Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25b45474-d9f3-30d7-af14-7920e9d69bf9.roa
File:                     25b45474-d9f3-30d7-af14-7920e9d69bf9.roa (raw, json)
Hash identifier:          Oyfc9YuuPOcFqq82zcdJDHn7wi6BjgFrXw+XgMvN0cA=
Subject key identifier:   CF:11:63:DA:A8:FE:35:86:D8:95:52:A6:32:46:CC:52:64:7A:43:1C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B53AD4C36E3E5D0D2AF00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25b45474-d9f3-30d7-af14-7920e9d69bf9.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     396106
IP address blocks:        2001:470:db::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:53:ad:4c:36:e3:e5:d0:d2:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=c15b2db4-778b-4bfd-96eb-3d2d8372ef1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d4:0c:09:9a:ac:af:c5:81:3c:57:41:57:4f:
                    42:96:c9:17:8f:90:28:ce:a5:0d:6f:f3:cb:6d:47:
                    c2:67:55:b2:da:12:a8:2e:ef:91:3c:56:59:49:be:
                    98:1d:09:f0:3d:d8:ef:0a:32:86:e1:3e:f4:cf:72:
                    98:74:44:2c:07:9e:d9:48:37:da:7c:2e:84:cb:15:
                    51:42:02:b1:f3:c2:15:9a:b5:fa:b0:1c:f6:03:3d:
                    1c:2e:2b:1d:67:db:d2:d7:bd:88:fe:48:79:59:40:
                    cb:fd:67:02:de:62:1d:82:e1:f2:ba:e4:74:34:a3:
                    65:3a:a2:02:83:54:47:6c:dd:9a:da:58:41:ba:cf:
                    79:b3:87:30:b4:ef:5e:bd:ab:4c:65:ae:36:8f:4b:
                    54:13:97:6b:d8:1b:f4:b1:f4:38:b1:5e:0f:87:b2:
                    92:97:52:48:3d:59:83:f8:ed:4f:ea:3a:17:20:55:
                    1d:26:7f:13:68:b7:bd:c2:12:77:6c:4f:11:d4:e4:
                    55:a3:e6:81:d2:b0:5f:fc:6a:6f:ad:47:a1:2e:ec:
                    93:7b:44:cf:4a:4a:b7:43:7d:26:59:a0:7a:db:ca:
                    e3:0e:b3:21:60:c6:28:7c:2f:2b:c9:12:56:b2:5b:
                    93:d0:f2:62:16:e9:ae:e5:8b:65:26:6b:21:c2:b8:
                    7b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:11:63:DA:A8:FE:35:86:D8:95:52:A6:32:46:CC:52:64:7A:43:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25b45474-d9f3-30d7-af14-7920e9d69bf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:db::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:a0:24:12:8b:8b:e4:51:8f:f0:5a:bf:5a:5a:4e:e1:9c:6a:
         a9:48:dc:4c:9f:f0:4c:32:03:09:df:74:37:1b:a5:29:80:a3:
         88:0a:92:f5:a6:57:00:8b:38:35:90:3b:82:94:4c:05:23:b2:
         01:ba:19:4a:bf:ee:09:82:1a:e0:a7:3f:75:c9:ea:51:22:9d:
         c5:ef:4d:7d:87:3c:18:f9:bf:b4:e5:65:a5:c2:c6:8a:9b:fe:
         8a:e4:63:41:cf:75:41:21:a3:ee:1e:fa:e7:9b:53:8b:21:cb:
         70:f4:b5:cc:cb:38:6d:42:a6:73:e2:11:0b:e7:89:0d:de:a2:
         99:b0:8e:96:d0:5a:a6:9b:2d:9d:8c:b5:4e:74:33:6e:73:c8:
         44:f6:72:95:59:a3:8a:6b:34:09:4f:32:c9:6d:ee:16:3f:de:
         20:7a:8f:fa:cd:35:7e:95:7d:72:93:41:bc:d2:18:6c:1f:1c:
         b9:3b:94:ce:a8:96:3b:ce:cf:e3:d4:e4:af:dc:27:6d:4e:cd:
         a4:68:23:31:fb:18:75:18:ef:c3:19:10:be:d2:85:81:b7:e6:
         b0:17:1c:03:5d:08:39:ce:d7:39:af:de:05:c4:c5:5d:7f:7a:
         bc:be:2b:7a:cf:13:1d:bd:ea:12:0a:97:2b:7c:a8:7a:a1:95:
         7a:ad:45:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:21 2024 by rpki-client on console-ams.rpki-client.org