Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/70ee7189-7e86-343d-b9ea-d9ecde07af15.roa
File:                     70ee7189-7e86-343d-b9ea-d9ecde07af15.roa (raw, json)
Hash identifier:          6uH/w4B1Aqr6Mo8EQLePtljSw88RAQ92WzTtnUigJ4Y=
Subject key identifier:   9E:06:7F:7F:67:53:3F:B7:21:6D:A7:44:16:B3:6E:02:2E:D7:4E:88
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858451FB9EF40BFDA938B46CC4380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/70ee7189-7e86-343d-b9ea-d9ecde07af15.roa
Signing time:             Thu 07 Mar 2024 02:30:46 +0000
ROA not before:           Thu 07 Mar 2024 02:30:46 +0000
ROA not after:            Wed 05 Jun 2024 01:30:46 +0000
asID:                     64401
IP address blocks:        2001:470:2b2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:b9:ef:40:bf:da:93:8b:46:cc:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  7 02:30:46 2024 GMT
            Not After : Jun  5 01:30:46 2024 GMT
        Subject: CN=3eaa2b42-a84f-4fd9-9743-ac13ccb13b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:58:98:34:de:ea:d1:3c:8c:27:b8:58:cd:
                    eb:32:0a:18:80:35:3a:2f:34:98:37:dd:ac:64:5b:
                    9e:52:87:0b:c5:35:09:3c:86:74:6b:9f:28:2f:00:
                    e1:74:ca:cd:8c:25:e2:8c:0f:a4:8a:8c:ba:16:8b:
                    88:1f:09:43:07:35:db:a1:14:6e:44:41:7a:6b:65:
                    b0:1e:03:ae:56:13:d3:ec:5f:ad:17:45:c6:bf:f7:
                    79:c7:9d:dd:e9:68:d2:de:34:5d:11:ec:37:1e:07:
                    af:b6:69:92:10:60:71:a7:df:4c:f1:cd:71:9e:98:
                    f5:df:e9:59:bb:2c:3a:49:2e:a2:06:cd:16:61:07:
                    48:cd:a6:d2:77:bb:51:7a:ca:84:27:cc:9b:c7:e3:
                    36:f5:f7:c5:4c:5e:92:46:aa:c3:d6:01:ad:dc:f3:
                    1a:47:97:33:ac:4b:89:eb:b1:e5:55:cf:09:e5:f0:
                    f7:9e:82:02:84:ed:d8:e3:fb:6d:3a:e0:3b:10:68:
                    b7:a7:f0:1d:a4:15:2b:39:05:5d:70:db:c4:3d:26:
                    f1:21:46:34:27:a6:0c:65:7e:27:ad:0c:e7:e7:0c:
                    86:ef:e9:3a:c7:aa:0a:f8:71:33:23:3c:d7:76:45:
                    c7:ca:a0:17:b5:07:7e:ab:94:f8:83:5b:46:d0:92:
                    e4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:06:7F:7F:67:53:3F:B7:21:6D:A7:44:16:B3:6E:02:2E:D7:4E:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/70ee7189-7e86-343d-b9ea-d9ecde07af15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2b2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:8c:42:e9:ec:2e:4b:a8:59:12:e2:68:b2:29:27:93:01:f8:
         6e:c5:81:2f:c4:f0:19:c9:1b:8c:4e:d4:43:75:15:ca:52:f2:
         9f:f8:d0:20:3e:e0:d0:62:2e:53:02:48:e2:af:9c:df:25:9f:
         b0:0f:3d:dc:7a:22:69:51:fc:e5:82:b9:93:c7:19:9a:c4:81:
         87:fb:07:67:ad:f3:dd:6e:27:3e:45:0e:d4:63:e1:b2:36:ac:
         27:e1:e4:ff:7e:86:51:72:78:55:c7:37:48:8f:a1:19:bc:ab:
         52:9d:97:a3:2f:78:c8:07:0a:c2:44:30:62:8c:c7:e8:2a:81:
         d5:93:2a:3a:71:fa:60:a7:74:6a:47:d3:24:86:85:4e:03:dd:
         9d:b2:e9:b7:78:3b:ba:8d:60:84:19:82:8c:d9:50:2b:cf:7f:
         40:3f:b7:0e:60:2b:ea:f9:d6:2c:f6:ca:33:e7:87:d0:93:8b:
         a3:cb:80:1e:11:04:64:0f:f1:26:40:34:69:8f:91:f9:63:4d:
         e3:84:1b:2b:f5:fd:82:b5:52:4e:f6:49:7e:9d:fe:de:e0:e0:
         48:62:ef:df:1d:60:bf:28:ae:70:bb:3d:4d:5c:9c:cf:fe:75:
         ee:fb:6c:cd:e5:15:89:de:af:c3:33:ec:8d:13:17:3c:88:15:
         2d:90:6b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:56:14 2024 by rpki-client on console-fra.rpki-client.org