Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/80ac3089-13ee-3d1a-b852-35962a2f43ff.roa
File:                     80ac3089-13ee-3d1a-b852-35962a2f43ff.roa (raw, json)
Hash identifier:          xxJuK4di4xuSJQknpzg0Bx4JOILEtGOSRi2nd43HDJw=
Subject key identifier:   C8:7F:70:10:6A:E7:D4:D2:B5:BC:02:0D:5B:16:53:97:70:C3:5C:C1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845840DD5CD273783BF526A1D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/80ac3089-13ee-3d1a-b852-35962a2f43ff.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     16468
IP address blocks:        2001:470:9c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:d5:cd:27:37:83:bf:52:6a:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=98ca564c-bbce-497a-a10c-2d07173f91a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:33:b7:9e:11:a5:b6:7e:c2:59:a0:fa:1f:3a:
                    57:50:03:a2:8b:4e:60:7b:e6:e1:98:cc:c0:bf:92:
                    52:4b:cf:e1:e0:86:d3:01:fb:7a:a1:08:fc:26:66:
                    36:ce:16:86:14:06:e5:07:d8:e7:c7:75:a7:b9:bc:
                    7c:3c:57:f3:6a:a9:8e:65:33:5e:85:fb:ef:2b:e2:
                    fb:36:07:5d:17:0a:25:f4:ff:a0:28:30:59:c4:9d:
                    98:3e:6a:a7:f6:ef:ae:c6:c8:a0:0c:9b:dc:4f:66:
                    62:ab:d2:08:18:f2:5b:2b:9f:c2:83:11:99:bb:7c:
                    97:10:9a:cc:f9:35:bd:1b:36:60:93:7c:e1:0d:4a:
                    c9:b2:26:4f:b0:d2:bb:f3:97:17:35:ce:3b:a0:81:
                    9f:1c:1e:0f:6b:98:fc:86:5a:3a:be:5d:f9:5c:04:
                    8e:08:ed:68:de:25:41:54:e3:fd:74:5a:cd:47:a6:
                    10:3b:ed:3f:03:f3:f6:b5:68:0f:a0:47:78:bf:23:
                    ad:14:16:49:a6:47:a4:0e:59:f6:5d:f9:86:c8:9c:
                    33:7c:40:9f:c5:76:0c:92:ae:f6:a4:fb:cf:01:fa:
                    d6:ed:f0:ff:45:69:ae:9f:92:ff:83:85:24:cd:08:
                    04:dc:10:54:4c:ab:d7:2a:e3:bb:15:a3:d3:7c:85:
                    41:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7F:70:10:6A:E7:D4:D2:B5:BC:02:0D:5B:16:53:97:70:C3:5C:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/80ac3089-13ee-3d1a-b852-35962a2f43ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:9c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:a9:f2:f1:4e:41:26:38:cc:c2:65:35:01:19:85:be:a8:9f:
         04:aa:49:7c:ec:d1:a1:63:c7:af:37:10:2d:05:5e:0f:2b:95:
         04:db:1c:b7:dd:a6:ff:16:0f:ee:5a:44:53:1c:38:d4:9c:9e:
         7b:30:f1:2b:38:d9:a1:90:18:eb:8e:71:47:c5:21:e7:58:e8:
         5f:d7:02:90:9c:89:64:ad:76:e2:ed:0a:c8:2d:c9:ac:af:9e:
         4b:65:ec:24:5a:f3:9d:36:3d:ca:00:29:31:c9:44:ca:46:00:
         fb:4e:71:03:e8:92:00:6c:13:fe:b8:f1:39:8e:c8:f0:63:bd:
         01:01:92:ba:8e:9f:ce:11:f0:b0:5a:69:49:1b:24:2f:5f:5f:
         bb:18:f7:3f:a3:62:76:2c:d6:78:b9:c8:a0:03:ae:dd:ed:a0:
         94:6a:7b:54:62:c3:78:26:e6:de:83:f7:2c:07:d1:53:7b:7b:
         40:e6:80:e9:69:5f:4b:5a:c2:e2:4a:00:aa:78:49:7d:cf:84:
         d8:ac:d0:fb:ca:99:d1:6a:9f:91:49:b3:5f:57:84:36:78:ec:
         b1:6e:17:f3:65:31:23:e8:34:93:49:27:c5:48:bc:c0:89:62:
         42:73:c3:eb:ec:98:c7:41:40:56:a3:e5:ce:16:ad:a3:2b:19:
         1b:1f:92:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:02:17 2024 by rpki-client on console-fra.rpki-client.org