Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2ad3063-f81f-3a09-aeeb-0e0f12b88cf2.roa
File:                     e2ad3063-f81f-3a09-aeeb-0e0f12b88cf2.roa (raw, json)
Hash identifier:          8PMqIxDvRcaVgFNuPp6ky0ktDEd68eZcYOdzdIjV42o=
Subject key identifier:   60:48:C5:9A:94:A6:EE:2E:75:49:F4:35:8C:7D:4F:78:A3:AE:7C:72
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858465A768083EA83009BB5430A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2ad3063-f81f-3a09-aeeb-0e0f12b88cf2.roa
Signing time:             Thu 27 Jun 2024 20:14:32 +0000
ROA not before:           Thu 27 Jun 2024 20:14:32 +0000
ROA not after:            Wed 25 Sep 2024 20:14:32 +0000
asID:                     52025
IP address blocks:        2001:470:297::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:5a:76:80:83:ea:83:00:9b:b5:43:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 27 20:14:32 2024 GMT
            Not After : Sep 25 20:14:32 2024 GMT
        Subject: CN=28a0bdc6-1f6e-41be-8bb9-aaa83e1ab281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9e:14:e1:d2:07:e0:bd:cb:ed:b1:e5:44:42:
                    a8:16:14:e1:1e:66:33:ec:67:5c:8f:45:69:68:91:
                    32:b1:53:16:bf:37:fd:b0:81:8e:ed:81:78:da:3d:
                    3f:35:08:4e:26:73:7f:93:1a:c1:6a:bb:09:af:95:
                    07:93:d2:18:87:0c:e3:23:89:4f:04:4c:05:ae:d1:
                    cc:95:89:f7:9f:ad:84:2d:d8:df:c2:17:83:02:70:
                    8b:3c:45:cd:a8:bd:51:15:92:64:e4:a5:d4:e9:f2:
                    22:d5:35:8a:31:a1:b6:ee:e3:28:95:12:37:23:92:
                    85:c4:39:88:5a:73:4e:7f:6b:2d:4e:7d:64:9a:d9:
                    31:d4:16:20:f0:c7:01:92:c3:09:e8:4c:76:87:34:
                    9f:2d:bd:8c:92:47:b6:ca:85:65:8f:6e:9e:e0:f1:
                    bf:c6:f4:92:3e:3f:04:a2:cc:7c:ef:94:b8:fb:bd:
                    26:d3:8b:6c:dd:0f:e7:2b:0c:3e:34:b7:dc:43:d0:
                    fe:17:f2:01:cd:07:fd:86:f2:a3:7d:8b:24:88:5d:
                    b3:79:1a:b7:0e:bf:42:d4:1c:ef:bf:1e:71:0d:1c:
                    3b:ad:c8:de:6f:a9:13:41:d9:bb:dc:cb:92:7c:1d:
                    d5:74:5e:6b:4e:2e:bf:40:96:ec:ec:92:69:d7:2d:
                    70:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:48:C5:9A:94:A6:EE:2E:75:49:F4:35:8C:7D:4F:78:A3:AE:7C:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2ad3063-f81f-3a09-aeeb-0e0f12b88cf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:297::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:b4:9e:28:45:fc:25:01:e9:f7:40:6f:83:d6:87:97:5e:06:
         bf:a1:0b:d6:c9:ce:28:33:de:1a:f1:3c:05:f4:0a:10:e5:bb:
         31:cd:f0:fe:ef:59:45:54:8c:0d:e2:e6:25:c2:e1:7d:3e:05:
         f3:4d:bc:64:19:f9:c8:d4:e2:b5:a2:12:5e:43:a3:e6:d5:0d:
         65:93:a5:cb:97:9e:cd:e0:b5:28:cd:60:4b:6a:99:9a:5c:e9:
         84:92:47:9b:63:64:ff:e0:eb:e4:65:03:0f:0d:f6:60:ef:9f:
         71:7a:f3:30:7e:ff:e1:4e:f2:5a:b7:0a:6c:f1:f5:a0:c1:48:
         cc:da:2f:9c:2e:44:1e:33:53:18:33:6b:1e:45:4f:97:5a:2e:
         3d:1b:a1:63:2b:5d:4f:34:f5:c4:e5:b2:94:6f:6e:04:56:08:
         60:bd:9d:69:90:d7:80:17:51:de:38:c0:21:cd:fd:d3:39:03:
         0c:ec:7c:4f:b9:86:28:4e:6e:39:08:3f:4a:ef:fc:ea:4d:10:
         be:92:1d:2b:fc:c5:75:62:aa:49:f6:bf:13:bb:a6:5e:74:67:
         51:01:c1:ac:4c:42:0d:e7:5a:60:50:7b:c4:81:42:9a:4e:4b:
         eb:c4:14:60:c2:4a:ae:5b:fc:46:e2:e4:91:5d:df:61:33:b4:
         be:42:b1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 22:18:09 2024 by rpki-client on console-fra.rpki-client.org