Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/83d4d2c5-0241-306a-a8ed-335fd30951fe.roa
File:                     83d4d2c5-0241-306a-a8ed-335fd30951fe.roa (raw, json)
Hash identifier:          KxShTBvwNRp5GbCeNvYjsdJaKV1GcW28jerhsvm/9Z0=
Subject key identifier:   19:81:A8:EC:13:E4:C6:E6:8D:27:ED:6E:0A:C5:5E:FF:C1:10:DA:08
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845025AC71FC9E2EB0EA1746980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/83d4d2c5-0241-306a-a8ed-335fd30951fe.roa
Signing time:             Sun 25 Feb 2024 14:00:34 +0000
ROA not before:           Sun 25 Feb 2024 14:00:34 +0000
ROA not after:            Sat 25 May 2024 13:00:34 +0000
asID:                     34867
IP address blocks:        2001:470:23d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:02:5a:c7:1f:c9:e2:eb:0e:a1:74:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 25 14:00:34 2024 GMT
            Not After : May 25 13:00:34 2024 GMT
        Subject: CN=7e13b7df-0e3f-4dec-8349-a799be9347ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:17:44:47:db:e2:ce:cf:7d:80:9b:12:48:30:
                    04:80:56:76:13:24:35:46:68:f5:3d:2a:0b:d3:db:
                    b6:48:75:ec:78:07:d4:4a:3d:20:6a:52:e3:6a:bd:
                    b3:28:8f:be:72:27:d8:33:bf:d1:ec:b5:0c:be:a0:
                    19:a1:22:07:6a:3c:15:07:29:1a:f2:4b:4b:41:e9:
                    ea:6f:c3:90:a8:c3:75:e2:54:52:0a:03:1d:7e:56:
                    5b:c5:d9:ad:9b:ad:78:f4:6f:15:8e:64:df:8f:1e:
                    ad:04:c7:25:d5:0f:6b:82:71:c1:37:8f:44:c7:69:
                    17:90:bc:e2:36:cc:d0:ec:d8:7c:d2:32:89:b6:44:
                    a1:a7:57:bf:cc:e7:ae:09:c6:17:75:aa:75:b5:19:
                    e3:19:1f:e8:c4:4d:40:f0:ad:23:cb:4d:f2:e4:68:
                    ef:56:d1:78:0e:2e:40:06:f1:ce:be:a7:0c:d3:63:
                    2f:b1:67:c1:50:5d:d1:ba:6b:b4:e8:91:dd:d1:49:
                    57:a7:be:28:49:e3:42:fd:2e:22:b2:e8:b1:0e:64:
                    17:42:3f:a2:0b:cd:73:1d:ca:2f:3a:bc:18:91:aa:
                    a7:40:46:59:ac:41:3e:81:53:a8:85:95:9f:69:4b:
                    c1:1c:1b:a6:a6:39:26:e4:79:84:06:a1:70:f0:c7:
                    1c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:81:A8:EC:13:E4:C6:E6:8D:27:ED:6E:0A:C5:5E:FF:C1:10:DA:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/83d4d2c5-0241-306a-a8ed-335fd30951fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ff:69:7f:c3:c0:75:a5:d1:05:bc:03:56:95:69:7f:32:70:
         b9:32:22:30:41:79:82:21:73:8d:7d:b8:6f:c7:ba:fa:a3:66:
         27:9f:24:10:5b:c6:8a:93:a0:7c:c7:dc:04:14:49:71:2d:a9:
         71:e1:e3:65:53:00:b6:e0:b6:bb:60:0b:50:74:52:db:37:9f:
         18:7a:cf:19:d0:ba:e4:85:07:94:73:19:95:b1:5d:9a:bd:ea:
         e2:f8:6f:a3:02:7f:70:77:17:f2:63:96:b7:af:fd:a6:08:cf:
         78:11:6e:40:0a:c5:58:ff:a4:de:f0:45:0d:7b:64:6e:f8:3f:
         ad:9e:5b:2d:3b:c3:a0:64:32:7c:9b:15:0b:d6:c1:7b:3e:24:
         bf:c5:0c:a8:bb:7d:d4:26:30:03:7a:87:4a:ad:8e:78:66:2e:
         09:6c:74:7a:8d:ed:70:33:61:78:85:da:e4:bd:10:ce:35:18:
         a1:5a:0b:22:c8:e5:68:84:33:51:39:49:a0:51:7d:93:6c:25:
         4e:1c:c1:22:fa:bf:6a:43:a1:9c:e8:6a:7c:7f:49:79:b4:ca:
         76:62:dc:0b:51:a5:80:02:db:f2:d8:d5:90:ee:20:fc:c4:92:
         7e:7e:86:09:7d:fd:38:1b:fe:64:a2:99:65:1e:5a:26:8b:28:
         79:2a:19:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:20:37 2024 by rpki-client on console-ams.rpki-client.org