Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eae4b753-c8b4-3ffe-97f4-7ec72f45b709.roa
File:                     eae4b753-c8b4-3ffe-97f4-7ec72f45b709.roa (raw, json)
Hash identifier:          h1helr6pKbCUFLxMEKNNQq7ZinOGXVUNX8tQgNiEt74=
Subject key identifier:   A4:22:3E:35:37:9A:0D:C4:F3:32:48:4D:DA:17:68:3F:C1:9E:D7:06
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858455FD1E9C3B71CB7C23311BC80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eae4b753-c8b4-3ffe-97f4-7ec72f45b709.roa
Signing time:             Sat 30 Mar 2024 01:30:49 +0000
ROA not before:           Sat 30 Mar 2024 01:30:49 +0000
ROA not after:            Fri 28 Jun 2024 01:30:49 +0000
asID:                     400790
IP address blocks:        2001:470:43::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:d1:e9:c3:b7:1c:b7:c2:33:11:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 30 01:30:49 2024 GMT
            Not After : Jun 28 01:30:49 2024 GMT
        Subject: CN=e1155725-740f-42ee-9682-94dcb92617dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8e:d8:0e:cf:15:50:0d:dd:91:93:4a:26:ca:
                    18:d4:c6:e4:30:70:df:d0:3d:c5:e9:9d:52:4f:a1:
                    0c:0a:2a:ce:8b:5b:23:74:be:81:60:5c:52:12:84:
                    b2:12:4b:a3:db:a4:83:dc:22:93:82:54:7c:5a:d7:
                    42:89:0a:bc:8e:b1:db:ae:4d:ef:b1:79:4f:88:9b:
                    7a:07:e0:20:cf:4c:69:e1:86:cf:ee:ec:99:61:97:
                    4e:02:9c:5a:51:24:64:57:4c:d1:8c:e2:29:df:24:
                    9f:83:c0:02:16:61:c2:28:aa:10:a6:d6:50:5b:1f:
                    c4:e3:5d:60:0c:5e:44:11:41:98:39:2e:1e:7b:4a:
                    c4:a8:da:57:24:5f:a9:66:dc:97:a8:ae:9e:cd:f4:
                    1f:e2:5e:ad:6d:36:3d:b0:ca:dc:9a:e2:c7:da:15:
                    1c:a4:9d:ef:98:9a:83:b6:50:bd:72:3c:d9:0b:d7:
                    17:ee:e5:62:04:51:af:6d:30:bd:22:9c:47:f1:f0:
                    01:ca:ee:1b:a4:35:bd:ce:77:ca:b7:05:f1:04:a8:
                    00:ab:d5:39:ff:36:35:1b:28:a7:d4:a9:e4:f1:4d:
                    bf:e7:1f:f3:ed:6b:80:a7:d4:e2:18:51:d0:1a:31:
                    8a:20:11:0b:e5:26:5a:65:23:9e:8a:d0:d6:31:06:
                    2b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:22:3E:35:37:9A:0D:C4:F3:32:48:4D:DA:17:68:3F:C1:9E:D7:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eae4b753-c8b4-3ffe-97f4-7ec72f45b709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:43::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:be:2e:bc:b3:d3:1d:7e:f9:0b:c5:31:88:5a:b7:51:dc:84:
         b3:d6:5f:78:a1:fb:0f:4c:3d:23:b6:86:75:e4:6b:63:0e:86:
         77:52:0a:d1:6a:81:a8:0f:98:c8:f9:af:aa:87:c5:ff:e1:7a:
         ce:8e:3d:21:c2:e4:d7:83:59:c1:3e:c1:c1:cc:cd:9c:77:4a:
         16:3f:10:43:d8:52:54:92:13:18:09:d7:ce:2e:b8:fe:cf:3c:
         42:e4:ad:d4:b9:19:fa:3e:ad:d5:5f:ae:cb:67:05:7b:38:44:
         35:21:43:b0:71:6f:fc:9b:95:f9:6e:64:9f:01:ed:cd:e1:a6:
         6a:d0:e8:d3:0d:4e:b0:77:fc:ae:86:41:29:0f:57:46:71:2c:
         08:01:0f:45:9b:cc:9b:fe:d2:14:6a:3f:95:67:58:44:18:83:
         9e:bb:13:3c:ba:3a:63:af:47:f0:fc:cc:4f:c5:1c:a1:95:de:
         b1:15:86:27:96:38:6b:bf:48:ab:89:c2:42:07:e6:85:67:f6:
         09:23:89:7f:44:f7:c3:10:bc:a7:f0:d4:d0:66:0f:75:82:5b:
         84:84:78:60:b0:58:49:d2:2c:ec:c0:c1:0e:51:06:0e:68:6a:
         36:79:95:78:4a:61:e7:2b:1d:b1:24:b6:de:d4:00:c1:ca:03:
         8f:e1:da:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:09:15 2024 by rpki-client on console-ams.rpki-client.org