Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7c55bb5-b2ae-3bfb-9df8-bf72eab54382.roa
File:                     b7c55bb5-b2ae-3bfb-9df8-bf72eab54382.roa (raw, json)
Hash identifier:          vl0bWP6C8mbh6UN/JIluhQ0y8fBooStgQBXMb+pAhw8=
Subject key identifier:   8B:2F:20:6A:1B:53:F5:ED:FC:44:CD:12:FC:E4:F3:BD:2B:D1:4B:65
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F89568BF2C01AF5C2D7E9E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7c55bb5-b2ae-3bfb-9df8-bf72eab54382.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     36791
IP address blocks:        2001:470:50::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:68:bf:2c:01:af:5c:2d:7e:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=f885bc32-af2f-4361-88a8-8b166010e49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:00:8b:3e:bb:bd:e3:44:8e:79:b0:be:80:7f:
                    db:ea:3c:ce:6c:35:8b:b3:f3:f1:cc:88:4c:11:5a:
                    1e:51:19:dc:b7:cc:89:a7:d9:4c:e9:5f:57:f1:b3:
                    7b:be:19:0d:e4:4b:62:ad:35:77:0e:cb:a4:fc:e4:
                    fd:06:b6:c9:e4:58:dd:5b:5a:d7:fe:d8:6e:04:4b:
                    8b:35:d5:c3:6a:bd:cf:11:f4:94:3d:de:1e:43:eb:
                    e8:19:7f:86:d6:b6:c8:a5:d1:b3:3a:08:bc:f9:7c:
                    cc:75:ea:cf:ca:c6:2b:66:cb:71:ef:80:ff:d5:9a:
                    76:b2:11:28:e3:88:d3:15:7a:f3:64:d0:61:0c:71:
                    2f:f4:9b:24:9e:5e:75:7e:88:6c:02:05:54:bf:ea:
                    36:fe:fd:8c:9e:8d:02:8b:fd:c5:f6:07:4e:c5:f5:
                    3b:9a:c8:b1:b6:fc:b6:28:06:fc:5a:c6:5f:33:7a:
                    98:a8:0f:c2:05:22:ad:99:1e:c0:26:03:0d:c6:9b:
                    25:2e:f4:6d:02:0d:32:28:e3:a1:d9:7e:07:cc:5b:
                    12:1f:17:54:42:28:c2:04:16:93:58:49:ed:2b:08:
                    4b:6f:6e:8e:25:4a:a7:89:30:b2:ea:57:24:25:f7:
                    35:33:4c:c7:c7:0c:55:9c:54:e8:15:92:75:17:78:
                    77:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2F:20:6A:1B:53:F5:ED:FC:44:CD:12:FC:E4:F3:BD:2B:D1:4B:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7c55bb5-b2ae-3bfb-9df8-bf72eab54382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:50::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:c3:62:a8:44:0b:99:c6:5b:5d:27:76:67:8b:38:ee:5c:7c:
         66:d7:3e:f2:8c:32:0e:40:b0:6c:3b:2d:67:00:69:d0:0e:74:
         e1:48:16:b2:8d:40:a0:05:8f:fb:af:77:9b:59:08:98:90:71:
         f0:d8:47:51:73:23:c5:da:92:2c:a6:41:c0:96:9d:c2:78:00:
         37:af:a8:08:e9:e6:3d:b2:88:c3:7a:37:8b:4b:a0:94:27:fb:
         2f:86:70:fd:ef:2f:db:32:19:c2:6d:72:ff:e4:7d:e7:16:14:
         29:ce:d6:21:87:f3:96:0e:94:6c:2e:06:aa:d0:84:5a:a4:2e:
         49:0a:64:25:22:1f:8f:bc:43:8f:36:48:54:60:c1:1b:8f:51:
         8f:2b:19:af:2a:a6:95:3e:54:0d:5e:e9:0e:3c:e2:04:99:63:
         e6:89:5f:04:72:04:b6:32:98:99:63:fa:84:be:b4:0b:f2:68:
         e1:7a:f1:60:d5:b5:57:5c:e8:0c:4c:50:ca:53:61:00:95:51:
         60:83:df:fc:ba:ce:d2:45:ec:dc:b3:72:59:18:0d:59:e2:d4:
         1b:6d:9e:4b:dc:62:d3:0f:86:12:be:1c:31:27:8e:8b:83:f7:
         f2:04:b2:d5:f1:b7:ef:ab:33:31:a7:1d:1b:9d:55:8b:a0:44:
         61:7f:87:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:20:38 2024 by rpki-client on console-ams.rpki-client.org