Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f23d348-804c-30ea-982b-3bdcb6611b68.roa
File:                     0f23d348-804c-30ea-982b-3bdcb6611b68.roa (raw, json)
Hash identifier:          5p2rBgkCv0+yCed8K9efzFGrKDdOS1CSUZrlCNiy8aE=
Subject key identifier:   4F:26:23:81:1B:8E:6F:5E:DB:4F:F3:5E:46:90:DA:72:EA:2A:21:7F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584750BF54F4D3F6945B993332C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f23d348-804c-30ea-982b-3bdcb6611b68.roa
Signing time:             Tue 24 Sep 2024 01:30:08 +0000
ROA not before:           Tue 24 Sep 2024 01:30:08 +0000
ROA not after:            Mon 23 Dec 2024 02:30:08 +0000
asID:                     30860
IP address blocks:        2001:470:38e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:bf:54:f4:d3:f6:94:5b:99:33:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 24 01:30:08 2024 GMT
            Not After : Dec 23 02:30:08 2024 GMT
        Subject: CN=6214e1ee-c31f-4725-91b6-56c94c27de1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e6:46:95:c5:ee:c0:f0:8d:25:d8:6e:0e:03:
                    da:23:43:5f:c0:46:0b:7b:db:db:6c:1f:2a:97:fa:
                    21:58:51:c5:33:ca:06:3e:ce:36:bf:10:f9:51:0d:
                    db:a1:de:32:98:58:7b:ee:51:79:84:b6:f3:bb:cb:
                    52:58:80:2b:80:a1:93:06:22:2a:31:6c:85:55:34:
                    ae:da:a1:cb:74:1a:65:81:45:08:7d:9b:d1:4d:29:
                    de:f8:f2:52:f6:86:f5:27:70:36:f2:eb:05:cf:33:
                    a6:a8:14:88:34:a5:8d:34:00:7b:9a:17:78:09:8d:
                    fd:26:1a:e7:1c:a1:3d:aa:3f:86:23:18:11:10:73:
                    68:c9:23:a6:c1:c1:3b:72:71:45:cb:a9:80:d0:e8:
                    14:39:31:cb:e8:c8:4c:5d:29:2c:8d:b5:ae:14:b1:
                    e0:17:ba:47:57:8c:f4:47:0e:dd:aa:51:64:0c:99:
                    3a:5a:d3:32:c8:c6:28:2a:b0:2e:4c:ac:9b:8b:ef:
                    44:83:21:d7:e7:20:80:0a:84:16:48:6a:0b:fc:97:
                    e7:44:92:59:eb:60:b1:b8:b6:83:98:1e:2c:21:44:
                    7c:7f:24:87:44:43:f6:71:7c:89:bc:35:b5:d2:c6:
                    c1:7b:a5:de:fb:09:3e:40:92:cb:82:3e:2c:d2:fa:
                    47:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:26:23:81:1B:8E:6F:5E:DB:4F:F3:5E:46:90:DA:72:EA:2A:21:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f23d348-804c-30ea-982b-3bdcb6611b68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:38e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:1b:62:c0:62:45:24:f0:9a:fe:dc:5d:a2:60:c4:d7:d5:9d:
         4b:5e:10:d0:e1:df:55:5f:45:53:f7:61:b8:7b:97:a1:0f:29:
         8c:9a:19:64:fb:9b:61:f7:81:c2:25:ef:bb:60:cd:29:05:9d:
         c9:63:10:28:7e:0b:13:9d:0a:7a:f3:74:18:ef:8b:f6:fd:1d:
         e4:4c:9b:6c:47:ee:fa:23:2d:d7:ee:b3:a5:b0:76:f2:8a:a0:
         f8:4e:4d:fd:55:40:d8:0c:1a:54:82:7a:64:06:74:5a:67:cb:
         d9:bd:a6:86:cd:1f:5e:75:82:8d:63:30:86:f9:df:48:19:4b:
         95:f1:c5:cb:23:d7:56:8c:87:6f:d5:48:69:72:10:ab:79:63:
         ea:a6:ab:6f:33:37:bb:c7:fd:0f:39:bc:4b:47:c5:7f:1b:ec:
         0e:74:07:cb:b2:31:42:d6:84:2b:a5:0e:bb:8c:ca:a8:d9:43:
         9f:0e:d2:57:b5:23:30:4d:55:03:64:dc:f0:42:0a:c6:86:fc:
         8a:31:f6:1f:3f:5e:9d:fd:49:a4:3a:36:d8:22:47:09:ee:e2:
         c5:cf:a7:41:b7:e9:e3:9d:98:d3:a5:f4:f9:29:c8:cf:ea:9d:
         ed:7f:e6:ba:b2:58:ed:6f:1c:92:d2:c9:bf:3f:cb:65:5a:55:
         5a:7e:8f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:34 2024 by rpki-client on console-fra.rpki-client.org