Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a08cfc19-18ad-3adc-9787-87236bf1965a.roa
File:                     a08cfc19-18ad-3adc-9787-87236bf1965a.roa (raw, json)
Hash identifier:          78bOj2umkGfW0igCHHyAvZKN7oYKVOONQ9fQT+bVxXA=
Subject key identifier:   57:A6:8E:8E:19:3D:6D:5B:A0:8C:CD:B0:11:58:E1:89:FB:55:B8:68
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845C5A8F9491EE759DB67DAEF80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a08cfc19-18ad-3adc-9787-87236bf1965a.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     15108
IP address blocks:        2001:470:1a4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:f9:49:1e:e7:59:db:67:da:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=a2b7cc68-8d61-40b7-af28-100839a6b052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f4:e7:0a:aa:20:65:e9:11:e2:26:1d:b5:8c:
                    6c:29:60:b9:74:97:2a:07:92:6b:31:c1:3a:21:2c:
                    7a:b0:3d:29:4a:07:ea:5f:f4:c7:45:a7:b3:46:50:
                    a5:d9:06:d1:4d:2d:59:72:36:60:28:de:94:d2:36:
                    a4:22:61:49:70:45:38:b0:d1:56:22:7a:08:96:8b:
                    58:df:71:50:b4:64:06:a0:19:9d:99:ba:74:f6:e3:
                    8a:7e:40:b9:28:d8:c6:16:fa:3f:89:53:2b:60:a6:
                    e1:59:32:af:0d:cf:be:7a:c1:5d:6b:b7:7d:72:90:
                    3c:0d:44:18:0d:ec:21:bb:5f:b6:29:a6:1f:6f:04:
                    97:ff:2f:18:3a:bd:80:c7:eb:9a:61:14:a2:a9:f3:
                    f4:9e:a3:21:f5:ee:33:5b:00:10:28:77:b9:ad:e4:
                    39:2e:37:33:7b:d9:40:1e:53:0c:af:75:36:ab:f9:
                    ce:46:aa:ab:3b:d3:f7:9d:0e:c1:17:32:a2:35:d5:
                    a7:90:29:a3:db:b8:04:c0:80:8c:6b:c3:34:4f:19:
                    7d:47:a2:59:7c:2d:2c:f3:a3:61:12:c2:cd:4a:f6:
                    0e:b1:7a:24:3e:4d:05:b1:08:25:09:fd:a9:c3:11:
                    0b:2a:4f:d8:50:a9:69:2d:5f:a4:5b:5c:90:ef:c2:
                    7c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A6:8E:8E:19:3D:6D:5B:A0:8C:CD:B0:11:58:E1:89:FB:55:B8:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a08cfc19-18ad-3adc-9787-87236bf1965a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1a4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:c3:35:e6:5c:85:d7:39:a0:36:d9:1f:6a:b8:b0:2b:6b:e0:
         5c:bb:1b:82:12:31:0e:89:ff:30:1f:eb:95:64:11:e8:0f:32:
         40:e4:5c:fb:af:7a:51:71:a6:a5:b0:d8:47:87:5e:1a:f6:76:
         b9:ed:0d:9f:ad:fe:77:09:10:d4:56:09:d5:e5:13:06:d8:0f:
         bf:dd:78:35:e5:63:3c:36:92:86:9e:ba:6b:7f:4b:2b:3b:3d:
         60:cc:1a:a0:22:4a:98:6b:20:6d:00:b2:81:e1:12:d7:e6:cd:
         3e:a3:fb:59:54:c4:5a:7a:35:e5:28:28:86:28:63:13:e9:ae:
         b5:35:ab:4e:05:e0:95:3b:33:00:b7:61:d4:03:66:fa:4d:6c:
         f3:15:e1:5f:1d:e3:ce:88:99:77:e6:b1:30:62:58:b8:5b:6e:
         70:db:de:63:46:0d:a6:58:d2:d1:88:93:7c:db:57:50:aa:74:
         e8:06:b9:d7:de:ad:90:08:54:f9:68:d2:68:50:b9:1f:3c:80:
         a4:34:8e:64:c4:68:f6:ac:7e:fa:30:b4:25:c4:ed:1f:6b:47:
         92:01:c0:99:d2:f7:c2:03:33:41:ae:71:0c:6b:c2:9f:e6:69:
         9c:86:49:59:5c:61:68:59:11:51:cf:b3:2b:46:7a:9a:45:4d:
         2f:1c:09:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:11:30 2024 by rpki-client on console-ams.rpki-client.org