Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/187340f2-ddf4-3c87-b9e0-82d01ece50be.roa
File:                     187340f2-ddf4-3c87-b9e0-82d01ece50be.roa (raw, json)
Hash identifier:          Xkw7nFNpFv70xshiY6DqmAJYtSjLo0TwGlGeUbb900E=
Subject key identifier:   C1:7B:16:DD:38:43:E9:40:6E:DD:7D:D9:D5:55:E0:24:C6:63:CB:F4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFFD63AF35A76FA3DF8520
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/187340f2-ddf4-3c87-b9e0-82d01ece50be.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     397005
IP address blocks:        2001:470:24d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:fd:63:af:35:a7:6f:a3:df:85:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=aa446aed-3248-47cb-8b9c-9fcfdbc7ac57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5a:45:cd:47:4d:4a:83:7b:40:de:f1:c2:29:
                    e7:2c:60:2c:05:d5:a0:2b:af:90:c6:41:9a:31:34:
                    b0:74:ba:0e:75:fd:de:58:1b:6b:33:aa:6a:51:ca:
                    23:4b:88:b7:3d:2f:e6:d5:b0:59:71:5c:70:36:56:
                    07:6f:27:6b:dd:29:b0:bb:8b:3d:ef:78:87:04:35:
                    74:c9:83:fc:fa:bb:a7:e2:6d:b1:c1:ee:43:83:63:
                    ee:ea:ac:c3:50:b2:bf:37:17:2b:a8:d1:a9:c1:40:
                    26:d9:51:c1:f4:e4:f4:b0:5c:b5:26:2b:47:43:5f:
                    76:51:02:e3:8a:18:63:31:d1:18:94:a7:03:53:e3:
                    65:8f:f9:e3:9b:58:2f:e4:18:bd:45:c8:c5:69:0a:
                    d0:34:85:92:a9:fd:9c:08:1e:bd:aa:d6:7f:6a:2a:
                    51:21:17:7a:6f:f3:c7:10:dd:93:17:9d:8b:40:e8:
                    f8:6a:8f:72:91:c1:6a:3b:19:fa:3a:6b:83:89:54:
                    cf:7d:47:45:1b:66:6f:62:cd:96:db:56:18:e8:2e:
                    88:82:a0:a5:f7:91:84:ec:f6:06:32:33:82:54:5a:
                    44:24:aa:52:95:73:9e:13:e4:89:34:08:79:c4:0c:
                    c1:0b:30:fe:cb:54:ac:e5:45:7e:83:00:74:91:4c:
                    f1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7B:16:DD:38:43:E9:40:6E:DD:7D:D9:D5:55:E0:24:C6:63:CB:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/187340f2-ddf4-3c87-b9e0-82d01ece50be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:24d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:0d:d1:3a:30:6e:7b:5b:73:de:ae:35:9e:41:09:f3:de:ef:
         aa:16:6f:20:dc:fb:c6:a2:11:46:dc:ea:11:03:23:14:ac:f9:
         59:04:45:09:cf:dc:ab:c8:b9:09:36:44:b7:2c:2a:41:90:49:
         70:34:1a:60:ea:2e:c3:3f:9f:b8:3f:86:02:10:50:11:3f:ab:
         f2:6a:37:75:6a:e3:f7:c3:49:43:a2:c8:e3:34:46:f7:93:14:
         53:15:aa:38:b1:68:a8:14:9f:25:d5:50:62:a6:1b:c4:1d:e1:
         fa:07:c8:8d:cb:3c:df:4f:0c:18:d4:44:a5:1a:ab:0f:61:9c:
         a5:dd:76:5f:2e:5d:dd:44:f9:e7:41:c4:be:dc:fb:74:83:c4:
         37:7e:af:1a:22:b4:ca:30:1d:94:a8:ad:64:19:4c:56:05:0a:
         f1:65:29:60:2b:69:c6:a9:90:b1:3a:80:43:6a:5b:a2:17:48:
         57:3b:f4:0a:c0:3b:dd:f6:96:82:72:22:8c:7b:b1:b0:14:36:
         60:02:dd:8b:64:c4:98:1f:82:67:f7:51:09:46:08:20:17:1d:
         04:d7:aa:40:b4:03:22:74:af:65:86:46:19:8e:6d:ea:6a:34:
         24:14:43:64:48:36:7f:c6:c6:7d:85:de:d3:13:a2:ad:21:52:
         4e:7b:04:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 04:37:02 2025 by rpki-client