Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33e494e2-5728-3747-829c-9d29019378ca.roa
File:                     33e494e2-5728-3747-829c-9d29019378ca.roa (raw, json)
Hash identifier:          CxgAoUNav/AGlkuO/eOtV6rwyoqXw7L/QSAFLVqmTIs=
Subject key identifier:   63:73:A3:5D:35:4F:BB:34:88:D5:03:57:73:98:A0:CD:9F:E9:65:12
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B7803C3CAD77A8FC34A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33e494e2-5728-3747-829c-9d29019378ca.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     54725
IP address blocks:        2001:470:313::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:78:03:c3:ca:d7:7a:8f:c3:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=5b56a0df-d50c-437d-bfbe-ca740b48987c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:54:8e:12:1c:b3:dd:b8:e2:1d:cf:72:5e:
                    a5:b0:6d:3f:d7:53:2a:70:37:e7:45:f5:56:78:50:
                    3a:71:08:cf:c1:60:ed:bb:a3:e4:81:3e:23:72:f5:
                    f3:54:19:37:20:82:08:5e:23:a7:bf:62:c3:94:e4:
                    b9:c4:2a:3f:03:15:5d:de:b1:3d:c3:cd:6e:d4:a5:
                    a6:6a:33:13:5a:27:92:e1:2e:83:a9:df:63:91:25:
                    5f:8b:16:0b:ad:80:30:61:d9:51:5f:4d:e1:6c:77:
                    c5:e7:ba:79:89:a6:ec:43:1e:d7:54:7f:4a:18:61:
                    35:bb:f2:27:24:40:a9:0e:5c:b6:f4:48:37:00:b9:
                    28:e3:2a:b0:3d:61:bf:6e:fe:fd:e8:ef:7e:ba:ea:
                    ab:11:05:2e:f2:c4:49:65:5a:66:b6:a6:4f:15:9a:
                    a5:5d:d8:98:a6:45:53:e5:c4:9a:97:f9:6d:8b:65:
                    3a:c0:5a:fb:e2:c7:4b:d5:e1:c0:53:de:d7:86:74:
                    e2:67:ef:cc:1a:1a:f1:68:8e:08:13:4a:12:cc:31:
                    0c:fd:72:56:55:81:3d:7d:7a:b9:10:2e:d1:26:4b:
                    04:ee:20:08:9d:47:5a:21:db:b8:79:d2:eb:a5:d2:
                    20:8a:f1:49:74:4e:1d:0d:69:dd:43:2a:03:95:cd:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:73:A3:5D:35:4F:BB:34:88:D5:03:57:73:98:A0:CD:9F:E9:65:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33e494e2-5728-3747-829c-9d29019378ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:313::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:4f:66:9a:3d:06:cb:eb:3c:1e:1c:6f:bd:3c:f8:98:60:fb:
         16:97:f0:3a:f9:0b:49:9f:b9:c2:dc:f9:76:d0:e3:ea:1c:04:
         e4:75:99:48:bf:1d:56:ba:b2:37:03:e2:a2:5f:b8:6b:94:af:
         01:45:cf:26:b3:5e:92:ac:89:54:2d:80:35:3e:86:bf:b0:5f:
         5f:95:8e:c4:40:e8:ab:96:cf:b8:53:a9:a5:c4:6a:8a:74:03:
         c9:8f:77:c6:ce:3c:22:9c:4a:0b:db:2a:fe:2d:9b:50:ba:f2:
         e2:51:58:fd:3b:3e:64:45:8b:b9:95:b3:4b:33:70:72:37:58:
         e3:1d:0e:6d:ae:3e:0a:d6:1a:bf:61:bb:a9:43:fc:1c:74:f3:
         7e:c0:a0:01:90:de:ca:10:22:36:16:61:aa:14:24:d8:2f:60:
         d6:3b:d6:4d:8e:0a:27:b7:ac:1d:7c:6e:c7:e6:5d:90:ee:6e:
         ea:f5:0e:d3:64:14:f1:89:00:48:71:11:f0:96:d7:02:62:7b:
         b8:6e:b4:2d:06:7a:88:93:b6:4a:bd:fc:87:9c:26:9c:10:4d:
         5c:3f:6b:d4:ab:a5:29:b3:9a:44:50:43:fd:95:7e:e6:a4:1a:
         7a:b8:de:9a:62:e2:10:a1:77:37:06:98:be:76:a6:67:60:62:
         11:e8:f4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:21 2024 by rpki-client on console-ams.rpki-client.org