Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e81b12c8-0f04-319c-9ed5-52c6e3349e5d.roa
File:                     e81b12c8-0f04-319c-9ed5-52c6e3349e5d.roa (raw, json)
Hash identifier:          v3WxbnHVs3hlDQtMBXd47yJNogs5xVFf3o0KeUKrO3s=
Subject key identifier:   8B:A0:23:28:72:A8:D2:85:BC:9F:D3:7D:A2:C8:C9:D8:0C:4F:C3:8E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845025AC628930634CE2BFCC780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e81b12c8-0f04-319c-9ed5-52c6e3349e5d.roa
Signing time:             Sun 25 Feb 2024 14:00:34 +0000
ROA not before:           Sun 25 Feb 2024 14:00:34 +0000
ROA not after:            Sat 25 May 2024 13:00:34 +0000
asID:                     210119
IP address blocks:        2001:470:23d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:02:5a:c6:28:93:06:34:ce:2b:fc:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 25 14:00:34 2024 GMT
            Not After : May 25 13:00:34 2024 GMT
        Subject: CN=d12b2a63-71ab-4e0a-97c5-596e6052b66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fb:0e:49:26:81:45:36:22:7c:b3:c7:de:10:
                    58:1f:fa:09:e2:3f:61:d1:bc:5c:72:15:6a:02:2f:
                    8a:54:b1:38:19:c3:52:7d:61:b1:17:0a:65:51:c5:
                    d3:56:ac:80:67:ee:d1:a0:68:ba:38:51:2d:cf:ab:
                    85:18:c3:d5:f3:ef:5a:14:75:7f:cb:98:78:bb:11:
                    3b:ce:66:25:c2:64:e0:c7:d2:f3:bf:3b:d1:d7:6f:
                    89:d6:a1:a5:61:4c:65:14:26:cd:15:a2:27:c0:8c:
                    ec:a2:f1:4c:82:3c:45:70:56:f1:ea:f6:25:54:e7:
                    b8:9c:75:24:6d:9f:4b:cc:b5:47:39:19:44:87:11:
                    a0:6f:92:b9:99:82:e1:e0:26:ff:4d:e2:ad:8b:a3:
                    70:64:88:b8:c6:e9:36:96:64:d0:a6:54:5b:f5:a9:
                    e7:3b:44:f5:6c:16:84:17:ec:17:30:4f:85:f3:49:
                    35:e2:26:d8:5e:a5:0d:85:41:89:75:ab:20:a7:a5:
                    2f:7d:e8:d0:84:21:38:3d:99:72:52:f1:9b:70:4a:
                    96:1e:d7:4e:d8:65:f5:75:f3:5b:e3:6f:95:c3:06:
                    f3:75:31:a6:9e:36:82:3b:a2:d4:24:a9:2b:2d:1f:
                    26:6e:95:8b:35:b0:0d:a1:e0:4b:4c:a1:c0:bb:45:
                    fc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A0:23:28:72:A8:D2:85:BC:9F:D3:7D:A2:C8:C9:D8:0C:4F:C3:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e81b12c8-0f04-319c-9ed5-52c6e3349e5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:84:2f:cd:24:84:86:a8:5d:5c:80:b8:8d:87:2d:7d:c9:6a:
         6b:83:f4:8a:01:60:70:f5:5f:30:0b:8f:64:9a:75:83:37:26:
         26:60:a0:61:71:8a:c2:af:d2:d0:13:20:4c:bd:ce:59:53:9f:
         9d:40:7b:2f:05:5e:50:40:61:22:5a:b3:4b:00:86:8b:c7:52:
         e7:53:41:06:3e:f6:02:26:6b:07:59:a6:cf:81:7c:e3:4b:44:
         ed:53:27:35:db:7e:1a:ac:fd:33:d2:ea:a1:6c:fa:80:31:cb:
         8d:47:5b:96:e6:31:f2:89:3e:aa:23:f1:c9:05:e0:33:53:89:
         ba:79:e9:19:79:3f:8b:8e:a8:af:9e:85:f5:03:43:0e:5f:15:
         c2:57:6b:d4:c3:fa:56:9b:ca:cc:f0:f9:b7:6d:99:66:2e:c4:
         3b:54:d6:6d:2a:05:ce:3c:99:1e:52:32:ad:c9:f6:7a:00:29:
         c1:f7:23:82:f4:96:b3:e1:ec:9a:22:ee:07:da:48:8f:e6:07:
         59:6d:55:47:93:55:de:99:81:e0:bf:a1:4d:6c:58:8c:b8:b0:
         97:b7:f6:9f:b7:b8:7d:2b:04:8e:16:bd:44:2f:ec:3d:2b:d5:
         b1:95:66:a0:ef:74:5d:e0:62:63:f0:29:82:f8:2d:96:7b:17:
         d9:bb:7e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:20:39 2024 by rpki-client on console-ams.rpki-client.org