Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f77b53a-4236-3f0b-a07b-0ab0bf5b57ee.roa
File:                     1f77b53a-4236-3f0b-a07b-0ab0bf5b57ee.roa (raw, json)
Hash identifier:          EINBxKzzdoKC3/b6vP3WRFpamGaFqqFB+VfJ3jVQRTE=
Subject key identifier:   9E:56:AC:AE:B0:92:AC:26:40:6F:06:B9:B1:0D:E8:AE:53:63:09:E0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B60AEE3CCB0FC6179F900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f77b53a-4236-3f0b-a07b-0ab0bf5b57ee.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     21805
IP address blocks:        2001:470:20c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:60:ae:e3:cc:b0:fc:61:79:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=137ba4f4-6048-45bd-8af0-35804c6add5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:56:96:dd:f8:a3:5e:07:01:45:43:59:42:9e:
                    3a:79:5e:b0:87:33:4b:fe:e3:58:c5:82:59:f5:6a:
                    60:e7:d3:66:c5:21:91:49:9a:6f:3a:06:90:fb:78:
                    ee:51:c4:ff:59:66:0b:27:25:80:11:c6:cd:cc:71:
                    13:82:b4:4b:7e:94:b3:5c:d3:0d:a8:0f:51:c2:ef:
                    f6:93:a5:91:d4:a2:c6:83:31:60:16:a4:b2:d5:52:
                    ca:16:40:72:a5:f2:78:7a:fc:7f:df:cf:67:56:95:
                    83:89:d6:ec:0b:dd:1c:ed:f8:ad:94:cd:e6:16:de:
                    00:b2:8d:dc:63:10:87:82:1c:e3:66:e9:39:47:13:
                    65:aa:39:a9:6c:c9:ad:f5:95:76:ad:40:ce:3b:93:
                    26:82:de:a8:7a:89:6d:fe:32:bd:0e:b0:98:f3:42:
                    09:1c:25:8f:d5:a0:68:33:a5:e3:c7:1c:bd:d6:b9:
                    f2:eb:4b:f2:ae:d2:91:d1:c2:f0:d1:2c:db:22:6e:
                    f4:17:02:81:6c:7a:fa:5c:83:a9:48:c2:3a:d5:05:
                    8b:2e:c3:3b:16:3c:08:58:36:94:8c:c9:1b:9c:2a:
                    f5:a3:6d:32:29:44:6d:62:92:61:67:90:55:2d:fd:
                    dc:65:85:86:f7:e6:39:fb:11:6e:4b:39:f8:6d:cb:
                    50:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:56:AC:AE:B0:92:AC:26:40:6F:06:B9:B1:0D:E8:AE:53:63:09:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f77b53a-4236-3f0b-a07b-0ab0bf5b57ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:20c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:24:e5:34:55:90:c2:05:6d:5c:df:fa:17:ce:58:43:db:0f:
         7f:6e:b2:ba:57:49:46:b0:fc:74:88:91:6f:ea:f6:68:47:b5:
         50:f2:ae:2e:d1:71:b7:85:41:ed:3a:63:3e:a3:5b:ff:99:5e:
         f8:f7:35:6c:58:de:01:ef:73:46:63:32:b4:6a:f4:cc:a4:c5:
         62:4e:b0:9a:81:26:4c:9a:be:66:0e:d1:c1:dd:ad:a4:7e:bb:
         f7:54:fb:fa:2c:51:c3:d9:13:57:00:e2:1d:8e:c6:0f:3b:80:
         31:11:a7:eb:7b:ed:da:89:20:83:08:b3:22:93:89:70:c7:74:
         3c:c9:8d:d5:36:70:eb:b7:b2:78:d4:5e:37:31:83:57:b4:d1:
         3a:98:d2:cc:e3:0e:5c:fb:22:1d:8b:51:ee:e6:a4:ea:65:e3:
         9c:2f:18:34:d4:27:2c:7c:29:d4:26:bb:ee:21:55:1f:b0:60:
         d6:49:40:76:c9:f7:a1:10:0c:d8:13:cb:e4:dc:08:3e:d3:99:
         de:83:ba:5c:fa:27:ac:98:7e:a7:de:0c:36:19:9a:70:17:98:
         19:d6:e4:f9:3d:29:e4:17:2c:f6:f5:b4:21:c7:3b:4a:df:9b:
         be:e5:4b:70:5d:24:65:ae:20:2a:76:3b:c1:eb:c4:41:51:5e:
         f8:f9:f0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:21 2024 by rpki-client on console-ams.rpki-client.org