Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cf9964d5-5b56-338b-bfd2-947ec227f0ea.roa
File:                     cf9964d5-5b56-338b-bfd2-947ec227f0ea.roa (raw, json)
Hash identifier:          iSLfvKxN8kNPdsSLRN+seCAL78FWmzGWzBGevwesR3A=
Subject key identifier:   E2:22:86:F0:26:1C:70:8E:2A:8C:52:D9:09:8C:E7:FE:66:0A:7D:AA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F89570A5351CC904882B2780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cf9964d5-5b56-338b-bfd2-947ec227f0ea.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     39444
IP address blocks:        2001:470:14f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:70:a5:35:1c:c9:04:88:2b:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=1fd38a70-2f09-46d0-8182-2432b09a9433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ed:5f:50:88:9a:ef:ec:68:a4:23:0b:c3:2e:
                    e1:64:69:44:d0:f7:33:e8:ff:bc:5f:f6:ab:61:91:
                    cc:2a:ae:d6:2f:7a:dd:2a:c0:ae:9e:19:c4:ab:51:
                    09:f8:10:fb:f2:14:9f:12:e9:ec:7b:40:77:6e:bf:
                    34:f0:d4:3c:88:bd:c9:f4:24:b3:f9:86:5e:fc:5f:
                    c5:27:db:4e:ec:09:49:f7:f8:5d:0d:3d:d7:f7:cc:
                    49:d5:bb:30:80:ac:19:0b:7c:38:c2:e1:32:ec:38:
                    10:57:3a:d7:86:a6:e4:97:c3:c0:e9:e4:b0:36:90:
                    92:7e:fa:1e:0f:fa:3f:21:06:0e:c5:55:9c:19:ec:
                    84:c7:af:b8:e9:d3:2d:41:fa:1e:6f:cc:bd:cf:6d:
                    df:6b:8d:3f:57:26:15:7a:90:6a:58:d6:93:f6:7f:
                    47:6c:37:a2:41:5e:1a:3f:e6:9e:fc:b4:bb:d3:ec:
                    eb:4d:d4:f4:ef:c7:48:ba:b3:3a:bb:be:8f:8f:36:
                    59:37:a3:97:00:b5:99:28:64:c5:02:33:98:e7:c3:
                    88:63:97:c4:97:e9:21:69:0f:b6:1b:34:b1:b3:3e:
                    b5:04:0d:ed:ee:2f:6c:81:16:5f:5c:86:7d:dd:73:
                    1b:f1:80:1b:d6:19:ba:b9:8f:f9:6c:26:43:f1:a6:
                    ee:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:22:86:F0:26:1C:70:8E:2A:8C:52:D9:09:8C:E7:FE:66:0A:7D:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cf9964d5-5b56-338b-bfd2-947ec227f0ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:14f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:1e:ff:be:85:e6:1a:ec:96:16:b7:70:68:e2:a7:b4:48:a2:
         2b:5a:3f:8e:e7:e7:0e:aa:bd:a5:53:1c:dd:ac:36:72:77:a1:
         97:3e:6c:74:44:75:51:5e:08:60:34:44:ac:05:23:b3:40:42:
         f4:1e:7a:bc:9c:00:b5:48:1d:aa:94:60:66:29:a5:69:65:ab:
         c6:f9:c3:82:25:3c:81:5e:7b:12:2b:bd:9e:0a:04:6c:b4:e2:
         a8:a4:bb:4e:1e:4b:34:7e:4b:dc:33:e8:3f:da:b1:6d:a1:dd:
         f3:12:a6:67:b7:6c:be:3f:b3:50:32:5e:97:12:a5:51:e2:d2:
         d1:35:23:80:51:c4:ef:af:48:51:a5:55:ae:64:fe:a5:c8:dc:
         1a:2d:42:ed:ef:39:4e:16:a3:91:5c:f5:aa:a7:4c:18:ec:4f:
         34:28:95:c8:bc:33:f1:95:d9:3f:d2:cb:97:70:2f:6b:39:5f:
         b3:67:cb:5f:63:d4:fb:61:f9:f5:a4:18:91:ed:d6:0c:1a:44:
         72:3c:43:d7:1e:42:2e:5f:f3:b6:27:1c:ed:83:3f:05:4c:b7:
         5c:fd:f5:57:fb:5e:00:f3:e7:9c:92:0d:bb:fc:35:54:4b:c3:
         11:2e:97:82:62:31:82:0c:d4:53:03:78:01:f4:e2:03:30:6f:
         f5:5c:8d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:17:12 2024 by rpki-client on console-fra.rpki-client.org