Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/461dceed-c8eb-3e81-8666-d00b28808fb4.roa
File:                     461dceed-c8eb-3e81-8666-d00b28808fb4.roa (raw, json)
Hash identifier:          fsVAmD8HpdBP/OlcP9ZGC19rUJ00NcG/B7XedfRe75c=
Subject key identifier:   28:F1:42:42:17:BD:70:5E:EB:27:82:E8:40:DE:71:1C:7A:62:F3:51
Certificate issuer:       /CN=23f061ce-1a61-493b-8f3b-472334453f0d
Certificate serial:       010D0C9F43285847E094BC47EA087CE491015C00
Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/461dceed-c8eb-3e81-8666-d00b28808fb4.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     4186
IP address blocks:        2620:10f:b000::/48 maxlen: 48
                          2620:10f:b070::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:bc:47:ea:08:7c:e4:91:01:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=3983ed5b-8dc4-4756-9c4d-6c03b1b4a339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a6:73:be:ed:d3:47:b8:0f:9f:10:64:b6:33:
                    53:64:c6:23:9b:de:45:ea:47:cb:9d:42:00:f0:b3:
                    e1:76:9f:ba:d0:4e:32:3c:e0:b6:b2:94:10:9b:ac:
                    96:d0:4a:b9:bd:b7:f5:94:9a:8b:15:5b:2e:aa:0e:
                    34:d0:8c:f3:9f:fb:0a:e7:5c:0d:0d:7f:fe:1d:f8:
                    6f:78:52:b5:e4:e9:d6:4f:89:99:bf:8e:b8:bb:24:
                    19:68:6f:f6:f9:a5:29:bc:c7:5d:25:ed:5a:d3:96:
                    65:66:5a:b0:82:9f:f2:df:92:50:2b:9b:43:77:a3:
                    0a:b6:ee:4b:37:0d:1c:bc:b4:60:57:c5:5a:89:e8:
                    86:e9:30:79:6c:f2:a1:ec:7d:18:1a:33:84:4e:7b:
                    de:7d:89:88:fe:2b:65:1c:65:14:fe:02:e7:b9:4f:
                    9c:ac:a4:e5:d0:71:c9:74:76:55:db:57:14:ea:f4:
                    e0:86:6d:74:e5:15:7b:7c:a5:aa:79:9d:b0:36:38:
                    ad:b4:ad:ba:69:fb:20:29:d9:74:ab:31:8e:9f:b6:
                    b8:30:92:65:91:d6:47:02:53:d6:bd:07:9f:03:4d:
                    20:ed:51:fa:c9:cf:89:10:ee:57:88:81:2c:b0:9d:
                    02:ed:13:6c:3d:e8:cf:cb:f1:8d:30:eb:c5:7f:fc:
                    bc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F1:42:42:17:BD:70:5E:EB:27:82:E8:40:DE:71:1C:7A:62:F3:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/461dceed-c8eb-3e81-8666-d00b28808fb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:b000::/48
                  2620:10f:b070::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:86:31:fe:9c:4c:45:fd:44:c6:b7:7f:20:60:c1:51:0a:43:
         9e:ad:55:dc:bf:a4:7c:59:a9:ff:de:4f:a7:9b:f7:ce:26:b0:
         17:f1:2e:0a:cc:90:85:5f:8d:af:37:8f:2f:43:be:c8:86:8a:
         71:dc:3d:1e:93:fd:5e:93:e1:a3:d7:45:e5:41:02:51:8d:0a:
         a3:a0:70:83:83:37:95:d1:d4:a5:b6:46:a5:ed:f0:de:7f:96:
         20:c9:3d:52:7e:45:6d:3a:a4:cb:bf:36:02:49:a1:db:a7:1a:
         b1:9c:6c:50:fd:ce:94:19:15:97:dd:84:f4:a3:e5:f0:8d:d4:
         20:d5:09:f3:09:6f:42:dc:77:89:ff:18:a7:96:c8:cb:eb:db:
         d6:c0:2c:12:a5:5f:f0:06:90:8b:27:d3:77:46:89:81:b8:40:
         17:4d:db:7b:48:65:75:09:32:19:20:33:77:c4:e4:ed:58:14:
         ff:c5:0a:84:7b:d2:56:54:c1:dd:8c:7c:62:41:b0:71:c4:61:
         a0:2c:91:ae:eb:98:03:32:e1:b5:c1:38:fa:d1:77:bc:27:21:
         a3:aa:ba:7a:b6:4f:e5:4c:95:3e:c8:eb:93:de:bd:0e:7c:57:
         e5:ea:ca:6e:c9:28:43:5f:b7:dd:3f:88:6c:1b:92:08:d5:33:
         2f:86:88:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:27 2024 by rpki-client on console-ams.rpki-client.org