Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5be87f8b-4fa2-38f0-a875-eafc67c02d9b.roa
File:                     5be87f8b-4fa2-38f0-a875-eafc67c02d9b.roa (raw, json)
Hash identifier:          oKmmmgSpR72qbwNJhPlc2vzpig/KaQ9INbeKOJSqurk=
Subject key identifier:   5C:F0:C9:D9:ED:39:BF:91:FF:ED:14:32:12:05:24:1D:4D:B9:1C:AB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFF0F2E018C25F19AF7100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5be87f8b-4fa2-38f0-a875-eafc67c02d9b.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     62538
IP address blocks:        2001:470:ee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:f0:f2:e0:18:c2:5f:19:af:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=83a80a33-636e-48ca-8577-d3c622a877a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:93:09:b4:a3:e2:84:cf:d4:8b:48:ca:2b:f9:
                    2f:1e:a9:48:ee:3d:6b:c5:a7:43:73:f2:89:49:2d:
                    13:4a:cc:2e:53:27:8d:08:ea:4b:1e:28:ec:c1:e4:
                    84:45:92:b9:e0:05:67:66:ae:65:a9:44:3d:e2:9a:
                    e6:92:c6:5d:be:4e:5c:57:2a:65:e3:44:0c:da:07:
                    1c:57:c6:e4:57:cc:e8:7b:62:3a:d0:5c:63:f1:4a:
                    e1:69:0b:92:bc:a6:30:78:20:df:bc:43:81:ee:14:
                    3e:6a:ef:b5:12:23:ce:d8:31:74:0f:01:89:e4:a7:
                    5b:90:bc:e3:51:23:03:c4:73:89:07:5e:e8:56:e6:
                    32:6d:bd:da:49:8f:17:74:88:ae:6d:91:e9:28:9a:
                    a3:6d:8d:51:2e:4c:b6:a4:0d:36:be:c3:06:eb:f7:
                    16:43:a7:a0:e9:ac:2f:8d:0b:13:af:19:12:e2:ab:
                    c9:8e:1b:22:67:d3:a6:ad:f8:05:40:10:8a:5b:c5:
                    54:46:8d:56:77:eb:f8:d7:a3:d1:93:f8:f2:d1:d0:
                    06:62:ff:97:63:19:2f:c8:95:b2:79:af:db:37:c6:
                    e6:50:c6:9a:d2:a9:c5:3d:48:bd:d6:e5:b4:0c:e8:
                    d2:dd:b4:05:43:ee:99:be:6f:d3:f0:b6:5f:28:f2:
                    3d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F0:C9:D9:ED:39:BF:91:FF:ED:14:32:12:05:24:1D:4D:B9:1C:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5be87f8b-4fa2-38f0-a875-eafc67c02d9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:ee::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:3c:48:be:46:17:b5:64:3d:b1:9a:65:ba:37:ab:02:cd:66:
         ca:dc:36:71:1c:24:f7:c0:23:cb:c1:b8:56:64:4a:ce:22:49:
         d6:a2:f4:89:d0:7e:2f:3b:e9:ca:84:bd:dd:67:ef:f5:cc:72:
         09:be:ca:6a:66:6e:cc:13:b4:71:5b:e7:7e:71:d8:0f:c0:f6:
         3b:0b:55:11:3b:6b:ea:9a:64:1a:44:96:8d:73:a6:63:bb:a5:
         8e:96:c7:84:91:8a:fe:47:25:dd:4b:97:d6:57:10:78:3c:2a:
         f2:86:53:91:7d:f3:65:3c:02:38:cd:14:88:2a:d7:76:bd:e3:
         cf:d4:cc:e8:dd:be:a6:50:ea:e0:e5:2c:81:51:4e:a3:27:c8:
         13:9f:89:7b:77:12:7a:03:42:3a:75:65:62:42:cf:6d:1c:eb:
         a6:53:f1:1e:af:ab:0a:7b:85:72:84:9b:7f:2b:27:9a:3d:68:
         26:bf:92:16:66:7c:47:5b:5d:8e:af:d0:70:ee:19:a8:86:c8:
         db:73:b2:d0:cd:1f:4a:28:39:6e:d2:48:00:e3:74:6c:15:e2:
         07:5d:c1:87:5c:1a:17:4e:af:a0:f6:92:39:2e:fd:56:fc:2d:
         3e:3f:0b:8f:5f:02:74:6a:f6:9a:f7:c5:d8:d8:f6:39:2d:5a:
         3f:9b:35:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 7 18:42:23 2025 by rpki-client