Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dad80484-b709-3c7b-b272-5c02e8c472fa.roa
File:                     dad80484-b709-3c7b-b272-5c02e8c472fa.roa (raw, json)
Hash identifier:          5ja+JS3K9L5M9ShFvVgU5NaBPMC8aGQCiI326uLuOvY=
Subject key identifier:   8B:82:24:01:1F:04:FC:26:49:87:E5:A9:26:78:C1:CC:71:CD:36:68
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845883DE23FB2EB6823D9E2F8A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dad80484-b709-3c7b-b272-5c02e8c472fa.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     6204
IP address blocks:        2001:470:27c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:e2:3f:b2:eb:68:23:d9:e2:f8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=518b38d4-8921-4211-9ae8-c36c73b2136f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0c:38:2c:0f:a8:c2:a3:5c:05:a9:0c:fd:67:
                    a3:b7:25:e2:fc:7e:14:e4:39:8f:e2:95:b3:e4:08:
                    1d:4e:6c:97:f3:66:5f:cd:bb:94:3e:0b:ab:58:0e:
                    5f:6e:aa:d5:74:dd:95:a6:c9:79:85:a7:3e:de:b9:
                    9f:1c:d2:c9:3a:71:40:26:a3:eb:c0:d9:cd:48:00:
                    0d:21:47:46:5f:f5:30:5a:9a:45:88:51:a3:fe:9a:
                    c1:9e:63:cc:fb:3f:19:94:1d:92:1d:43:77:b5:bd:
                    5a:78:5c:1e:c9:dd:36:09:99:37:3c:c7:7c:45:6d:
                    31:f7:31:b4:5c:fe:74:51:d4:76:21:2f:37:38:c7:
                    10:9c:11:c1:c0:5b:06:b3:af:08:3a:08:c8:6a:88:
                    48:6a:8c:f0:1d:c0:d9:ac:e7:0b:a9:39:6d:67:cd:
                    7a:b5:f0:56:68:68:c0:61:12:da:a0:dc:52:18:5a:
                    b6:2c:60:6f:0f:fb:b0:8c:d6:a6:7c:4e:66:8a:94:
                    b4:b7:6a:10:95:5b:b9:00:5b:1c:9e:1f:02:4f:a0:
                    d2:09:b5:7e:ab:92:99:c9:d3:e2:5e:80:a4:a9:c2:
                    93:16:78:a5:83:c0:7d:9f:af:10:b5:35:3c:fa:28:
                    d0:97:21:73:77:ae:db:08:f0:c9:5d:27:cc:ec:67:
                    2c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:82:24:01:1F:04:FC:26:49:87:E5:A9:26:78:C1:CC:71:CD:36:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dad80484-b709-3c7b-b272-5c02e8c472fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:27c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:ea:c5:cc:d1:90:74:e1:a7:11:79:d3:68:61:38:48:a0:bb:
         f4:04:ea:e5:98:86:1a:fb:95:31:f8:ed:46:26:26:31:cd:67:
         04:06:0d:e3:e9:7d:af:0d:45:e5:b0:2d:b5:d8:54:ee:f5:ad:
         34:67:37:0f:20:ea:87:74:44:2d:61:d3:a8:3e:71:6e:03:2f:
         04:82:c3:6c:ac:16:2d:b8:38:86:95:d8:91:a0:dc:99:51:c7:
         dd:a2:18:38:9b:74:16:c0:9b:1f:08:70:c3:d7:c3:48:65:36:
         50:59:3f:11:1f:ac:07:a7:9a:91:e9:8a:24:86:bc:87:4e:6c:
         91:fc:08:76:6e:95:4e:96:4b:8f:5d:a0:97:41:8c:74:61:c1:
         b4:2b:91:0b:53:54:bb:e9:af:53:15:2e:26:33:e1:c8:09:82:
         76:84:d2:12:2d:f6:e9:2a:e2:c0:96:a7:99:f6:3c:41:1c:4f:
         de:b8:9a:b8:7a:33:03:2c:1f:fd:46:0b:c4:ca:f4:5e:42:74:
         18:2d:21:99:2e:96:b5:f5:02:68:8a:ab:d7:22:dd:26:5a:c3:
         fd:d8:55:07:c3:28:7e:5d:fa:c2:d2:3a:cd:04:2b:a8:01:d5:
         43:57:e9:cb:5d:5a:13:b5:21:0c:7e:51:6f:e4:d1:13:ac:b8:
         13:f9:23:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:30:37 2024 by rpki-client on console-ams.rpki-client.org