Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/a5022391-3d98-3475-9d45-50bc5466d06d.roa
File:                     a5022391-3d98-3475-9d45-50bc5466d06d.roa (raw, json)
Hash identifier:          LIZx0kzc05+StZYkfpj75H3P7jDE64ZRY7Dx35rGrsc=
Subject key identifier:   6B:A7:B8:FD:9B:98:86:DB:16:4D:D6:B7:00:BB:B2:85:40:05:F9:2D
Certificate issuer:       /CN=23f061ce-1a61-493b-8f3b-472334453f0d
Certificate serial:       010D0C9F43285847DF2F54F47D4C969A5B30A200
Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/a5022391-3d98-3475-9d45-50bc5466d06d.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     395700
IP address blocks:        2620:10f:b000::/47 maxlen: 48
                          2620:10f:b070::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:54:f4:7d:4c:96:9a:5b:30:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=81407c5f-ddfb-4289-b47a-312478f52c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d7:e0:9a:d4:b2:87:58:e9:ac:a1:bd:98:f0:
                    38:1b:e0:79:90:17:32:40:83:b6:c3:ac:7a:91:8a:
                    18:13:76:1e:3a:15:f6:b3:b5:6b:27:8e:ba:5c:58:
                    a8:f9:84:eb:6e:19:cc:30:6c:43:a1:87:db:ee:e5:
                    77:0c:9e:27:9d:39:76:97:47:8f:7d:f5:e9:03:ad:
                    6c:99:1d:e6:ec:4a:30:7c:6e:46:7e:9a:05:40:84:
                    c7:81:a9:0c:0e:d7:63:98:f0:e0:ae:b2:42:5b:1b:
                    75:aa:c8:9c:da:a2:67:eb:83:80:4e:79:61:2b:61:
                    6f:e5:a3:ad:f7:62:4d:01:51:f4:cc:c5:3d:85:2d:
                    d9:8b:3a:96:55:96:7f:75:fa:3d:86:a5:a3:aa:0f:
                    f2:bc:f6:cc:7a:78:f8:1a:1f:c3:17:37:7a:09:07:
                    c5:ca:8b:21:b1:1c:8e:9f:5c:30:4b:7a:a4:14:84:
                    66:ea:ec:94:aa:6f:b1:c2:95:57:cf:08:b1:96:e8:
                    c8:38:9c:2e:2c:1d:a7:1b:8e:8b:05:0d:61:d6:05:
                    9b:71:5a:91:b8:a6:b7:ad:12:6b:03:e0:cc:5d:8f:
                    37:89:37:ab:d2:f1:7e:54:82:12:35:4c:f8:fb:f4:
                    a3:11:b4:fa:f2:88:18:56:2a:1a:c0:b0:40:54:fb:
                    61:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A7:B8:FD:9B:98:86:DB:16:4D:D6:B7:00:BB:B2:85:40:05:F9:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/a5022391-3d98-3475-9d45-50bc5466d06d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:b000::/47
                  2620:10f:b070::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:dc:dc:d3:db:1a:fd:a8:46:20:03:7c:be:7a:64:e5:f0:a4:
         98:b5:c3:ac:05:b0:3f:05:5c:9a:1f:37:d6:ce:fc:7b:ad:dd:
         5f:51:3f:a6:69:9d:59:a4:98:70:15:31:e6:f1:52:d1:4a:dc:
         2d:66:1b:c0:c5:42:a6:a0:3e:71:42:83:92:14:fd:df:a7:ce:
         46:e2:4b:91:31:bf:31:33:33:3f:31:9a:bc:a9:6f:58:75:e0:
         57:19:13:06:8e:b2:82:3f:f6:05:f2:f7:bf:f1:f5:de:88:d5:
         1c:06:ad:72:f0:c3:00:1c:bf:ed:e5:1b:3c:3b:d0:d7:c1:a2:
         0d:86:5c:3b:1a:58:fe:80:1b:b2:6c:42:e5:19:e8:f5:d2:7f:
         de:cc:9f:7e:ed:9c:f8:8e:64:37:f2:22:2f:7d:a6:7f:95:43:
         9e:2e:69:89:83:2b:37:af:93:0e:ac:65:c3:5a:4e:5a:eb:e9:
         fa:f8:53:e7:48:22:fa:4e:fc:69:fd:0a:7d:cc:96:f3:fa:ac:
         c4:4a:45:65:c8:61:ef:3c:1b:03:5a:f4:a7:ca:02:3b:e9:7e:
         fc:99:19:f2:d1:fb:30:95:9e:e0:c5:48:a9:a9:dd:6e:61:bc:
         ce:ae:d6:4d:ef:9d:1b:8a:ff:27:19:aa:3d:77:55:fb:e9:ef:
         bb:9f:f1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:27 2024 by rpki-client on console-ams.rpki-client.org