Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0797caf3-86f3-359d-93a7-b915b3201297.roa
File:                     0797caf3-86f3-359d-93a7-b915b3201297.roa (raw, json)
Hash identifier:          yqTrCjuTpZLm1zjv0lgt7CoksANs8r2ORJe9ZSIL7AM=
Subject key identifier:   F8:F7:84:BE:6F:9B:43:AA:F4:7C:CF:B1:D7:9B:DE:BF:9B:DF:02:B6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D0198A6A42833645C16D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0797caf3-86f3-359d-93a7-b915b3201297.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     395029
IP address blocks:        2001:470:21c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:19:8a:6a:42:83:36:45:c1:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=04880959-c801-4e75-a97b-acbe55f96a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:53:89:d7:dc:ee:f5:05:8d:e1:31:82:e3:23:
                    65:a2:02:6f:03:d4:f0:e5:c1:47:55:2a:db:fe:e2:
                    38:7b:6a:e7:dc:84:f8:13:4d:ad:53:49:0b:92:5d:
                    e3:a0:ba:54:07:0d:06:f2:72:8f:3b:22:5f:b5:6d:
                    cd:0b:73:5e:f8:7d:2f:76:62:51:b1:37:66:f8:08:
                    7e:c8:8c:1e:4a:3b:3d:39:af:8b:62:6c:10:20:c5:
                    2b:78:61:43:81:00:3c:6f:5d:5a:0c:5b:2f:ca:49:
                    c6:0a:38:7e:42:40:8f:7a:e3:19:19:ff:9a:c7:50:
                    87:83:bb:89:c6:6e:7f:0b:4a:62:00:14:ec:e2:9c:
                    12:91:71:f7:c3:90:ac:8b:f7:2a:df:55:ea:dd:dc:
                    74:48:f9:b1:8d:ad:6f:99:24:99:af:1d:cd:b6:03:
                    d0:7d:d7:02:0c:28:d8:68:35:2d:ab:90:3c:c2:58:
                    10:80:45:37:7f:4b:7d:3c:81:4a:c9:ae:43:0e:68:
                    a6:72:fa:b4:bc:cd:d0:19:ea:d3:ee:6c:64:9d:93:
                    1d:9a:21:58:2d:a0:b5:aa:73:cb:f2:ff:4f:29:14:
                    b8:bf:99:ba:52:d6:52:3b:49:4f:15:84:ef:9e:e4:
                    05:de:ac:4e:cc:e6:aa:13:03:91:5e:0f:3a:90:92:
                    53:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F7:84:BE:6F:9B:43:AA:F4:7C:CF:B1:D7:9B:DE:BF:9B:DF:02:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0797caf3-86f3-359d-93a7-b915b3201297.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:21c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:cf:10:96:8c:73:8e:b1:70:5b:ac:61:f0:a7:12:04:09:7f:
         83:3c:d3:c2:08:f7:55:96:16:96:75:f7:d9:c6:93:92:2e:37:
         46:23:4a:3d:9d:8c:94:59:42:78:ec:04:26:e9:b3:a7:a7:c2:
         7a:20:a4:ad:dd:b2:35:59:e8:27:c5:b8:65:36:f6:69:f8:da:
         3d:8a:29:e5:c6:e3:c8:d1:ce:c9:dc:51:61:fd:42:11:4f:66:
         fa:04:c1:3a:58:de:10:49:49:cd:b7:64:30:80:c5:b9:ec:48:
         54:7b:60:59:46:73:3c:84:c4:f7:c8:e4:0d:3f:bd:ff:4e:0f:
         8b:58:f4:35:d7:97:4d:d2:0c:f2:64:59:16:85:d7:90:46:e9:
         ab:d9:95:fe:d3:7a:3d:47:18:f2:7e:b9:f6:6d:2a:37:23:d0:
         df:70:d7:7b:76:33:cb:2e:8f:4c:cb:62:c3:03:8e:03:9c:a2:
         b2:3a:f5:ac:f2:56:a5:0a:1c:96:28:4e:8c:ef:e5:2c:f4:a0:
         0e:8f:a9:9b:c3:b7:cc:cf:7d:97:4e:87:20:35:d5:11:0c:3d:
         ef:30:f9:19:d2:01:24:8d:ee:70:55:4c:1c:52:dd:65:9c:b9:
         59:ce:87:9b:79:39:b9:61:dd:40:3e:73:8f:17:51:93:81:5e:
         a5:40:12:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 7 12:01:26 2025 by rpki-client