Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/970efddb-4404-3e2a-bd6e-0f848c00ab7d.roa
File:                     970efddb-4404-3e2a-bd6e-0f848c00ab7d.roa (raw, json)
Hash identifier:          6pRtQdfXMD2emLIueHJzAKs0ZFEW1cdZf8dTbW9IWGA=
Subject key identifier:   28:E6:7B:67:DA:44:4C:69:E7:90:24:43:76:41:10:64:66:0C:94:A5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845841CDF87BA35C9F043B4B6C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/970efddb-4404-3e2a-bd6e-0f848c00ab7d.roa
Signing time:             Fri 12 Apr 2024 01:30:57 +0000
ROA not before:           Fri 12 Apr 2024 01:30:57 +0000
ROA not after:            Thu 11 Jul 2024 01:30:57 +0000
asID:                     10737
IP address blocks:        2001:470:2d1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:1c:df:87:ba:35:c9:f0:43:b4:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 12 01:30:57 2024 GMT
            Not After : Jul 11 01:30:57 2024 GMT
        Subject: CN=706d5733-deca-4357-a1b1-47877d867019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:40:47:2a:90:94:32:67:16:65:f5:8e:8e:54:
                    ee:d3:cc:da:52:97:45:23:07:fd:8a:85:de:91:9a:
                    b0:f4:3a:0a:da:f3:f0:ba:45:dc:93:ed:b8:05:ca:
                    1c:bd:39:5a:68:bf:c9:bc:4d:d6:1b:f3:85:b3:5d:
                    3e:68:d5:79:85:dd:96:6a:ca:ea:f2:6e:4b:85:b1:
                    bf:f0:eb:24:35:8d:0e:4b:dc:07:ca:4c:ac:55:47:
                    19:c2:f6:74:59:16:ba:84:cc:bd:7e:3e:a8:44:6d:
                    dc:35:50:65:7c:0b:06:c7:7d:22:d8:88:0d:bd:76:
                    5c:86:54:d4:7d:a5:2c:64:b0:b2:ea:9a:0c:07:40:
                    cd:21:ff:5f:01:e1:d0:19:ef:0f:67:42:35:64:83:
                    2d:a0:8c:d3:27:0b:ff:41:76:e2:ef:49:b4:8d:a3:
                    de:fe:6e:1a:6e:8c:c8:1b:ab:c7:cc:a2:85:ce:e5:
                    9b:db:23:7c:c2:99:20:65:a2:8c:2d:13:de:da:35:
                    84:51:52:51:d5:80:ab:13:da:f1:31:9f:19:a3:c9:
                    b4:32:82:b0:e6:b0:fb:0e:a8:09:35:17:58:3e:88:
                    21:4d:42:98:32:a0:89:61:52:a2:7c:12:15:cf:da:
                    56:2f:5a:53:62:ab:7c:47:0b:55:20:a3:40:52:d1:
                    18:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E6:7B:67:DA:44:4C:69:E7:90:24:43:76:41:10:64:66:0C:94:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/970efddb-4404-3e2a-bd6e-0f848c00ab7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2d1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:e0:9f:19:54:de:15:13:fd:e2:ce:eb:ed:e8:69:be:47:d3:
         f8:98:61:2e:5e:dc:e8:7c:26:97:04:04:2b:6c:0a:bb:58:bb:
         82:2f:c0:79:e9:f9:ba:a4:35:71:de:02:5b:4a:71:99:71:aa:
         c1:cb:fe:72:48:f7:13:6f:7f:be:c6:45:aa:7e:f9:84:7d:e0:
         26:50:1e:61:ad:19:cd:a6:7f:3f:34:69:73:44:69:33:3d:af:
         bc:7d:84:e7:56:cf:43:d0:b4:8e:45:5f:78:81:46:3a:3e:60:
         d0:a2:d1:ca:c1:46:63:e5:90:6f:d1:ef:88:c4:60:c0:42:95:
         98:8e:38:05:d9:85:5d:18:83:b0:5c:b9:6f:36:bc:5c:c2:e0:
         ba:6c:52:2d:65:50:9d:de:aa:42:c8:1c:fb:de:b2:2a:43:d6:
         c9:60:d7:49:10:cf:82:4e:91:cf:41:03:f4:b3:51:0a:2a:7b:
         cc:37:6a:33:ea:39:d9:14:74:7f:9b:c7:cc:e7:cb:a3:26:ea:
         23:8c:b6:92:9d:6b:b6:60:48:50:1e:ef:9b:ab:01:50:cd:1d:
         37:05:b4:69:f3:1f:44:e3:86:2f:8a:b9:ce:13:84:3a:8e:a6:
         e4:63:4d:7b:14:be:ae:a5:00:8d:88:f6:d2:e6:db:7d:42:7f:
         b6:a7:a9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:02:18 2024 by rpki-client on console-fra.rpki-client.org