Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dc3d2c72-1822-3839-bfb4-768b290118f7.roa
File:                     dc3d2c72-1822-3839-bfb4-768b290118f7.roa (raw, json)
Hash identifier:          9iia7p+OZh0BS8Ru8c+NWEZ7fvbDbtlBbxKjekGK+dc=
Subject key identifier:   71:21:87:0C:BC:E4:E9:42:86:90:EC:0A:42:75:3C:EF:9D:30:41:5E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858460A1DB2ACD797C9CBB37111C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dc3d2c72-1822-3839-bfb4-768b290118f7.roa
Signing time:             Thu 30 May 2024 01:30:56 +0000
ROA not before:           Thu 30 May 2024 01:30:56 +0000
ROA not after:            Wed 28 Aug 2024 01:30:56 +0000
asID:                     60193
IP address blocks:        2001:470:306::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0a:1d:b2:ac:d7:97:c9:cb:b3:71:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 30 01:30:56 2024 GMT
            Not After : Aug 28 01:30:56 2024 GMT
        Subject: CN=b4d852e6-9800-49e1-955c-6221d868a05f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9b:42:a3:cd:2e:3f:d1:3d:c1:81:79:53:83:
                    a0:a6:6a:6b:77:ed:c3:50:c7:ab:77:2c:d8:a0:89:
                    df:b7:fe:d7:d2:3d:64:c0:6a:63:44:a3:75:95:50:
                    08:d8:cd:67:67:47:72:fc:1f:ab:40:17:8d:8a:e1:
                    8e:21:44:fa:ac:80:e1:bc:e8:b3:d3:69:2f:e3:47:
                    c4:96:c9:ec:f1:91:7c:31:e9:a1:40:45:23:23:26:
                    9e:13:ec:1f:b2:b7:1d:38:f9:ab:e3:c4:c5:63:30:
                    f4:7b:62:c6:9f:0d:88:01:12:4d:a6:03:32:09:9e:
                    e9:bf:4a:ba:61:02:e0:91:65:4c:ae:de:fd:bb:4d:
                    96:7e:fc:a2:4d:75:c4:87:07:00:85:27:84:ee:20:
                    96:b5:4c:a9:fa:3b:94:fb:91:c6:7d:d7:43:c6:56:
                    15:b6:8f:86:18:a1:b6:d5:26:1b:e4:5d:7f:8a:20:
                    1e:25:1b:9d:e8:e2:15:cf:79:05:1f:93:46:04:de:
                    ad:46:56:2f:40:91:a9:c4:13:a5:a1:39:86:f1:c7:
                    03:84:fb:ae:b6:42:5d:cb:c5:0c:e1:a1:bf:27:b5:
                    73:7a:43:da:73:b1:af:d9:a4:f7:c7:e1:a4:99:71:
                    28:95:cd:81:aa:76:d7:c7:7a:d3:8a:ef:aa:0c:9e:
                    df:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:21:87:0C:BC:E4:E9:42:86:90:EC:0A:42:75:3C:EF:9D:30:41:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dc3d2c72-1822-3839-bfb4-768b290118f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:306::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:0b:c5:56:50:12:01:27:8a:2f:6a:7d:bc:43:a9:39:a3:38:
         f4:3e:e8:84:c0:ad:a7:eb:9e:d6:c2:ef:a4:01:f4:0e:06:a7:
         c7:7a:d8:f7:e6:0c:dc:90:34:2e:f0:8f:78:cf:56:c6:89:ee:
         5e:0a:28:6b:5c:4c:ff:c5:27:81:85:26:43:36:f3:de:ea:20:
         e5:17:2b:56:81:d2:73:d9:f3:a6:89:7e:fc:20:34:f6:6c:ca:
         cd:f8:5a:d0:ab:32:78:ea:95:c6:8c:c6:55:f0:e6:d1:b9:d2:
         a6:2a:d3:59:64:fe:cf:18:ed:1a:a8:0e:65:49:76:6a:0b:b0:
         fc:b7:7b:c5:ea:ac:ea:9e:7b:62:45:35:30:85:e8:27:9e:e1:
         6f:aa:99:72:4c:13:31:9a:66:08:a2:2c:60:bc:be:13:16:dd:
         28:38:d0:8c:02:a9:5f:99:34:4c:8c:9e:5e:3e:4e:d2:cd:e7:
         f4:b1:45:a9:55:e6:5c:8d:50:0d:28:55:a7:e9:dc:7c:a6:c8:
         c9:d4:7f:6b:cc:6b:c6:0c:a9:d4:2b:fa:2a:7a:d9:c9:ce:95:
         aa:bb:1b:ac:94:ef:53:05:7f:06:cf:cf:db:ef:0d:8b:e6:ef:
         e1:29:ac:4e:e9:1f:3b:b4:73:83:d5:e9:2b:04:7f:0a:47:95:
         88:ab:ae:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:00:21 2024 by rpki-client on console-fra.rpki-client.org