Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b6ba632-33a2-3507-8ecb-bdd95a529099.roa
File:                     4b6ba632-33a2-3507-8ecb-bdd95a529099.roa (raw, json)
Hash identifier:          OIKy5MJKOx/EswoCNJHs6ITB8/GNsNZBCV2wWdQROUM=
Subject key identifier:   BE:9A:BF:F2:BA:D9:3C:35:72:BC:6F:93:B8:50:4E:89:6A:F3:5C:F2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B62552A0993F9BA7F13C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b6ba632-33a2-3507-8ecb-bdd95a529099.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     201873
IP address blocks:        2001:470:22d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:62:55:2a:09:93:f9:ba:7f:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=f1fae9fe-5c71-4068-bac4-cfd5c945d1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:af:4b:de:fa:18:4d:ac:76:c2:de:f6:0d:0f:
                    c6:c9:e3:d7:dc:9a:27:83:25:93:78:36:ca:6c:e7:
                    75:ae:db:c2:83:fe:02:bb:4c:34:ec:0f:70:66:61:
                    0f:0e:02:24:f2:3c:23:b1:6c:e3:ad:fc:88:96:db:
                    79:eb:54:91:94:f9:23:05:8f:21:49:92:dd:04:15:
                    00:2e:71:29:35:5c:29:d5:2f:68:a6:a5:52:09:d7:
                    4d:f9:3c:ba:e2:d0:1d:52:52:56:22:46:9e:fb:d1:
                    44:9d:e5:f1:24:04:43:2d:49:a7:27:b9:26:5e:c1:
                    38:4f:28:13:2a:42:11:52:99:c2:e3:ff:18:f6:ae:
                    d5:26:b1:62:db:94:ac:c6:70:49:cd:df:6e:bb:ee:
                    3f:7e:21:31:43:50:b2:7e:7e:83:1b:31:be:1b:11:
                    a0:46:d6:12:48:53:57:97:bc:63:fb:c4:26:18:9c:
                    b7:1a:38:1e:14:b9:d5:22:af:dd:6a:7f:16:c2:dc:
                    13:78:35:d5:65:1b:c3:00:ce:03:9f:ab:89:23:93:
                    dd:5e:43:ba:c7:2b:72:fd:6f:83:35:ae:1e:0b:2b:
                    bf:25:8e:9f:cc:2d:48:a1:f3:92:88:45:ee:5e:ee:
                    26:5b:99:53:6b:19:84:ee:ee:90:cb:35:b7:42:91:
                    1e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9A:BF:F2:BA:D9:3C:35:72:BC:6F:93:B8:50:4E:89:6A:F3:5C:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b6ba632-33a2-3507-8ecb-bdd95a529099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:22d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:a2:83:02:eb:93:3b:c3:60:79:c2:0f:99:8b:75:58:b5:bf:
         b7:32:27:a0:2b:b2:05:8c:f8:7a:d2:d4:a6:7a:24:8a:e1:b9:
         87:c2:47:5b:2c:3b:07:7e:bb:c6:80:a3:49:94:ee:3b:9a:bc:
         67:8c:86:27:f0:f3:1b:a9:79:bc:35:3f:c6:16:fb:b4:8a:a5:
         ec:10:96:bb:70:47:d6:94:86:a9:7c:f2:e7:0c:84:5b:cb:2e:
         be:93:95:af:ec:d7:5e:e7:64:42:41:39:d0:b6:58:94:89:a7:
         8b:d3:e0:08:41:bd:22:21:c7:b1:12:52:24:95:66:0e:53:5a:
         f9:cc:b3:e7:4a:73:6a:42:fd:cd:bc:f9:98:70:70:d9:7a:9b:
         b5:d6:81:95:bb:d1:0e:97:bd:e2:05:b8:5c:5c:aa:47:6a:ca:
         a2:f1:b1:45:fe:37:54:9b:8a:0f:1f:84:e3:ba:99:a5:63:84:
         57:b5:26:d5:ee:8a:69:27:3b:92:7d:29:f2:ee:d0:49:89:ee:
         95:f3:ba:b2:79:1c:ba:b6:5d:ba:4b:0f:ca:2b:e0:1a:b4:03:
         ab:9d:ec:fa:e0:37:1b:10:1b:09:fc:d1:cc:99:f9:c4:c9:4b:
         96:8c:fc:67:40:73:43:cb:64:06:b3:34:9e:09:95:5e:7b:ba:
         21:b2:42:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:22 2024 by rpki-client on console-ams.rpki-client.org