Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b778e23e-e022-364e-8a68-aaf3dbdb8803.roa
File:                     b778e23e-e022-364e-8a68-aaf3dbdb8803.roa (raw, json)
Hash identifier:          b7vKkMGnEp9OnH60XlVsdbXjofUA4jl5eMaRThlR0eE=
Subject key identifier:   23:C4:8E:12:37:36:D4:8A:46:75:26:9A:0A:1F:23:3F:AE:89:87:B8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F0353ED055156857DFB67B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b778e23e-e022-364e-8a68-aaf3dbdb8803.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     199518
IP address blocks:        2001:470:232::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:3e:d0:55:15:68:57:df:b6:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=34bd38e2-1f5d-42f5-9312-02245bbd0245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:aa:68:0f:c6:bf:f1:fb:b2:04:a8:98:00:a3:
                    d3:0a:a1:da:0c:8b:45:09:98:6b:95:ed:ac:92:ab:
                    b4:f4:25:3d:bf:fc:8a:a9:69:1a:11:58:8c:96:c1:
                    42:03:04:67:9d:f4:e6:34:7d:89:e0:14:d1:7d:da:
                    cf:96:5a:a1:8a:14:84:8f:9c:9a:9e:27:12:b2:f1:
                    ec:d5:4b:d2:9d:b8:4e:95:d6:a0:42:22:72:d0:09:
                    4f:7b:af:1e:b0:24:c6:e0:ec:9f:7a:bd:8e:9b:67:
                    a1:8a:61:fb:1f:67:19:09:b9:de:75:bf:b1:04:c8:
                    dc:d5:b5:da:25:00:ca:9f:46:f0:9e:de:d7:f9:4d:
                    81:8f:10:57:3e:61:68:38:63:41:eb:fe:31:cf:dd:
                    1c:20:32:c5:4a:12:ef:a0:b5:dd:0f:49:7b:e9:4e:
                    22:31:c9:ef:34:4b:d6:59:61:35:f4:35:7d:97:ea:
                    b2:f9:76:57:7d:13:2a:07:3a:5c:e2:e8:93:7f:60:
                    c3:06:7a:63:ab:80:7c:75:2d:c2:12:06:90:d9:54:
                    80:6e:af:4d:b6:15:06:e2:28:cd:c6:96:da:54:d4:
                    d4:0c:8e:df:93:c6:3a:bb:77:48:fd:3d:47:fa:1d:
                    fd:62:c6:74:16:05:5b:f7:91:5d:78:51:59:54:be:
                    67:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C4:8E:12:37:36:D4:8A:46:75:26:9A:0A:1F:23:3F:AE:89:87:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b778e23e-e022-364e-8a68-aaf3dbdb8803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:232::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:8d:24:f2:1f:56:8d:40:f7:3f:12:99:32:0a:78:82:b9:5d:
         38:c2:9d:f0:bd:71:7a:fa:a1:fa:39:e7:22:13:a0:66:30:cd:
         dd:d8:64:1e:75:aa:8c:41:7c:c3:b0:2b:fc:c3:e8:a3:ea:b7:
         17:54:c3:06:a4:1c:b3:1e:b3:9c:17:fc:04:0a:e7:f2:b1:7c:
         ce:fd:39:93:95:f0:99:63:4d:6e:55:37:ea:9e:a3:46:2f:02:
         df:ac:0b:28:fb:07:fc:98:e5:ff:8c:59:8e:76:e7:ef:0e:64:
         36:4a:cb:bb:70:9f:d4:e0:6b:67:31:4f:20:c1:bc:f5:9a:20:
         3c:6e:dc:6e:21:1f:cf:a8:45:cd:c5:4f:7f:5d:8b:f0:11:20:
         a6:66:df:2f:86:fd:8a:9e:e5:54:57:2d:c5:39:36:9b:f8:d8:
         18:d3:cc:0d:d8:b9:43:00:54:a5:1d:ba:e1:26:2e:56:ba:52:
         61:e5:1e:34:8a:95:fb:08:2c:44:7f:7f:97:ef:f0:05:9b:ca:
         97:a0:a6:a8:12:45:b3:f0:96:30:3c:21:8e:ef:f6:2d:5d:cf:
         6c:02:2a:cb:39:4f:33:51:3f:7b:eb:f8:f4:21:c9:35:19:75:
         56:d6:f5:c4:9e:96:05:1f:f7:95:6f:33:bf:df:8b:15:25:eb:
         51:4f:34:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:56:15 2024 by rpki-client on console-fra.rpki-client.org