Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eb826869-bb2f-33d4-babb-ee7ac9f3dfa1.roa
File:                     eb826869-bb2f-33d4-babb-ee7ac9f3dfa1.roa (raw, json)
Hash identifier:          nHKM4dJq7XEwlOYvhI0b8eADsParB2p5Xp11UGdVvrM=
Subject key identifier:   42:09:4E:14:14:48:51:C2:E9:14:37:22:9E:30:1B:B3:18:A6:82:2D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584566BDBEBE3F991DDA067E6FC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eb826869-bb2f-33d4-babb-ee7ac9f3dfa1.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     46925
IP address blocks:        2001:470:1e6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:be:be:3f:99:1d:da:06:7e:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=d4a10ac7-ac78-4f66-b915-f8393dbb418e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cc:0c:16:af:de:45:3b:ec:c8:0b:2c:a3:19:
                    6a:d5:49:ca:5f:2e:2a:fb:00:c2:cf:4a:3c:de:45:
                    fb:14:16:88:f5:f5:ad:a9:f0:3a:62:b7:f3:df:2a:
                    84:5c:49:f7:d7:22:4d:b4:ea:e3:d6:f0:b7:c5:7a:
                    98:c8:c2:81:d7:2c:f4:f5:cf:86:59:a5:66:0e:7f:
                    31:23:a3:d2:f3:00:18:e7:69:38:8b:85:35:53:3f:
                    8e:73:90:99:ad:ec:a2:c8:92:25:07:df:f0:1e:86:
                    53:b5:2c:50:28:24:3a:3b:6c:c0:05:3d:2e:e2:30:
                    c5:97:66:fd:74:e3:98:7f:62:5f:88:a7:35:48:b3:
                    9a:bd:83:d4:f5:07:3c:05:13:a8:e7:83:1b:88:2a:
                    d3:c5:42:2b:97:94:24:3a:24:fd:45:12:54:2a:12:
                    93:d4:13:a4:e6:4e:3d:9d:ea:cb:55:bb:48:7c:25:
                    4d:cf:69:a5:1c:69:54:b0:fa:b9:84:5d:2a:fe:55:
                    d8:d5:ab:b6:33:91:14:68:63:68:8c:20:ae:56:15:
                    a6:b8:cf:2b:c5:58:3d:c4:6e:68:94:b7:35:56:4e:
                    63:4e:e2:67:96:64:5e:d0:ad:18:fa:47:7d:b4:10:
                    ad:8c:28:6d:a9:01:69:ba:40:e0:b9:35:92:eb:aa:
                    cd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:09:4E:14:14:48:51:C2:E9:14:37:22:9E:30:1B:B3:18:A6:82:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eb826869-bb2f-33d4-babb-ee7ac9f3dfa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1e6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:2e:01:56:dd:76:ca:0d:59:cd:41:7e:99:25:6f:70:b6:ff:
         e7:0d:f1:83:61:29:a1:0a:e5:2a:cd:52:68:48:1c:7d:69:f8:
         3c:df:98:9e:fa:e9:4f:91:fa:64:37:73:72:0b:a7:c2:22:7d:
         06:8d:a0:62:72:28:88:af:da:8b:ca:25:02:1c:b3:ee:a8:2a:
         22:c7:89:1c:bf:45:f4:39:3d:21:3b:a6:7e:e2:e5:48:74:18:
         cd:4a:c3:3d:56:93:6f:fe:51:40:d1:2d:f2:84:9b:53:1f:85:
         ad:f6:89:62:59:46:48:b8:db:ec:1e:c4:3a:8f:5c:db:83:f5:
         33:c0:6e:8b:1a:58:2f:56:a2:bc:f4:a9:b4:5e:c6:4a:e1:4d:
         18:3d:d9:c9:40:f2:f3:b7:d0:56:44:3c:7a:f7:71:4d:19:27:
         69:20:83:ab:81:89:f8:1f:23:b7:42:27:fd:b8:41:25:fc:aa:
         88:d7:78:80:64:7c:b8:57:c6:06:56:be:ff:b9:88:ca:f4:1d:
         6a:e9:ed:f9:e1:46:d8:49:70:4c:82:57:cb:fe:24:f1:bf:8c:
         4d:7a:a5:1f:e5:77:69:1e:aa:95:c5:00:29:e2:95:5b:11:a1:
         ed:ec:d3:06:64:0b:0e:1d:c9:ca:fb:c3:f5:14:96:17:32:d9:
         cc:b9:f3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:56:17 2024 by rpki-client on console-fra.rpki-client.org