Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b476c616-c521-3da5-abcf-ef81b1bb48ae.roa
File:                     b476c616-c521-3da5-abcf-ef81b1bb48ae.roa (raw, json)
Hash identifier:          Judencjl1nscCeFOe61Www1ptzfJjhbX4xKQsb7nfug=
Subject key identifier:   07:61:04:C9:7F:7F:C1:F9:F1:C5:65:FA:7B:E7:45:32:FF:EF:39:F1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F73F04C0A0EEB5880AB39E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b476c616-c521-3da5-abcf-ef81b1bb48ae.roa
Signing time:             Wed 21 Feb 2024 14:30:46 +0000
ROA not before:           Wed 21 Feb 2024 14:30:46 +0000
ROA not after:            Tue 21 May 2024 13:30:46 +0000
asID:                     137329
IP address blocks:        2001:470:1eb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f7:3f:04:c0:a0:ee:b5:88:0a:b3:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 21 14:30:46 2024 GMT
            Not After : May 21 13:30:46 2024 GMT
        Subject: CN=c278657e-d46a-4936-ba7d-cd6e3b6a5919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:07:29:62:57:04:25:ed:bf:b2:92:9b:c3:
                    0d:3e:95:ef:79:b3:18:d2:9a:5e:ea:5b:76:a0:a8:
                    f7:7a:99:70:29:73:fd:f3:a2:ce:e4:19:60:5f:88:
                    23:b4:0e:fc:f7:56:bb:ed:25:7b:4d:ed:7c:25:93:
                    d0:fb:dd:87:62:ed:8c:2d:13:af:17:87:cd:1f:b3:
                    80:43:bd:10:44:a3:6f:24:38:d3:c4:81:72:d3:0d:
                    d1:84:e2:3a:2b:fc:c4:a0:e1:f7:b4:82:47:08:a2:
                    0b:fc:e4:ad:b9:9f:08:a2:3e:f9:c5:f7:ea:88:30:
                    8e:b0:55:70:9d:77:c6:f0:42:94:17:a3:68:a3:ea:
                    f1:48:c9:9b:58:c8:85:2f:85:db:0f:67:dd:1b:3d:
                    b3:3e:d6:9c:d9:3e:fa:aa:7a:bb:95:99:aa:60:61:
                    e5:9d:dd:da:ea:89:37:37:c9:0c:4e:9c:8c:e2:6e:
                    0b:33:8a:61:51:fe:c0:51:11:e8:f3:93:b3:31:de:
                    14:6d:a4:62:32:16:c8:c7:a9:73:94:91:e0:a1:4b:
                    2e:18:1c:21:89:3e:c5:c9:a7:01:13:5c:3c:87:bb:
                    3f:fd:54:ff:c1:c6:91:23:f7:af:d9:9a:5c:96:e0:
                    3e:8e:b3:4c:46:62:c4:22:46:1b:1d:1a:b2:3d:e0:
                    3c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:61:04:C9:7F:7F:C1:F9:F1:C5:65:FA:7B:E7:45:32:FF:EF:39:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b476c616-c521-3da5-abcf-ef81b1bb48ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:f0:ad:73:91:57:72:4d:4d:8d:47:eb:63:18:2e:cf:48:52:
         9d:43:05:26:2a:89:83:31:a3:a9:81:9a:9e:69:d2:a0:bc:5c:
         dc:5c:1f:10:fc:a0:31:b6:71:e7:78:08:55:22:c4:12:24:3c:
         28:89:ef:bf:04:5a:ac:49:c1:b3:36:68:65:a4:f8:78:37:7a:
         fe:da:22:73:6a:d1:4a:32:f1:6b:2e:1a:c1:f2:b6:e0:c1:34:
         f8:05:6e:09:74:1c:98:80:16:5a:1d:56:44:f7:fe:2d:53:09:
         2e:1e:1b:99:a8:30:17:99:fc:88:80:e7:87:d2:06:dc:20:11:
         d7:46:a8:ea:39:77:79:b2:65:fc:d5:14:b7:3b:0c:4a:c3:3c:
         13:24:88:a3:78:ca:92:5c:c9:be:ab:cc:65:df:42:fe:2f:33:
         eb:4e:86:3e:d9:f4:78:8a:b2:da:a0:8c:74:15:c4:a9:cd:ed:
         31:cb:f4:ab:a0:d2:5e:a1:8b:95:69:1a:6f:1d:e8:03:58:8c:
         ed:3c:4f:d5:04:3e:7e:47:78:74:5b:8a:0c:ee:98:4f:63:94:
         a5:66:7a:07:25:f0:ce:37:cd:0a:b1:a6:e2:f5:49:95:73:33:
         41:26:4f:19:b9:5f:ce:63:57:59:3d:e9:85:67:11:e8:a7:f2:
         04:12:d4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:11:30 2024 by rpki-client on console-ams.rpki-client.org