Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aae4e02b-c7b9-3fcb-be70-1ad5f17f8acc.roa
File:                     aae4e02b-c7b9-3fcb-be70-1ad5f17f8acc.roa (raw, json)
Hash identifier:          T+F4qyROlWrM3PZB2bZ3mrPT9QE22npRGw4O+99s/mo=
Subject key identifier:   57:A6:F4:84:46:62:D4:68:38:68:85:D9:49:8C:77:5F:E7:5A:C1:FB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845549817D34414EA34E96D6880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aae4e02b-c7b9-3fcb-be70-1ad5f17f8acc.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     12183
IP address blocks:        2001:470:132::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:17:d3:44:14:ea:34:e9:6d:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=132ea62a-4941-49c1-a6c5-c921b79991d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:f0:63:f0:41:1f:10:54:3c:23:6c:db:c4:
                    c7:b9:18:74:f1:df:07:08:86:0b:f8:59:90:2a:7e:
                    f3:1f:bd:96:3a:b1:e7:a6:9e:f9:6e:5e:f0:19:a7:
                    0c:44:67:6c:59:7e:98:10:5d:8e:2f:78:63:4b:b5:
                    0d:32:c9:b2:92:6f:c7:79:7f:ba:2c:b1:d9:bd:24:
                    63:7d:92:7f:7f:0f:13:53:66:8c:a8:62:c8:a7:94:
                    36:43:58:18:f1:94:7a:3e:5a:05:cd:ad:bc:79:b2:
                    97:d9:16:71:a0:57:5f:06:a8:0a:1d:ff:ba:83:1b:
                    3b:25:0e:7d:e3:37:7f:53:57:8f:c3:08:09:51:c3:
                    73:34:a6:88:2e:4c:fa:c9:b3:e7:fa:1d:a2:9e:01:
                    24:f9:7f:05:86:4c:70:e6:cc:40:0e:d5:7f:b7:ea:
                    e0:2e:47:fd:36:ce:4b:c0:c2:d0:67:42:fc:5d:c2:
                    d2:b1:24:77:08:6f:69:77:ac:1b:09:17:40:30:fd:
                    88:ef:28:cb:53:1b:35:48:c6:cf:03:1f:23:a7:30:
                    ba:c2:54:b0:74:33:d5:72:26:52:0a:47:73:eb:0d:
                    ce:b2:30:9a:1d:78:53:7c:45:5c:e7:38:28:e7:3b:
                    5c:7c:4b:13:9b:78:fb:33:4a:4a:b6:fa:a9:20:8b:
                    b2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A6:F4:84:46:62:D4:68:38:68:85:D9:49:8C:77:5F:E7:5A:C1:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aae4e02b-c7b9-3fcb-be70-1ad5f17f8acc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:132::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:2f:03:50:35:0d:0f:d7:c9:62:95:9a:45:87:64:6e:cc:33:
         44:97:fa:93:08:99:aa:91:f5:e2:06:3a:ef:a5:56:43:d7:9f:
         7a:26:be:47:d5:d4:32:c5:d9:b3:a9:72:b7:09:90:49:9e:2d:
         32:52:20:ff:c3:c2:e0:2d:e5:2a:62:b6:a8:64:69:dd:66:fe:
         9d:03:e2:4c:d9:dc:8f:42:be:d2:98:8c:0c:7e:c3:8c:af:41:
         d8:7f:68:98:69:ea:7b:48:db:93:30:23:d3:65:03:e2:28:47:
         b5:aa:96:ea:ac:67:d1:0a:97:eb:c0:12:41:bd:aa:26:c1:99:
         99:82:40:50:4e:53:b6:04:f2:9b:41:96:ff:7d:9b:da:49:70:
         c5:0d:87:87:00:65:f1:a9:98:ab:1f:a2:2c:1c:8b:6c:5b:88:
         79:6f:09:85:1e:98:ae:90:4a:66:03:39:df:30:81:99:8d:b4:
         61:38:18:01:6e:bc:e5:a4:d6:8d:ac:31:d0:c4:98:50:77:a8:
         40:51:5e:e6:90:7c:2e:7a:77:de:6f:bb:9b:f2:2e:b8:a8:c2:
         71:54:7a:02:8c:f1:1c:c0:36:29:aa:54:46:3f:ed:8e:94:c0:
         20:7c:cc:82:78:82:d0:dd:86:ab:97:e1:5a:2e:90:d7:55:00:
         41:dd:fa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:56:15 2024 by rpki-client on console-fra.rpki-client.org