Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5ff7e69c-7846-3cd9-bc1c-54191f01ccab.roa
File:                     5ff7e69c-7846-3cd9-bc1c-54191f01ccab.roa (raw, json)
Hash identifier:          yiSPFkhiRYB5wiE2QDUPJtJn6RvhZdqd07t4P1q/pjQ=
Subject key identifier:   69:F7:5F:DC:BE:F6:04:C8:B5:F0:0A:69:B9:41:46:C0:A4:79:AB:42
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845254048167E2B29CE4F279E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5ff7e69c-7846-3cd9-bc1c-54191f01ccab.roa
Signing time:             Sat 09 Mar 2024 02:00:25 +0000
ROA not before:           Sat 09 Mar 2024 02:00:25 +0000
ROA not after:            Fri 07 Jun 2024 01:00:25 +0000
asID:                     150158
IP address blocks:        2001:470:1c6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:25:40:48:16:7e:2b:29:ce:4f:27:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  9 02:00:25 2024 GMT
            Not After : Jun  7 01:00:25 2024 GMT
        Subject: CN=04a5e7eb-f0db-4fad-9023-3c3390484998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7e:c8:6d:2c:a3:66:14:8e:18:22:e7:2c:d3:
                    7c:d6:79:0a:7b:83:05:d8:63:a0:99:fa:51:08:07:
                    82:c7:f5:ac:3c:46:1f:d5:5b:01:8a:91:70:3e:4f:
                    9c:47:c8:08:08:fe:1c:b7:6c:f2:b2:2e:20:2d:ea:
                    f9:b1:72:fc:35:be:95:41:d5:52:cb:14:ed:de:2e:
                    c4:93:33:80:4e:c8:8b:26:13:c2:d7:1c:67:99:da:
                    cb:7a:15:77:18:2a:27:94:59:61:a5:62:a6:9e:68:
                    c2:4c:18:a0:62:fd:e5:5b:97:c4:ed:3e:1e:68:c0:
                    58:25:73:f0:10:8c:a3:f1:ae:28:f4:ff:60:2e:27:
                    0d:af:cb:3a:ca:27:0f:d0:42:41:de:a8:1d:1a:76:
                    ec:b4:c2:2c:85:48:de:25:7e:0c:5c:fb:cc:3f:31:
                    a7:71:dc:d5:94:8b:85:0a:49:68:5f:aa:27:e9:f7:
                    0c:1b:11:38:1c:0c:00:a2:9e:91:83:75:96:47:9f:
                    58:3f:d4:b3:28:60:a9:18:8a:ab:5c:a0:70:56:81:
                    cb:f8:2c:fe:8e:7c:b1:c0:1f:c3:37:74:8e:96:65:
                    57:5a:02:3f:7f:41:5b:df:27:35:0f:fa:28:80:41:
                    57:50:dd:27:80:c4:85:de:41:b7:a1:25:41:98:08:
                    ce:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F7:5F:DC:BE:F6:04:C8:B5:F0:0A:69:B9:41:46:C0:A4:79:AB:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5ff7e69c-7846-3cd9-bc1c-54191f01ccab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1c6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:0a:54:5e:f3:59:40:6f:9f:84:d6:c4:d6:da:07:73:57:1f:
         3b:eb:98:1c:40:0e:5c:3d:b1:cf:a7:9b:29:9f:95:ad:21:24:
         c9:6e:eb:18:4b:ae:21:49:44:49:01:b1:a3:d0:17:ed:4e:4b:
         e0:d2:fb:00:9e:e8:67:4b:4c:ce:d4:31:a4:8d:39:f0:b8:15:
         64:2d:58:c8:ca:09:17:99:60:b4:ec:b0:9b:cb:b6:9b:f0:ac:
         e4:f3:48:59:e6:e2:c7:41:0d:4a:4a:c1:07:78:8e:75:01:d0:
         15:c3:78:d2:1e:bd:af:8e:92:fa:aa:77:56:ea:25:99:f2:8f:
         eb:e1:40:af:b3:eb:f9:a3:68:49:40:b2:de:7c:8c:83:8e:18:
         67:57:43:91:ee:84:41:42:50:00:c8:4a:1b:e5:64:21:f4:2c:
         e8:40:87:b5:02:2b:ce:a9:14:4e:7f:62:62:93:ac:b2:b1:e1:
         9d:9a:ca:af:57:01:33:f0:b4:6d:07:59:c8:50:49:97:2d:af:
         41:7b:f5:27:1c:f0:75:f5:86:91:82:b9:ff:f6:83:9a:a7:55:
         18:98:f5:93:1b:13:a6:40:1c:61:4c:0c:9e:1f:36:8b:56:89:
         ad:5d:0f:38:20:99:1c:fd:e6:25:57:55:51:67:1c:db:d6:7e:
         78:e9:8f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:50:42 2024 by rpki-client on console-ams.rpki-client.org