24:c1:72:81:ce:58:34:32:c3:
                    ad:3d:08:16:2a:c5:2f:bf:cc:2b:ff:39:2b:68:9b:
                    5e:db:d0:0f:81:6a:c4:2a:f3:1b:c3:b3:54:fa:e7:
                    f5:d4:92:7b:7a:bb:ae:06:6d:1f:29:ab:97:71:8b:
                    9a:8c:a5:d0:6b:15:2a:34:c0:0e:a8:b6:ea:3a:a9:
                    89:51:5b:b9:a4:5b:f5:fd:a0:b4:7a:13:86:bf:a6:
                    db:47:dc:3f:49:a9:ed:fe:a8:18:5d:77:6d:34:15:
                    ff:b2:d0:f5:c0:5b:90:da:c1:53:b0:73:5b:3f:a8:
                    e5:73:05:85:50:bb:06:dc:58:b0:0c:ef:f3:66:13:
                    2b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:28:8E:17:AF:75:78:DE:30:E2:08:CF:3B:1C:C7:C5:66:7C:6B:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/56b67b65-bcc6-388a-bdc7-48c93624f168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:17:d9:a9:d2:f6:b1:e8:87:75:05:96:c1:25:06:8c:89:b0:
         fc:fd:29:16:0d:d8:73:2a:35:7d:ae:91:f8:9e:c8:c0:7e:cb:
         86:74:89:49:37:5e:39:5a:46:0c:4a:13:aa:1e:bd:ba:a2:b8:
         94:16:71:48:10:64:07:95:7f:33:da:26:c0:50:60:eb:11:23:
         38:2e:2a:0b:45:dd:db:8e:a9:13:ae:a7:c0:f1:1f:9e:ff:65:
         0e:93:0b:ce:07:c2:0c:9e:a6:7a:ae:58:8e:3b:6e:a8:05:68:
         80:34:15:87:54:b7:3f:52:ab:a0:e2:db:7e:57:a0:3b:41:c0:
         90:1d:06:91:11:d8:18:75:49:a7:09:d1:a0:75:03:cf:2d:9f:
         77:27:64:09:71:f8:6a:83:b5:4e:95:ec:04:17:1b:c9:2f:b5:
         1f:e9:19:92:f4:d3:7e:93:28:79:40:1e:4b:6c:d8:36:37:64:
         ca:7a:28:c5:a3:4b:4c:ad:59:25:6f:fc:71:5c:0d:2a:21:ff:
         0b:77:fd:37:35:7d:2d:a8:cd:68:d5:fe:fc:d4:bd:1c:b8:22:
         51:97:68:bf:4e:79:22:20:ae:25:0b:6f:aa:ce:c4:30:c3:8e:
         d8:69:ef:39:9e:77:cc:1d:b5:5e:5a:59:18:60:2a:3d:49:53:
         44:66:33:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:11:29 2024 by rpki-client on console-ams.rpki-client.org