Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cc2eff73-b541-389f-bdf2-353e067b238d.roa
File:                     cc2eff73-b541-389f-bdf2-353e067b238d.roa (raw, json)
Hash identifier:          6ev5qqM8gMb6KyU8Dm7256vurxBz0wlwx7fQF7YDPDo=
Subject key identifier:   CB:A2:FB:0C:3F:28:C8:9E:DD:B5:1A:EA:76:22:80:11:A4:43:E9:74
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845025AC7D6FFF4CF34331732E6
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cc2eff73-b541-389f-bdf2-353e067b238d.roa
Signing time:             Sun 25 Feb 2024 14:00:34 +0000
ROA not before:           Sun 25 Feb 2024 14:00:34 +0000
ROA not after:            Sat 25 May 2024 13:00:34 +0000
asID:                     47702
IP address blocks:        2001:470:23d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:02:5a:c7:d6:ff:f4:cf:34:33:17:32:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 25 14:00:34 2024 GMT
            Not After : May 25 13:00:34 2024 GMT
        Subject: CN=54bebbbb-4ad1-4650-978b-6f8ddd4c7bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0b:ac:f6:77:b4:04:fb:bb:8b:92:3a:f1:62:
                    b6:39:b9:9d:f2:68:f5:a9:25:f3:aa:d1:eb:17:ba:
                    99:8a:80:71:96:02:a7:a0:fc:f8:b8:4c:e0:15:71:
                    a9:91:62:11:1f:93:de:5b:0a:23:f3:fc:f7:47:56:
                    1c:06:f7:86:05:79:f5:ec:e6:95:7e:0f:8a:32:b4:
                    ab:b5:28:0e:fd:77:be:9f:f3:6f:f4:c3:22:72:bd:
                    a2:8f:6e:ac:22:4d:02:6a:05:d9:0b:5a:57:34:48:
                    74:49:96:fa:54:a7:5b:e7:9e:ea:bf:83:1c:a7:3a:
                    67:52:37:cb:a2:ba:a1:be:1b:50:dd:67:76:31:d0:
                    62:c7:39:ac:40:5c:c6:91:67:e0:48:75:16:cc:22:
                    4e:d3:7a:36:88:28:f8:cc:b2:bd:e7:d7:58:b4:8c:
                    24:fb:8a:c0:2a:44:44:91:54:ca:d2:a4:cc:31:dc:
                    f8:20:61:3e:0b:67:c5:38:cc:9a:97:d0:1b:1d:05:
                    85:f2:d7:9b:e4:32:6c:e6:bb:1e:36:f3:c2:4e:5e:
                    35:8e:72:a5:30:88:12:09:de:43:05:9e:f7:d3:5d:
                    19:80:24:09:d0:70:d9:a8:a1:ac:8c:cc:08:87:54:
                    c1:0a:34:5d:0d:70:c7:4c:c5:29:ac:a0:26:68:7a:
                    48:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A2:FB:0C:3F:28:C8:9E:DD:B5:1A:EA:76:22:80:11:A4:43:E9:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cc2eff73-b541-389f-bdf2-353e067b238d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:75:46:a3:37:e9:82:31:ca:f4:43:3c:6a:5e:a1:89:ed:15:
         c0:c2:c9:f5:bb:49:ce:6d:16:3b:7e:f1:47:7e:bb:23:f9:83:
         0c:48:86:79:24:c3:e6:68:87:b0:61:fc:18:25:69:e9:31:aa:
         0a:15:a7:4e:89:63:fb:ef:95:b2:75:57:cf:d9:4d:1d:2f:54:
         43:88:8f:12:95:c6:d6:ac:57:82:8b:d6:df:a7:4f:4b:67:b3:
         c7:05:a0:78:c5:27:27:45:f7:5d:16:26:92:b5:dd:76:9f:2d:
         70:57:9f:96:50:eb:92:8c:50:d7:ea:72:81:53:96:f0:82:d6:
         99:cd:24:54:82:10:29:34:41:a2:54:f9:75:27:01:50:e6:21:
         67:1f:a3:88:c7:9a:01:cd:da:60:7e:bc:5a:82:56:45:36:c2:
         1c:27:c0:b6:60:1b:d7:4d:cc:6f:fe:95:3f:fb:39:bc:ed:0a:
         2f:c5:71:59:16:d4:5c:08:6c:80:dc:79:e9:ff:41:e5:81:01:
         da:b2:63:8b:af:da:3e:c6:1f:66:a1:49:ff:1d:0a:c5:3e:9b:
         40:b8:1b:71:0a:6d:d6:49:26:02:53:55:ab:27:11:5d:44:8b:
         60:12:68:6b:5f:9f:61:d1:dc:8f:0f:f1:6e:d8:8e:9b:bc:ad:
         57:79:94:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:50:44 2024 by rpki-client on console-ams.rpki-client.org