Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/807900f6-e0aa-3084-aaa2-6ba8b9579596.roa
File:                     807900f6-e0aa-3084-aaa2-6ba8b9579596.roa (raw, json)
Hash identifier:          fv4yF1NGgeQhRGuaLi3Ri1T9QCXOkkDyE5Px0rnRVY0=
Subject key identifier:   6A:9C:3D:1F:CA:D5:D9:AE:13:D6:7C:09:1B:7D:A3:C8:32:DC:FE:DF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858458F47C48C60044B1A91846940
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/807900f6-e0aa-3084-aaa2-6ba8b9579596.roa
Signing time:             Tue 16 Apr 2024 01:31:16 +0000
ROA not before:           Tue 16 Apr 2024 01:31:16 +0000
ROA not after:            Mon 15 Jul 2024 01:31:16 +0000
asID:                     31151
IP address blocks:        2001:470:2df::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:47:c4:8c:60:04:4b:1a:91:84:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 16 01:31:16 2024 GMT
            Not After : Jul 15 01:31:16 2024 GMT
        Subject: CN=b248bc82-1141-4aef-a74e-a23bba120c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:73:8b:eb:e0:5f:eb:8e:c8:b9:92:6f:44:
                    cb:89:e5:a8:16:c6:22:15:b1:e7:8e:d9:c6:f6:3f:
                    f2:a0:23:d0:38:8b:40:42:66:e9:2b:81:a7:52:e0:
                    7f:9e:df:f7:cf:e0:3e:d5:46:d0:d4:c4:21:76:b9:
                    66:4e:fb:65:ed:e6:c7:e4:06:e6:d9:e5:db:8b:05:
                    38:a3:5d:03:85:fb:41:85:bf:63:b5:68:13:0f:0a:
                    3d:cc:27:35:20:b2:d7:13:3b:b0:09:a2:38:9c:6c:
                    64:84:0d:e3:91:97:b5:41:82:83:5e:99:63:20:08:
                    d8:4c:64:74:a8:64:d8:68:2f:72:ba:ec:ca:29:96:
                    01:af:c3:2e:54:18:6b:e2:77:32:2f:fa:d5:83:6a:
                    5c:24:0d:81:aa:27:90:2f:10:f3:e7:fa:05:6b:0e:
                    97:71:2e:be:1c:82:33:59:36:af:be:42:3a:10:d2:
                    fe:37:89:c8:d2:b9:4e:1d:b7:4b:24:42:ac:49:dd:
                    30:25:5c:97:70:2e:d5:3e:54:71:89:00:cf:7a:b6:
                    48:ac:4c:38:93:1e:82:9f:b4:f0:9c:5d:5f:c6:13:
                    3c:43:d4:3c:f4:62:a4:95:0d:ae:ca:e8:30:e6:86:
                    aa:40:c7:e3:ef:3c:55:3c:ba:74:f6:4a:13:90:47:
                    83:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9C:3D:1F:CA:D5:D9:AE:13:D6:7C:09:1B:7D:A3:C8:32:DC:FE:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/807900f6-e0aa-3084-aaa2-6ba8b9579596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2df::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:5e:e1:ed:ab:e5:50:21:7b:a2:d3:ad:5c:cd:45:3e:a8:e6:
         8e:5e:a7:00:c4:14:64:e7:b4:46:62:40:5b:9a:6a:81:78:1d:
         61:90:51:7a:af:e3:8a:a2:19:e8:dc:d9:f4:ae:20:34:ff:1f:
         68:41:78:b2:d1:0b:cb:0d:16:dd:09:b6:ab:43:90:cc:bd:8a:
         98:7c:1f:db:1c:95:3c:f6:f0:05:41:97:50:92:a8:c5:35:c5:
         0a:4d:3a:84:b2:f4:01:aa:8b:a5:99:39:f4:af:7f:6a:9b:3c:
         d3:9e:9f:0f:8d:12:2f:11:8c:89:25:5e:34:18:bd:d5:98:f0:
         3c:c2:11:0d:7a:e1:7d:ba:5e:45:28:a0:87:dd:7d:33:4d:85:
         8c:8e:5e:f0:95:fa:92:a8:eb:7f:cc:af:76:7a:00:69:35:ab:
         c0:31:cc:a0:f3:fb:7d:58:90:12:41:44:f2:22:f9:d8:70:3c:
         d3:90:64:76:64:2e:1b:8e:f1:51:08:61:3d:b5:83:61:6d:93:
         9c:4f:c0:a6:32:90:0b:38:7e:6c:0c:dc:6e:d7:95:d8:ac:43:
         44:70:5b:93:f5:ed:f6:51:6f:10:d3:03:01:5b:f1:b9:bb:56:
         72:c5:fd:70:fd:77:24:01:5e:6c:92:02:74:c9:69:68:98:f3:
         55:de:91:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:20:37 2024 by rpki-client on console-ams.rpki-client.org