Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0159c80c-dabd-3228-89ec-f94d6239be50.roa
File:                     0159c80c-dabd-3228-89ec-f94d6239be50.roa (raw, json)
Hash identifier:          mufOVVY+ybK0nthxnJGX3uAjA2pJ+LHGc8e2uS4lMRM=
Subject key identifier:   52:10:F1:D3:1B:C3:8E:6D:1C:77:2A:50:B3:7B:A9:78:AB:89:0E:85
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B36D183EF39DB6E1E6670
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0159c80c-dabd-3228-89ec-f94d6239be50.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     39444
IP address blocks:        2001:470:14f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:36:d1:83:ef:39:db:6e:1e:66:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=52d28396-51f0-4b68-9005-688a1aabfc07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d4:28:57:7d:f4:e5:d8:ff:da:88:c4:49:b1:
                    b2:c8:f2:96:d0:6a:15:d5:2c:f2:99:b4:45:bb:99:
                    2e:71:cc:c3:7c:be:97:41:0f:4f:ee:ed:43:db:8b:
                    39:ef:9f:c5:b7:72:91:10:cf:d8:8e:c2:a5:91:a1:
                    a3:fd:f7:b7:45:81:71:bf:d4:7c:b1:e6:66:45:bd:
                    23:f4:02:2e:cf:9d:1e:ca:eb:08:ee:cf:b4:bc:2c:
                    8c:71:56:09:00:53:58:3c:9d:c0:1e:8a:d0:05:52:
                    de:c3:b0:6c:5b:96:da:f8:43:fd:19:94:6e:d6:24:
                    06:b5:70:f5:f9:ac:71:15:a6:5b:b8:eb:eb:f8:68:
                    bb:2c:67:96:26:ed:3a:b0:3a:7e:be:0a:a2:0b:4b:
                    ab:66:df:ca:13:d2:f3:c2:a8:ab:96:5f:02:71:6d:
                    77:0c:48:c6:cb:b0:4d:77:4f:22:f8:2d:a1:c6:0b:
                    ee:3c:7a:1b:e1:fe:50:ae:8c:ed:aa:b3:47:b4:d7:
                    7e:57:80:ec:e0:2d:3e:ce:d6:b4:7b:11:8f:c0:46:
                    41:cb:ed:cd:35:2d:f9:6c:52:0e:c2:c5:0a:8a:8b:
                    ec:49:fa:93:69:fa:73:22:47:1b:31:19:f7:fb:9d:
                    16:45:dd:97:ee:ab:8b:53:ec:7c:46:c8:46:ba:86:
                    bb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:10:F1:D3:1B:C3:8E:6D:1C:77:2A:50:B3:7B:A9:78:AB:89:0E:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0159c80c-dabd-3228-89ec-f94d6239be50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:14f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:b5:22:e6:3c:53:e7:d9:4d:fe:74:4c:50:db:63:ac:ed:1b:
         32:d9:cb:53:a2:da:64:7d:d8:e5:68:b9:66:e3:33:54:a4:c2:
         0f:d5:69:20:d0:64:ef:9b:f4:60:ed:62:e5:8c:05:7c:92:da:
         3c:45:3c:5a:25:53:da:e4:a6:15:29:05:79:5c:02:71:bb:92:
         15:04:ca:13:92:e1:1a:97:43:43:d3:2e:4a:77:ec:5a:98:71:
         e2:4a:db:3c:2e:08:3d:9d:81:db:41:cb:1d:09:7b:99:00:f2:
         92:f7:6f:16:b0:38:c8:63:78:6e:09:f6:ef:85:26:58:79:49:
         47:35:de:7d:e6:2d:e9:3b:d6:87:b1:bf:b0:5f:46:34:3f:9f:
         84:2b:47:74:e3:f1:12:9b:71:c5:4e:ec:16:8a:bb:c1:76:73:
         98:96:b6:97:b3:0e:a5:d1:24:20:69:58:81:3d:99:53:5e:f0:
         68:6b:c7:e1:d4:19:5e:ce:8a:ad:68:11:8b:63:32:4a:c3:3b:
         e5:4e:d8:8b:be:e7:41:d8:5e:bf:7d:71:64:56:cf:8c:04:af:
         0d:cb:8a:36:e8:01:f7:5d:3b:e2:48:98:4f:6f:d5:1e:31:42:
         93:93:be:23:8e:1b:96:af:55:72:ca:d3:7a:28:8f:2d:c5:22:
         f5:41:b2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:20 2024 by rpki-client on console-ams.rpki-client.org