Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e8cb6f9-f19e-3005-b9b9-e5b6280f5590.roa
File:                     4e8cb6f9-f19e-3005-b9b9-e5b6280f5590.roa (raw, json)
Hash identifier:          ib/ePINl822VlRHlfy95zxxFMOYjfsPx6UGQcH4m/BY=
Subject key identifier:   12:99:6B:AC:FE:13:89:69:AB:FF:5B:D3:AE:19:8D:6F:6B:D9:07:42
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D019C9D756B1228C8ECA00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e8cb6f9-f19e-3005-b9b9-e5b6280f5590.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     41872
IP address blocks:        2001:470:227::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:19:c9:d7:56:b1:22:8c:8e:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=0263bcde-68a6-40bf-b2b3-f08c5b2874e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b2:8a:54:c6:c9:2f:1e:d7:72:8e:da:f6:93:
                    6b:fb:8e:88:7b:3c:e0:86:78:75:4b:b2:f5:b3:77:
                    e4:80:03:33:a5:b5:6a:3e:e4:ce:a1:e4:f8:b5:0a:
                    6d:67:db:b2:12:a0:f1:50:38:d2:d5:c9:22:26:ad:
                    f6:50:ff:0f:8d:c2:83:70:a5:0d:01:36:71:8f:f4:
                    f0:4c:61:5c:a4:ab:42:06:95:b7:b6:5e:11:ff:82:
                    f8:3f:64:43:88:b5:54:3d:66:84:65:63:bd:33:96:
                    e5:a4:60:9c:67:2e:33:aa:94:63:1e:16:b6:c4:1b:
                    09:90:98:1e:48:21:60:82:af:af:68:d2:f4:f5:a5:
                    70:5e:3f:75:b9:fd:47:ee:1a:9b:ce:e6:6a:6c:fb:
                    30:f4:80:10:e7:e4:60:4a:da:94:fd:d3:9f:8f:58:
                    5e:4e:0b:f8:89:1e:db:00:8d:d5:77:d5:9a:4e:40:
                    83:c7:68:82:67:46:04:a3:dc:d8:4a:e0:e4:d8:b0:
                    a7:17:d0:ca:6f:e4:e5:b9:e9:22:01:a1:b4:e1:76:
                    49:79:1d:a9:d6:7c:c5:1e:4a:30:37:c8:93:08:29:
                    63:da:39:83:f9:7d:5d:d1:0d:bd:b2:5a:9f:91:7b:
                    c6:42:02:98:8e:4f:ec:1d:ea:b3:00:d9:46:49:d6:
                    e3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:99:6B:AC:FE:13:89:69:AB:FF:5B:D3:AE:19:8D:6F:6B:D9:07:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e8cb6f9-f19e-3005-b9b9-e5b6280f5590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:227::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:3b:22:ed:4b:31:b2:a3:c4:f0:aa:ce:70:53:fa:af:47:58:
         e4:f2:32:71:ad:0d:e0:4e:34:14:85:43:6f:14:cc:dc:aa:2b:
         37:3c:18:5d:6e:bf:95:03:bc:43:76:e1:4b:e7:c1:5b:1c:4b:
         98:31:01:dd:5b:bc:17:9e:e8:b4:fe:a9:ab:c4:44:7b:94:b8:
         01:44:36:20:c2:13:12:b5:10:e5:2d:7e:1e:b9:2e:86:ba:54:
         70:5f:4d:84:a3:73:c9:4f:60:07:b0:94:6d:77:fe:f4:a3:b2:
         d3:8f:f1:89:8e:70:6d:1c:f1:eb:a4:21:9c:76:38:6a:fb:38:
         69:76:a4:6a:f5:d5:e1:af:4d:3b:b1:ac:29:d4:29:2a:93:e8:
         9d:b2:8f:50:50:5f:49:d3:33:fd:62:e8:8b:5f:ea:b2:39:d7:
         d2:26:81:48:83:4f:24:c9:00:eb:b0:ec:ac:f8:9a:23:9f:31:
         5f:64:5a:44:b6:d9:15:cd:6b:dc:7c:b3:db:f5:5b:21:90:ec:
         b0:85:8a:ff:2e:32:50:1d:1b:0d:77:7e:66:f7:b0:4d:f2:f2:
         53:dc:86:fc:ce:06:5a:c2:06:48:b2:5f:25:a4:f9:f1:c2:11:
         18:7b:9c:22:97:c9:56:08:9f:87:8f:ac:13:77:20:3f:1a:71:
         54:68:17:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 7 18:08:33 2025 by rpki-client