Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09dda9a6-e41c-32e4-b194-7c3666a087a3.roa
File:                     09dda9a6-e41c-32e4-b194-7c3666a087a3.roa (raw, json)
Hash identifier:          4nZF6SfzD3+U0NiZZE8DQDIKW2KaWoHiP/N/7QUdTYE=
Subject key identifier:   B9:A8:4D:35:ED:8D:F8:B1:42:0E:B2:5B:45:5A:0C:8B:FF:F1:CD:B8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B5314660BE52B49A19770
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09dda9a6-e41c-32e4-b194-7c3666a087a3.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     54118
IP address blocks:        2001:470:79::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:53:14:66:0b:e5:2b:49:a1:97:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=ac3348cd-77f3-4e7d-a80d-d4590fac81dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fd:b8:be:37:b6:41:2d:fb:c6:28:d5:94:d1:
                    70:d3:e9:9d:ce:ff:eb:08:cd:43:f1:49:95:c7:52:
                    dc:10:97:c9:28:60:59:07:e6:f4:1b:56:79:04:77:
                    62:f9:8e:3f:3f:77:94:6c:e3:4f:72:53:c8:60:65:
                    e4:75:4a:9e:4f:35:c5:ed:48:86:90:bc:af:07:4d:
                    ac:fe:9d:d0:1c:3f:a5:11:b5:4e:d8:7c:ea:d5:98:
                    c0:ac:e1:bd:db:d2:9a:cf:d7:39:79:a8:fc:01:d1:
                    6e:54:e2:e4:b0:01:42:1a:fb:06:30:e2:36:1e:77:
                    3f:0b:3c:94:1b:45:be:9c:9d:bf:03:ca:51:a2:4d:
                    32:21:fb:81:93:e4:b5:2f:16:6a:10:45:98:f4:16:
                    54:e4:78:93:59:43:c3:56:76:a2:a2:96:ab:34:90:
                    64:1f:25:04:25:3c:8a:08:f4:da:4d:f9:fb:75:79:
                    bc:17:e3:3a:9b:13:07:ec:3a:50:f6:95:37:3f:8c:
                    0b:79:c9:f0:0c:57:6c:64:ac:37:72:7e:77:9b:cf:
                    da:38:a1:9b:1d:a5:17:63:63:b8:52:72:d2:c3:07:
                    f4:11:82:67:70:9b:77:7f:0c:15:90:13:7c:8c:e2:
                    d6:23:3d:d7:fd:a4:82:46:06:c5:a4:2e:ae:fe:7d:
                    dc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A8:4D:35:ED:8D:F8:B1:42:0E:B2:5B:45:5A:0C:8B:FF:F1:CD:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09dda9a6-e41c-32e4-b194-7c3666a087a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:79::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:95:4d:99:b9:cf:23:02:c7:b8:75:17:3c:e2:73:1b:d8:16:
         de:d4:0e:6e:dc:36:34:20:e8:d7:1e:59:0b:c1:7b:f8:d7:03:
         64:3c:60:b6:bf:15:b7:68:49:2a:36:b2:f6:7c:9f:b0:15:fe:
         3d:61:e7:20:4f:20:05:3e:29:d4:5d:e4:ed:d1:01:e9:bb:6f:
         9b:a6:f0:e7:9f:42:13:14:86:e1:6f:99:54:6e:34:b0:7c:61:
         d2:0c:c8:af:3e:b0:2c:ac:3c:26:fd:9e:52:11:e8:6a:25:9e:
         e1:99:3e:12:1c:be:11:85:ff:78:55:4a:e5:65:26:a3:36:a9:
         f9:e1:8c:4c:66:6f:7f:c7:4e:90:52:43:67:c6:ec:20:75:6b:
         53:46:5a:90:98:66:18:14:84:22:44:5f:c5:38:f1:30:b1:1b:
         88:36:cd:23:81:f1:28:df:3a:cd:e5:31:f5:f4:21:84:4c:64:
         cc:61:86:f2:d5:e7:50:6d:dc:18:83:9a:47:87:82:37:0a:88:
         c3:8a:7e:f8:bf:a4:16:f0:c8:93:df:0e:e8:22:b1:c2:7c:5f:
         a5:7f:19:fd:4c:01:5d:d3:b0:1f:a1:12:9d:b3:ac:49:f7:61:
         3c:13:23:e3:63:b8:0e:55:04:e3:83:bb:0f:9a:82:c5:5d:e1:
         8a:13:d6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:34 2024 by rpki-client on console-fra.rpki-client.org