Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5ef70c62-e60f-3e5b-829a-9cbd4b082139.roa
File:                     5ef70c62-e60f-3e5b-829a-9cbd4b082139.roa (raw, json)
Hash identifier:          RFe7RtZYTuawGdA9RXDQ0IaVztD9z92U/EjFHd80mYc=
Subject key identifier:   B6:78:A5:66:D9:6F:BF:95:27:D4:1D:1D:70:8F:BA:22:EC:B3:BB:38
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B5571F21A52C71D898F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5ef70c62-e60f-3e5b-829a-9cbd4b082139.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     28757
IP address blocks:        2001:470:163::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:55:71:f2:1a:52:c7:1d:89:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=597b35b2-27b1-4db5-a2ce-ff26444db859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:01:d4:5a:b5:35:35:09:ee:01:69:a7:fc:9e:
                    4f:79:89:cb:69:22:67:98:d2:77:78:3b:8a:44:98:
                    3b:05:ad:91:9d:ac:cf:de:a8:2d:4a:bc:88:10:ad:
                    4d:53:26:41:47:43:dd:3f:49:68:aa:7e:9b:72:f8:
                    db:4e:55:de:d4:8b:be:1c:78:83:bc:d8:d1:8b:d5:
                    e5:b5:31:d2:60:45:2b:38:1c:4a:30:4d:cd:22:81:
                    64:f5:92:fc:48:87:02:16:10:43:03:c9:34:55:dc:
                    c5:d8:a7:dc:b3:68:28:cd:bd:74:f7:90:82:ac:aa:
                    1c:1f:fa:08:ae:df:8c:23:8f:d7:04:6d:9a:01:41:
                    36:63:5c:ad:8d:c6:d4:7c:e8:95:38:4f:03:ba:29:
                    9e:a5:56:52:64:c9:ed:3e:1e:bd:72:fd:0e:e9:0c:
                    51:74:31:57:cf:65:33:55:9f:62:31:f3:a4:a6:47:
                    43:5d:d5:54:ae:1b:0a:7b:0d:2a:5a:0d:f2:b4:a4:
                    f9:f1:35:b3:e2:51:71:72:b9:53:d2:86:3a:55:b2:
                    13:b3:e9:b0:f7:6c:ea:74:04:1b:e0:61:26:27:3c:
                    82:ad:dd:9f:a8:05:ca:d6:02:ed:00:0d:a1:23:dd:
                    4a:58:9d:fb:03:6f:19:98:7c:88:81:ce:7e:10:d5:
                    a3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:78:A5:66:D9:6F:BF:95:27:D4:1D:1D:70:8F:BA:22:EC:B3:BB:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5ef70c62-e60f-3e5b-829a-9cbd4b082139.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:163::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:0c:06:af:f8:3b:f0:14:f1:6e:88:a2:0d:54:a0:ed:f1:f3:
         7d:f0:86:2a:1e:bc:f5:d2:2e:90:1f:22:0f:c4:d6:9a:65:b2:
         6b:a4:99:d7:bd:20:c5:03:29:a0:b9:21:fe:b2:b1:70:34:9b:
         50:a0:c7:98:62:5b:33:5a:67:18:84:18:34:56:8b:c0:8b:e1:
         f3:60:87:c3:87:03:2e:d7:dc:a1:09:42:35:be:d6:0d:16:e4:
         b0:fb:af:1d:d3:a6:c8:83:df:a6:b8:05:8b:fc:62:ef:98:33:
         50:ce:5e:9e:54:62:d6:ef:8c:0a:7d:a7:bd:7a:9c:6e:14:3d:
         0b:7f:c5:2a:ff:3d:6f:69:85:f1:9d:89:d4:d0:0e:86:36:6d:
         b9:4f:02:dc:36:15:24:bb:fc:ac:e7:3f:d1:6e:c0:5b:07:89:
         ad:9b:91:b5:11:11:e8:e4:19:35:16:30:14:a9:1f:68:b7:57:
         a1:d6:e7:1c:85:d3:1e:25:b1:50:92:dc:e8:79:e8:68:9c:48:
         7a:25:89:3d:a0:b3:6b:cd:39:5b:6a:a8:9c:0a:08:63:26:5f:
         68:3c:cb:0d:30:9d:89:4b:ce:c5:03:c2:3d:66:0b:9d:9f:8b:
         a0:0d:6b:e7:de:7a:c3:0b:be:24:6d:96:4b:67:58:5d:a1:00:
         61:3b:ad:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:22 2024 by rpki-client on console-ams.rpki-client.org