Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/727690ba-41f5-38a6-a85d-1d1e3c198624.roa
File:                     727690ba-41f5-38a6-a85d-1d1e3c198624.roa (raw, json)
Hash identifier:          nf5gOJHg2f3lii8EHwgETVgvmdl29lRolhO0PoTB1kY=
Subject key identifier:   B3:29:8C:7D:6B:56:41:27:7C:49:D9:95:90:C7:3D:8C:36:77:BF:72
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B57A0D5D45F562D482320
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/727690ba-41f5-38a6-a85d-1d1e3c198624.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     17828
IP address blocks:        2001:470:19d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:57:a0:d5:d4:5f:56:2d:48:23:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=67cba0c1-fb1e-47d7-b001-4ff81284a544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:30:fb:b8:cd:02:ce:f1:af:e8:05:75:c7:1c:
                    11:dd:a3:40:d9:56:59:e8:af:3c:79:aa:6f:e2:37:
                    0f:43:0b:9a:96:18:a5:4d:be:59:f5:5f:de:9a:41:
                    35:f6:a2:7f:4e:3d:96:e3:b0:00:76:68:12:34:29:
                    fa:2b:ce:99:43:dc:4f:24:1c:03:b8:f4:32:54:2d:
                    4d:f3:dd:82:40:ac:d1:a4:8b:2c:68:1a:a3:31:8d:
                    51:29:b7:db:06:58:37:e7:03:cf:a1:66:3f:07:b7:
                    5f:be:9f:01:4a:9b:5e:37:cc:80:b1:9f:bd:c6:95:
                    cb:7e:81:87:f9:1f:47:16:30:88:df:55:ab:07:82:
                    95:d2:b0:ad:18:29:f9:70:77:ef:54:d0:15:56:74:
                    4f:4c:3e:f8:76:05:7d:dd:59:63:21:f6:96:20:dc:
                    bd:f1:72:79:a5:a1:be:eb:bc:e7:79:8e:fd:cf:55:
                    2d:05:b1:d0:26:26:61:bd:e1:8f:14:d9:84:fe:8e:
                    c2:c9:61:a3:a1:62:ac:4d:8b:fd:d8:19:5f:8d:c6:
                    19:8b:c6:b9:ca:1b:3b:09:14:96:09:62:76:a4:20:
                    29:94:e6:3f:84:d8:86:44:54:fc:c2:75:6b:9f:ff:
                    91:86:21:93:82:2f:32:8d:91:0f:0a:f4:2e:02:4e:
                    19:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:29:8C:7D:6B:56:41:27:7C:49:D9:95:90:C7:3D:8C:36:77:BF:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/727690ba-41f5-38a6-a85d-1d1e3c198624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:19d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:b0:bc:38:2d:bc:57:b6:b2:d7:55:74:06:fc:35:f5:73:a2:
         84:30:87:ec:b5:96:78:84:3e:8d:e7:36:cc:b0:65:b8:00:17:
         f2:0b:c4:15:b7:34:ea:2e:a8:96:44:e8:29:ca:50:9b:ea:19:
         5e:ba:5d:08:0c:64:01:38:55:f1:5e:5e:0c:77:be:6b:04:aa:
         41:2c:d0:14:4c:51:3f:ed:ae:a4:7d:4d:41:73:6c:36:f1:ee:
         7f:a6:9d:61:42:27:22:8c:53:da:ef:85:70:75:aa:0f:5e:24:
         d4:e0:7b:3a:0d:c5:2b:35:90:d5:3d:6a:02:19:f3:e3:ff:98:
         2a:2c:02:82:62:5b:3b:b8:dc:cc:f7:cc:8b:bb:34:a7:e7:16:
         a1:36:8e:99:ab:c7:d9:76:1c:89:8d:26:c1:4b:85:80:bf:7d:
         f3:98:ec:8d:7a:10:47:c0:9b:66:6f:40:82:c6:d1:d0:ed:55:
         98:3b:a5:c5:98:a6:3f:7d:83:73:00:8b:be:5a:2f:80:85:c2:
         c0:83:15:f1:ce:d7:22:0b:c9:2a:52:63:8a:f6:76:a0:d0:e2:
         17:4d:9c:3a:30:b0:e5:22:1b:05:61:83:b8:5c:75:b9:77:85:
         97:7f:24:ed:55:20:19:62:d7:43:1f:89:87:18:d1:13:d1:9e:
         14:48:d8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:23 2024 by rpki-client on console-ams.rpki-client.org