Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e476da5-17c2-3908-b3b1-ded8f4368450.roa
File:                     0e476da5-17c2-3908-b3b1-ded8f4368450.roa (raw, json)
Hash identifier:          5fNLjK97gA2GXh2fswurLjwf2STYN9vrtp5ArTti1Nc=
Subject key identifier:   F1:DB:9F:2D:A5:48:F9:86:C5:E9:72:91:76:75:AB:C2:E7:55:85:81
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285846A3A8EC93F5B9D2D2F85F5100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e476da5-17c2-3908-b3b1-ded8f4368450.roa
Signing time:             Wed 24 Jul 2024 01:30:08 +0000
ROA not before:           Wed 24 Jul 2024 01:30:08 +0000
ROA not after:            Tue 22 Oct 2024 01:30:08 +0000
asID:                     59953
IP address blocks:        2001:470:1eb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a3:a8:ec:93:f5:b9:d2:d2:f8:5f:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 24 01:30:08 2024 GMT
            Not After : Oct 22 01:30:08 2024 GMT
        Subject: CN=7ce8286d-eaa4-479d-9b39-acda296885c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:44:64:8c:d9:05:46:4a:df:d7:5c:3f:0b:f3:
                    33:26:8e:0e:46:d5:7f:b0:d2:3b:ef:9a:c6:98:c5:
                    9b:30:26:e6:74:98:20:98:0b:6d:e5:85:f1:d2:19:
                    01:3a:a6:1d:0a:b6:20:02:1b:8d:fb:44:4c:22:d9:
                    e3:a2:ef:54:ef:85:ba:07:e6:a3:7a:bc:e0:c1:72:
                    51:d0:ed:15:fa:c0:d2:46:af:6b:62:fb:49:74:9a:
                    60:99:0c:5e:57:06:16:9f:85:70:06:9a:96:f2:03:
                    66:e3:5f:ae:09:b7:bd:43:03:69:64:d4:be:0d:2c:
                    d8:c8:0b:04:2e:70:8f:11:87:5b:e9:aa:20:80:ce:
                    0b:c0:e4:c7:bd:a0:06:9f:fb:5a:b6:89:bd:cb:76:
                    09:22:33:92:47:13:9a:20:38:e5:14:d4:60:fb:ab:
                    fa:10:ee:2e:11:b4:f1:74:b2:e7:d6:eb:de:09:41:
                    b0:98:14:89:c7:5d:b8:8c:8e:cb:a3:6b:7a:6a:32:
                    e5:fe:c9:5c:ff:b8:a8:43:7d:8e:dc:ac:b5:2b:5f:
                    5a:f3:88:f5:2b:de:ae:5e:fc:aa:fd:81:ef:2f:af:
                    b2:4e:5f:69:58:ef:2a:ad:35:a0:82:05:f0:76:32:
                    51:17:7d:55:c0:91:d7:af:48:4b:68:84:3e:63:e6:
                    b4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DB:9F:2D:A5:48:F9:86:C5:E9:72:91:76:75:AB:C2:E7:55:85:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e476da5-17c2-3908-b3b1-ded8f4368450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ea:08:4e:e2:70:d7:bd:de:b1:cd:cc:d9:53:85:f8:2b:5c:
         37:cd:9e:e7:3a:3e:1b:01:da:29:ad:87:9c:df:4a:c2:57:74:
         34:c7:8d:e3:36:34:75:4e:7b:1b:fd:25:c0:9e:df:17:72:c0:
         2c:18:18:96:a4:2a:43:a7:fe:55:c0:aa:51:d8:46:33:7a:c4:
         5b:af:e0:6c:93:05:f5:fb:9f:03:dd:ee:f3:1c:5d:85:17:d4:
         be:43:01:31:a4:bf:a4:11:f3:01:0f:cc:5f:9a:dc:49:68:66:
         48:9e:0f:ff:56:cf:50:42:20:96:ae:ed:18:5c:03:0f:2a:38:
         f0:b1:a8:36:c9:42:99:00:ae:c0:65:c2:7f:73:20:70:c0:9f:
         41:79:4b:11:f1:81:7f:3b:c7:a5:79:95:07:08:ec:39:89:65:
         0e:31:ef:98:25:ec:98:85:e6:46:97:19:bb:f7:43:61:3d:a0:
         26:a2:6f:a9:4a:c9:ed:ea:b2:12:a8:7d:b2:18:7f:78:38:99:
         6d:72:d7:87:d8:7a:76:30:82:10:1e:85:75:a2:e4:53:72:b8:
         1a:be:e1:39:68:d9:59:00:06:88:79:5a:ca:49:37:cf:af:d1:
         7f:4d:4b:f0:b9:1e:18:d7:74:45:0f:a7:c2:f7:15:29:52:e2:
         80:09:36:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 20:03:14 2024 by rpki-client on console-ams.rpki-client.org