Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3794cbf0-3730-3e0f-a11a-2de2a019b9a2.roa
File:                     3794cbf0-3730-3e0f-a11a-2de2a019b9a2.roa (raw, json)
Hash identifier:          qJARVkHNtSE3zXFh0CVJYhOWqr1duM3Ag5c6yU/Tjms=
Subject key identifier:   9A:FA:A9:23:A9:01:11:76:7B:1D:11:2F:AB:68:30:DC:4E:27:7A:BE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584742C9E84E58A4450C7EF13440
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3794cbf0-3730-3e0f-a11a-2de2a019b9a2.roa
Signing time:             Thu 19 Sep 2024 01:30:07 +0000
ROA not before:           Thu 19 Sep 2024 01:30:07 +0000
ROA not after:            Wed 18 Dec 2024 02:30:07 +0000
asID:                     150325
IP address blocks:        2001:470:27e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:c9:e8:4e:58:a4:45:0c:7e:f1:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 19 01:30:07 2024 GMT
            Not After : Dec 18 02:30:07 2024 GMT
        Subject: CN=fc731617-5cec-49fc-877d-4ed3e82d57ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a1:6f:8d:ba:b6:30:f5:6b:bb:4a:73:e1:3c:
                    66:d1:f1:9e:07:42:26:7c:ec:66:b0:6a:4b:ed:67:
                    37:34:42:6b:be:ea:7a:c1:70:94:6a:0c:94:1b:fa:
                    a4:e4:a2:09:a7:3c:03:e3:06:42:6b:4d:23:b7:f6:
                    44:e3:f3:f6:1b:0b:d1:aa:1f:65:6f:88:3c:e2:45:
                    9a:67:33:d4:bb:e7:9b:72:58:9f:0b:4f:84:da:9b:
                    b4:9f:4c:a6:31:a8:62:94:e1:63:1d:4f:d5:f8:77:
                    b1:47:8a:ce:cb:00:26:35:57:9b:71:af:f7:1f:34:
                    1f:14:a9:72:51:f1:52:5d:38:97:f0:e9:ca:7b:ae:
                    61:69:c2:99:c2:2f:6b:6b:a2:5d:81:a4:11:3e:fa:
                    4b:1d:13:04:36:ce:f5:90:14:a0:b8:dd:e7:ae:b4:
                    6c:0e:bf:ea:a6:42:e0:e0:e4:68:5a:c4:70:42:85:
                    8f:9f:e4:3e:51:f0:7b:15:47:ef:35:bb:a8:ec:ac:
                    e7:5c:e8:22:57:7c:ba:2b:f9:ec:59:02:8f:22:58:
                    15:04:12:ca:80:da:7a:a8:45:a8:a3:3c:b9:db:83:
                    cc:e5:3b:b3:92:59:01:e4:ee:c9:d5:33:aa:96:ce:
                    0f:cb:78:fa:99:9e:dc:28:0c:d4:90:2a:59:e3:88:
                    24:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FA:A9:23:A9:01:11:76:7B:1D:11:2F:AB:68:30:DC:4E:27:7A:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3794cbf0-3730-3e0f-a11a-2de2a019b9a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:27e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:79:02:4f:93:c6:ea:9b:35:02:ea:0d:98:09:73:6a:fb:9d:
         2f:3d:17:bb:13:f1:3f:64:1e:34:c0:99:94:a7:f6:0a:33:97:
         46:c9:84:f1:d8:21:37:42:cf:71:d4:69:3b:9a:41:1e:be:85:
         c1:3a:ee:f7:e3:d3:5a:d9:bf:7d:2b:18:e1:79:3f:29:78:88:
         d9:5d:ea:70:66:7d:c2:cf:68:6b:6d:f7:85:44:88:3c:07:87:
         c6:72:a9:b0:8a:02:4a:ed:f2:fc:8c:76:af:2c:f2:d6:6d:23:
         20:12:b2:b5:85:b8:53:39:44:78:15:92:35:e7:d5:ce:fa:f6:
         02:ec:9c:a1:20:8e:0d:8f:72:62:b1:b1:57:2c:8d:35:ba:d0:
         ba:45:ad:03:d6:a3:da:9d:ab:fd:bc:34:d0:21:b0:4a:af:16:
         c4:ac:99:3f:61:a0:14:80:ea:f9:5e:ca:d6:da:77:c2:53:d8:
         71:04:88:47:ee:70:7a:02:79:2e:87:4a:f5:32:b1:a3:45:7a:
         ab:c6:f7:f1:98:07:6f:4d:d1:62:15:69:b9:34:a5:30:13:71:
         8c:57:11:e6:d2:e7:94:4d:3f:78:3b:e1:7e:bb:e5:87:20:56:
         11:81:2a:9a:94:74:06:6a:b9:ba:cb:a8:f5:13:dc:67:0a:7e:
         e0:d5:7a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:22 2024 by rpki-client on console-ams.rpki-client.org