Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/97568f12-ab88-315f-a922-a02181b674f1.roa
File:                     97568f12-ab88-315f-a922-a02181b674f1.roa (raw, json)
Hash identifier:          4YxZF17sck5Yb9spsm8TU7sGlJ38po0J5soFCCdqs1k=
Subject key identifier:   E3:A2:1B:19:0F:9F:6E:FB:7A:00:B4:80:48:F0:E1:F0:0E:B7:34:37
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584507F01D627FA6DB95E8EDAE00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/97568f12-ab88-315f-a922-a02181b674f1.roa
Signing time:             Tue 27 Feb 2024 14:00:31 +0000
ROA not before:           Tue 27 Feb 2024 14:00:31 +0000
ROA not after:            Mon 27 May 2024 13:00:31 +0000
asID:                     11232
IP address blocks:        2001:470:241::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:07:f0:1d:62:7f:a6:db:95:e8:ed:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 27 14:00:31 2024 GMT
            Not After : May 27 13:00:31 2024 GMT
        Subject: CN=c412f9b6-8818-46dc-a7d3-da9edf437a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fa:ae:68:d2:20:b3:e9:4d:3e:e8:b1:01:11:
                    0b:01:89:9d:93:4a:8a:8a:7c:9f:09:21:d0:e3:2d:
                    66:b0:f4:45:c9:f5:14:53:72:48:15:94:20:d0:1a:
                    29:8f:31:59:ef:54:ac:e2:c8:8e:0b:7d:b8:c1:51:
                    c9:1e:e6:48:01:f9:da:20:5c:b8:89:7f:06:f6:57:
                    e8:a7:bd:37:9c:30:ef:3f:4b:e4:85:71:45:93:d7:
                    0e:fb:e0:38:e3:56:2f:c1:f7:66:f1:4b:3e:c0:60:
                    86:1d:d9:af:ef:91:45:54:d2:40:5a:43:b2:26:89:
                    de:f0:4d:40:2d:5a:37:f3:10:ff:33:b5:f1:76:9a:
                    5b:a4:07:b3:e9:0b:d1:80:99:9e:d3:ec:95:b6:38:
                    1d:01:24:ed:b7:f5:1a:7b:1e:62:e0:9d:a4:52:f8:
                    a9:30:8a:61:35:0e:49:35:a7:1e:12:fb:3b:b8:24:
                    91:27:2e:26:43:60:26:da:00:a0:b4:39:81:8e:77:
                    15:7e:98:7f:a7:7c:4d:6b:03:95:43:35:98:5f:88:
                    1a:6d:2f:67:54:0a:d3:e2:ea:0b:77:c4:f6:a4:dd:
                    04:cc:3b:ef:43:e8:d6:a2:b7:d7:58:38:3d:be:ca:
                    9e:fc:97:ff:d4:a8:b6:59:e6:5e:9b:1d:d5:ec:34:
                    04:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A2:1B:19:0F:9F:6E:FB:7A:00:B4:80:48:F0:E1:F0:0E:B7:34:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/97568f12-ab88-315f-a922-a02181b674f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:241::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:12:36:fd:8b:3a:70:bd:84:91:6d:e4:85:d4:22:c9:53:47:
         26:3d:1c:a4:e4:86:53:78:85:e1:a4:76:c7:59:4a:97:6e:0d:
         cf:3b:3b:08:0d:61:6a:38:a0:d3:fa:97:dd:d5:43:37:6d:eb:
         99:cf:60:53:a3:21:99:d7:0e:19:0e:47:a8:cf:42:53:9b:13:
         f1:9d:36:1b:90:64:05:cb:bb:37:ef:15:8b:40:2f:ed:1d:bc:
         29:1c:f6:d1:0d:a7:fc:83:7f:17:14:07:5a:2e:63:91:f0:36:
         34:a5:0e:af:5e:cb:79:43:50:35:d4:4e:60:76:46:74:c5:fd:
         49:c9:f3:51:de:03:a6:40:d0:8b:94:94:9d:b5:a4:44:d9:f3:
         59:d6:04:67:31:80:7e:72:5f:cb:d2:95:f2:20:4d:b9:82:f9:
         7c:3d:e6:81:f2:eb:b7:b6:e4:89:91:cb:20:5f:e8:5e:54:6d:
         26:33:34:64:04:07:8c:72:16:87:ed:4c:26:cc:f3:ed:a0:2f:
         42:6d:cd:37:e4:92:0d:82:d6:ee:31:44:25:69:70:1e:48:2c:
         96:52:84:b1:2c:9b:4d:f7:cc:d8:7e:54:91:2c:ea:1c:91:01:
         c0:53:07:c7:80:d3:b1:6b:a4:61:94:17:e2:e1:7a:6b:e0:34:
         b3:cb:52:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:56:15 2024 by rpki-client on console-fra.rpki-client.org