Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e41647a4-8d8d-38aa-a82d-e872f28fb2e3.roa
File:                     e41647a4-8d8d-38aa-a82d-e872f28fb2e3.roa (raw, json)
Hash identifier:          j7Rc5rOHaVwN444hl9LBAQffaC82scpEvo/TTjObR+U=
Subject key identifier:   31:B0:CA:F6:A6:B4:3E:FD:86:5C:32:A2:9A:AE:FB:77:93:A3:93:A4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F8956BDD1F22107266B68B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e41647a4-8d8d-38aa-a82d-e872f28fb2e3.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     53813
IP address blocks:        2001:470:59::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:6b:dd:1f:22:10:72:66:b6:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=67bb0190-f0f1-40e7-a1b7-6b9d392b4d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5e:ac:7e:48:41:86:29:eb:c1:8a:2a:5a:4f:
                    42:1a:19:8d:a4:65:ea:f6:dd:b7:76:96:0f:a6:3e:
                    00:d0:6e:bf:12:5c:76:ef:51:cb:69:1d:3f:93:d1:
                    9e:3e:04:21:b4:31:b5:fa:6d:e9:4f:97:ca:41:f3:
                    d8:d9:04:7e:d3:f5:92:b5:03:7a:89:89:a9:d6:d9:
                    08:39:73:0c:ca:fe:17:df:78:62:1b:7c:25:03:b2:
                    c0:8d:d1:5d:ce:2b:cd:25:6e:c2:21:29:6e:44:c8:
                    70:fa:3c:3b:95:2c:34:06:84:a0:42:21:68:ff:d5:
                    c5:3a:70:f6:16:a3:2c:92:3d:e8:98:21:27:84:16:
                    9a:7d:14:db:08:72:f4:9c:4a:82:c6:ca:08:9c:45:
                    2d:ae:3e:dc:2f:2b:67:e5:cb:6a:f3:22:7f:10:ab:
                    85:9c:59:bc:8a:5c:63:02:2d:ba:18:b1:00:d7:09:
                    9b:06:41:d2:8a:57:01:15:3f:dc:f2:aa:3e:c5:87:
                    f0:fa:a4:4f:fb:c1:0c:80:69:a0:c6:fd:f8:ba:8f:
                    69:a9:a6:89:41:e9:67:1d:e3:7b:bd:fc:1a:f7:08:
                    c2:80:1b:02:b0:49:13:9b:84:78:21:5b:2d:3e:b7:
                    7e:40:86:d6:40:7c:34:f3:a1:af:ef:b7:00:66:87:
                    de:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B0:CA:F6:A6:B4:3E:FD:86:5C:32:A2:9A:AE:FB:77:93:A3:93:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e41647a4-8d8d-38aa-a82d-e872f28fb2e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:59::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:18:96:fe:3f:57:d1:47:75:c7:e4:08:20:67:3d:65:98:50:
         3a:c2:0b:13:d4:c8:f5:b5:2e:cd:de:4a:1e:6a:8c:d7:16:07:
         ba:1f:2c:d4:45:ab:ae:ea:fb:d0:9f:43:38:eb:54:7a:4a:f9:
         d9:e2:46:00:76:fe:61:9b:fd:b2:d3:3f:4f:85:ac:86:90:58:
         03:80:10:c6:c2:50:0c:a6:a8:7c:d7:de:c7:23:c6:90:ff:4a:
         2a:61:bc:12:ec:bb:bb:74:6a:cf:25:9f:73:0c:69:78:19:a9:
         a0:dd:20:9a:dd:af:d6:4c:87:3a:b2:64:51:95:4f:ad:44:2e:
         7e:9b:d7:a3:d0:a7:5f:10:87:1a:16:bf:44:e5:e6:9f:9a:61:
         99:8e:32:12:08:e5:1b:06:97:8c:d5:f0:0d:af:75:6d:e5:fe:
         87:ea:06:3b:83:5e:b5:30:9c:f9:02:00:49:18:bd:30:9a:2d:
         4d:98:a7:d9:b8:52:ee:28:77:6b:b4:9e:48:13:5a:12:ad:f6:
         32:88:5e:80:73:7e:83:9e:e0:9e:7c:40:05:37:4c:75:68:66:
         d1:da:20:a3:70:06:23:9e:45:68:16:5e:fe:f2:ba:9d:a2:7a:
         4f:82:80:ac:5e:e5:4a:0d:00:90:c2:cd:dd:44:d3:f5:fa:2c:
         c0:fe:cd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:20:38 2024 by rpki-client on console-ams.rpki-client.org