Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bca0f8e5-14b6-3c5d-bb3a-fc627c4b693c.roa
File:                     bca0f8e5-14b6-3c5d-bb3a-fc627c4b693c.roa (raw, json)
Hash identifier:          sKDuNC0hSn85u6N1cEFL8gkMbak9fQn7dad+iPtMupg=
Subject key identifier:   D0:4F:C4:F4:1B:80:2D:EB:5A:72:6F:28:4E:BC:AB:BF:B8:28:F1:6C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845549817EC31214C0F4EB1A680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bca0f8e5-14b6-3c5d-bb3a-fc627c4b693c.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     23089
IP address blocks:        2001:470:134::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:17:ec:31:21:4c:0f:4e:b1:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=c92c61f4-d7ae-4c48-ab76-d16f33f0542e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5c:6e:db:93:62:af:94:55:9f:d1:ec:27:40:
                    44:23:b8:c2:d0:85:f1:3e:cb:36:14:bb:8a:34:76:
                    1f:b4:ca:91:5f:6b:1e:68:5c:5c:e5:7a:f0:38:27:
                    5e:c7:8d:d4:a5:74:ae:26:36:56:5f:86:15:ca:a2:
                    f0:df:2f:37:34:be:fc:f4:fd:37:21:23:35:57:53:
                    0c:ba:ab:1f:1f:6a:c3:99:6b:b4:20:85:c2:b2:1d:
                    ce:af:24:9a:42:4b:14:46:85:83:44:32:77:0f:d9:
                    4d:6c:70:10:7c:c5:5d:cf:6a:ba:69:0a:c5:5f:25:
                    e8:76:1e:a4:cf:1d:c1:a5:0d:61:24:43:b4:a3:7d:
                    c5:10:9c:45:3d:b2:a4:1d:95:dc:18:16:32:cd:f8:
                    0b:7a:8b:b2:be:e6:18:6d:fe:25:73:8a:2d:01:16:
                    c0:3c:47:73:97:9d:00:27:c9:e9:0a:a3:7c:0e:cc:
                    1d:71:f4:f5:ba:d1:fc:df:06:a2:87:c5:9c:25:dd:
                    0f:75:1d:28:18:b2:22:cb:2e:8f:1c:6f:ce:0e:53:
                    a1:da:9b:fe:f5:95:cd:de:0f:60:84:f9:8f:9c:87:
                    b5:ff:48:44:ef:c3:43:7c:a2:2c:4d:da:58:e5:aa:
                    03:9a:0f:53:d1:b5:40:63:a7:f9:22:f6:b8:a5:60:
                    66:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4F:C4:F4:1B:80:2D:EB:5A:72:6F:28:4E:BC:AB:BF:B8:28:F1:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bca0f8e5-14b6-3c5d-bb3a-fc627c4b693c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b6:ea:d0:6e:f3:10:b3:8c:c6:da:6b:c2:73:ec:e5:b5:e0:
         a8:f9:db:15:6f:47:0c:40:ee:52:54:80:08:7e:9d:1f:d9:bf:
         f3:ef:34:13:96:9e:78:0e:53:75:8e:d5:57:b5:14:40:03:88:
         77:f5:3c:90:36:7b:c8:79:50:76:b7:95:ca:ce:6a:d4:03:a6:
         6f:b5:1d:25:e7:1a:c1:05:e7:ac:12:c1:f7:03:67:00:0d:f2:
         e4:a5:61:3c:25:e2:fa:cd:d0:df:2d:36:87:08:2c:2e:82:2f:
         c6:b5:2a:03:5b:26:17:85:9f:8f:52:47:ae:cb:c0:59:ec:4c:
         af:e8:22:ca:c1:2c:ab:49:36:7e:1a:76:aa:bc:9a:e6:84:95:
         49:0b:cc:e5:3d:99:ce:03:b0:96:11:15:bc:3a:fe:89:a5:d4:
         a9:48:d5:16:b2:99:49:d8:1a:33:72:f5:ed:5d:e5:dc:e4:33:
         24:07:af:30:8b:a5:e4:8d:aa:59:09:0e:09:20:aa:17:d1:d5:
         55:41:e6:f2:c4:cd:92:7f:c9:cf:22:56:4d:46:b2:dc:4b:ed:
         b6:e2:a9:7d:0d:dd:ba:49:5e:fd:c7:e2:30:67:bd:05:41:8c:
         5c:39:1f:cb:ac:7a:94:72:7a:36:a3:9e:42:9f:ad:18:b4:77:
         4f:25:86:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:47:27 2024 by rpki-client on console-ams.rpki-client.org