Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a412d68f-bfab-3183-a5b8-a0cd451c5134.roa
File:                     a412d68f-bfab-3183-a5b8-a0cd451c5134.roa (raw, json)
Hash identifier:          W3FxAXpVEzgRArcBIdKGISK/jKVFyOVSA5MKXzFSP7A=
Subject key identifier:   B9:B6:DC:69:8A:55:01:8C:DF:39:96:D3:E8:5D:C8:3D:AB:DF:8E:54
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584538BC5DDD055C9A3DB67EC500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a412d68f-bfab-3183-a5b8-a0cd451c5134.roa
Signing time:             Sat 16 Mar 2024 01:30:53 +0000
ROA not before:           Sat 16 Mar 2024 01:30:53 +0000
ROA not after:            Fri 14 Jun 2024 01:30:53 +0000
asID:                     9829
IP address blocks:        2001:470:2bc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:38:bc:5d:dd:05:5c:9a:3d:b6:7e:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 16 01:30:53 2024 GMT
            Not After : Jun 14 01:30:53 2024 GMT
        Subject: CN=848ebc13-ccec-4226-b5ff-e58e0a53d1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:18:98:cb:2e:55:35:23:6f:a4:30:db:97:64:
                    5f:4b:f5:a1:94:86:6d:ea:a0:e4:10:af:27:dd:1b:
                    c2:bb:0a:b0:45:83:79:64:cb:3c:94:1e:a5:14:a2:
                    b2:5f:7f:25:fc:0e:40:f6:53:8f:26:a6:81:fb:76:
                    2f:f7:08:b2:14:9a:61:87:c2:6b:c9:d1:d8:b6:f7:
                    e0:b7:5d:4e:c2:8e:f3:73:eb:ec:ad:e0:b2:6d:7a:
                    a9:b6:aa:ec:ba:1d:e2:eb:30:c7:3d:7f:e3:f2:d0:
                    78:29:54:0f:77:5e:fa:31:2b:1a:03:33:50:19:85:
                    cb:94:91:df:d2:b2:6a:91:e3:78:4a:d7:e6:89:14:
                    a2:d0:39:0f:aa:81:89:38:12:31:1b:ac:7f:3b:fc:
                    aa:f8:a0:b0:9d:1f:ea:cc:93:89:db:37:12:18:45:
                    bf:34:bc:b0:dd:ac:74:fb:42:e8:41:29:4d:43:69:
                    ed:47:d2:83:e4:b4:fd:be:78:41:47:ef:d2:73:e5:
                    46:ac:af:d0:6e:4a:a6:78:17:73:13:b3:59:bf:1c:
                    3d:05:9e:d3:72:17:e1:d9:a7:a3:1c:49:8e:e1:f9:
                    0f:41:0b:d8:9a:87:2c:f7:59:81:42:c4:61:e2:09:
                    86:4c:ca:8e:65:1e:e1:71:f6:f8:74:1d:29:a6:a6:
                    73:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B6:DC:69:8A:55:01:8C:DF:39:96:D3:E8:5D:C8:3D:AB:DF:8E:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a412d68f-bfab-3183-a5b8-a0cd451c5134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2bc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:ec:da:fa:e1:89:1c:56:28:fa:36:2d:5f:8f:05:12:bd:c1:
         84:cd:66:fc:c2:5a:8b:d0:f4:68:fd:3b:6c:4d:40:de:74:df:
         a5:62:0e:61:92:b8:07:fe:19:c6:8c:9e:4a:71:74:6e:7f:c0:
         3b:f5:a9:d2:74:0a:0b:8a:f6:7d:01:b7:a6:d2:2f:82:87:3a:
         5d:9b:e7:fc:cd:ff:bf:7b:ea:82:eb:2b:44:96:39:fe:88:0f:
         3f:c7:0c:8f:60:d7:4e:fb:66:75:b1:15:52:09:17:ff:48:c6:
         43:3b:5f:c7:8a:e3:40:d4:eb:6f:e4:f5:82:f7:8e:35:f0:08:
         36:24:87:d5:14:6e:57:f7:15:9e:b0:f8:4d:32:3a:a3:18:52:
         6b:69:d2:8b:f2:ff:7f:35:ef:91:42:71:7b:44:9e:55:35:d1:
         44:1d:3e:16:a5:66:4a:e8:c1:a1:f3:69:c0:de:6e:f3:bd:47:
         79:9b:e8:64:72:03:81:d3:a2:4b:ce:99:1d:b6:4f:dc:31:bb:
         95:35:18:25:e9:ad:a3:91:7e:9a:f0:20:91:f7:f0:51:26:cd:
         2b:21:f9:e2:9f:59:b6:b7:85:e4:0e:8c:4c:1c:0b:7e:fb:70:
         33:6d:69:7c:54:9b:82:f8:9d:4a:57:23:ed:ef:33:f0:5d:1b:
         2a:51:c4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:30:37 2024 by rpki-client on console-ams.rpki-client.org