Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0b960473-efd3-3be3-aa53-91350b0e2c52.roa
File:                     0b960473-efd3-3be3-aa53-91350b0e2c52.roa (raw, json)
Hash identifier:          SdpLt+iF5qKVvcNF3QbyQUF3LiwTZeeXxRGodW9vAA4=
Subject key identifier:   5F:92:C8:32:FD:83:EC:DC:F5:74:D8:79:39:08:2D:6C:39:A9:E3:F9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFEB4D0ED422689A85D1C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0b960473-efd3-3be3-aa53-91350b0e2c52.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     26123
IP address blocks:        2001:470:10c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:eb:4d:0e:d4:22:68:9a:85:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=a113c315-a1b5-461d-bade-a3a7fa090a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bf:45:dc:43:96:8d:81:7c:a6:a3:bc:a3:73:
                    77:33:62:21:fe:7f:48:94:f6:8f:04:eb:f2:84:4b:
                    0b:eb:d5:ed:b8:ec:fc:78:2d:e1:96:0e:1c:d4:ed:
                    4f:fc:de:0b:4a:66:35:ec:6f:87:ab:ed:7d:a8:a1:
                    e7:e0:04:9f:fc:31:4a:d5:e0:ac:d4:cd:ee:15:3b:
                    8c:18:70:10:6b:a8:26:76:9b:ef:2f:dc:57:16:18:
                    90:f8:2a:37:a7:1a:37:34:c8:f1:15:0c:ed:e3:75:
                    05:a9:9f:ea:dd:16:bb:df:32:6c:02:19:de:1c:56:
                    7e:7e:64:b2:6a:b5:ff:f2:1f:5f:50:2a:c8:ff:00:
                    9a:ed:37:1b:e8:01:42:8c:f7:ab:9c:e1:02:5e:8c:
                    41:e5:a1:bd:8f:4a:e5:db:f9:d0:07:f0:84:bc:ff:
                    9e:25:06:93:29:d4:ad:1d:b7:a5:41:d8:bd:b9:88:
                    98:56:40:e4:eb:56:c9:44:c2:ff:61:a0:0d:07:7c:
                    6f:37:d2:47:30:fd:7f:44:ad:05:2e:bc:76:8a:eb:
                    09:e8:3a:36:da:48:af:e6:c5:20:6c:84:30:c0:3c:
                    db:85:70:a7:5a:e0:64:37:e9:d1:45:72:26:ef:5e:
                    f8:5c:31:c4:d3:2b:bf:2b:c2:03:80:6b:e3:cb:25:
                    ce:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:92:C8:32:FD:83:EC:DC:F5:74:D8:79:39:08:2D:6C:39:A9:E3:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0b960473-efd3-3be3-aa53-91350b0e2c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:10c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:14:da:1d:d2:df:89:b4:45:11:63:00:00:2d:38:71:f9:24:
         9a:0f:8b:de:64:6f:fa:db:32:48:59:7c:88:e4:0e:7e:bb:02:
         f6:a1:fe:8d:49:b3:6b:57:73:cf:db:09:6f:12:44:f7:cf:9a:
         3c:79:b6:6c:26:7a:ab:37:93:e1:71:c6:e6:77:1e:14:cd:b8:
         2c:03:29:08:90:0a:80:27:ab:5f:14:60:62:af:55:0d:c0:43:
         41:0e:39:42:d2:61:56:46:d8:eb:1f:65:35:96:a7:78:65:22:
         ab:ac:fc:2a:1f:f5:c5:5d:af:4f:c2:f0:61:39:33:f5:68:59:
         21:ad:82:f0:67:30:05:82:5a:79:79:84:dc:d5:3d:db:89:ac:
         b7:25:c9:35:f2:b9:bd:e4:73:d6:4e:55:b3:dd:da:19:a2:a7:
         ad:46:6f:8d:3e:d5:f5:8f:2c:0d:00:1f:5b:eb:57:34:a8:65:
         6b:42:35:eb:7f:ed:ef:6f:62:8f:ca:b1:2b:9d:34:e8:ff:c2:
         ed:62:30:ff:8e:2e:89:2e:9a:f3:3e:99:9f:ee:55:bf:b4:fc:
         3e:3e:1f:f6:ac:0c:c4:4b:01:97:ba:00:dc:58:b5:03:1b:9a:
         a9:95:e1:9a:90:19:b2:78:97:87:c3:15:95:51:87:3e:89:87:
         9c:82:64:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 7 17:41:04 2025 by rpki-client