Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9eca3eb-771a-3f8b-8262-2a50010e7890.roa
File:                     c9eca3eb-771a-3f8b-8262-2a50010e7890.roa (raw, json)
Hash identifier:          kqgRgFr6ik+qADNawVrvilEj+mNVsdITtDsm4vv02ME=
Subject key identifier:   2A:C4:81:8F:4B:BE:6F:92:81:58:B1:9F:5B:DD:AD:A8:83:B7:22:AA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858455771E39303EF3214A6D22F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9eca3eb-771a-3f8b-8262-2a50010e7890.roa
Signing time:             Wed 27 Mar 2024 01:30:52 +0000
ROA not before:           Wed 27 Mar 2024 01:30:52 +0000
ROA not after:            Tue 25 Jun 2024 01:30:52 +0000
asID:                     40081
IP address blocks:        2001:470:2ca::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:57:71:e3:93:03:ef:32:14:a6:d2:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 27 01:30:52 2024 GMT
            Not After : Jun 25 01:30:52 2024 GMT
        Subject: CN=ada9562d-af0b-41b6-bdb0-1fb11f5e8b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f5:2f:65:70:e9:cd:f3:c0:ab:cf:70:8b:ca:
                    42:83:94:11:4d:14:88:94:1a:55:27:06:be:93:d4:
                    5e:84:8c:7e:34:93:d5:6a:a1:07:33:8c:a7:a1:4a:
                    d6:80:62:5b:85:ee:76:33:55:72:49:2a:16:ec:ec:
                    3d:81:9f:69:40:a2:56:d4:c0:06:5f:ba:eb:9c:04:
                    58:8a:4c:04:63:81:19:a1:da:d3:d6:bf:65:c9:3e:
                    83:e8:46:88:e6:30:d7:d3:8c:60:10:78:1e:4a:a3:
                    35:94:f2:cb:67:4f:cb:60:ce:ba:4f:d0:d8:9b:fd:
                    b4:cc:6b:89:f2:1f:ac:74:1b:7b:24:0a:45:75:a9:
                    6e:03:25:fb:5d:fc:66:d6:f4:fd:e9:2e:02:49:13:
                    a9:2c:46:14:51:4b:43:57:3a:56:26:9a:75:d5:96:
                    48:00:2b:04:4e:63:cf:10:22:39:88:d0:e9:b1:69:
                    24:0d:8d:d3:85:05:92:05:97:15:ee:bd:bd:66:9a:
                    ec:12:38:bc:a5:0a:d9:ab:c0:e3:59:f6:34:54:36:
                    34:22:e7:61:0a:0e:22:b2:95:99:63:25:30:1f:2c:
                    db:b9:8e:8d:ff:f7:26:ce:81:c0:73:fe:5d:14:2d:
                    16:9e:03:5f:66:63:89:4e:b4:5d:ac:67:c5:65:0b:
                    36:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C4:81:8F:4B:BE:6F:92:81:58:B1:9F:5B:DD:AD:A8:83:B7:22:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9eca3eb-771a-3f8b-8262-2a50010e7890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2ca::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:2d:d8:4a:e3:43:4f:03:a5:a9:92:70:94:96:27:49:1d:e5:
         30:83:5b:d8:72:56:54:8b:69:62:62:63:8a:2a:4b:a9:2d:59:
         38:1c:d3:3a:b2:65:6c:e3:7a:96:05:bf:15:1a:f9:0e:0c:4f:
         d4:e4:42:4d:d1:ed:7e:d1:e0:ee:13:fd:8c:94:83:86:d3:c0:
         ab:1b:f4:e6:f3:a1:ac:f4:67:2a:a8:09:eb:09:a1:df:32:10:
         6a:33:26:d0:3a:0f:37:44:5d:80:2e:fa:fd:d2:1e:1b:f4:59:
         9e:ac:74:d5:9c:f4:a2:fc:39:f4:84:07:0d:da:30:e9:13:fa:
         57:e6:e0:19:e6:1c:b4:63:7b:44:33:f5:d0:ca:92:5f:46:60:
         ec:b1:18:ac:72:f7:1c:0a:b2:fe:76:1a:9b:37:f7:8b:62:d4:
         42:60:2e:61:64:f5:fd:cc:9a:25:43:6e:7f:c3:ee:66:6f:09:
         6c:58:a1:56:43:ad:ed:8e:4b:ad:18:dd:8e:06:1a:22:3a:f3:
         ff:01:97:4e:b0:ad:36:14:01:45:37:57:50:4e:c7:ba:d8:55:
         46:c4:38:30:66:ed:32:4f:00:43:57:80:36:06:e4:59:7b:50:
         5e:97:25:64:60:7c:82:39:11:3b:99:00:31:0c:c3:35:29:db:
         e5:0e:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:47:27 2024 by rpki-client on console-ams.rpki-client.org