Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7306567f-121d-3d1d-b372-cab712a63ea9.roa
File:                     7306567f-121d-3d1d-b372-cab712a63ea9.roa (raw, json)
Hash identifier:          PuN9+Oj3I69VcrUdmtf5q2VIenBcphSC8Mtrx/s1Slo=
Subject key identifier:   D0:20:BC:AC:8B:CF:20:19:F0:C5:DB:F0:E1:C9:51:4A:2C:77:5D:D9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B75E376C505C27BEEC7C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7306567f-121d-3d1d-b372-cab712a63ea9.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     16324
IP address blocks:        2001:470:23d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:75:e3:76:c5:05:c2:7b:ee:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=740f50c9-4f6f-4a96-a163-0edb5bc05153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:ef:a7:05:9d:54:86:27:9e:8f:dd:77:4f:
                    d4:2b:0f:e9:b8:5a:e0:f0:87:04:07:09:00:e6:85:
                    5c:9d:e6:3f:31:ce:84:39:e9:6a:e3:ef:c7:04:f9:
                    f4:23:03:0e:11:3b:62:a3:61:7c:bb:24:af:73:41:
                    a0:89:93:25:d6:d9:29:3e:b9:78:10:06:04:12:d9:
                    61:f9:3f:fa:1b:c3:4b:48:8a:28:65:9e:5d:74:d0:
                    c0:de:6c:4e:36:9c:e5:68:56:d6:7f:f6:fb:87:71:
                    c1:83:4d:fe:f7:1b:67:1b:58:fe:72:45:18:59:5f:
                    7a:61:82:fa:69:a9:fd:ee:29:e9:bf:ce:31:69:0c:
                    5b:b1:ec:f9:ee:b7:26:20:ae:b1:d4:80:57:ea:21:
                    85:5a:47:0e:b4:fa:68:29:4c:f8:8f:f4:c7:43:02:
                    33:9e:04:17:18:d7:de:4a:f7:9f:5e:42:f3:84:6d:
                    a2:be:a2:f2:32:b3:82:1d:34:6f:88:12:08:00:0f:
                    fd:d0:5c:c8:72:7a:f9:da:d7:24:4a:b6:f2:e8:50:
                    ae:ef:3d:00:61:d9:d1:8a:b8:62:9e:fa:0d:2d:d3:
                    53:2f:d1:84:91:3f:16:79:f1:f8:5c:67:e1:c0:21:
                    f4:1d:63:ae:f2:47:bf:2e:03:a6:9f:76:fd:e5:85:
                    84:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:20:BC:AC:8B:CF:20:19:F0:C5:DB:F0:E1:C9:51:4A:2C:77:5D:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7306567f-121d-3d1d-b372-cab712a63ea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:8b:af:55:ea:6a:fd:e1:3e:9b:47:5c:9b:36:ed:bb:9c:99:
         d7:00:24:61:bc:14:50:00:b2:8e:be:03:a5:95:13:72:3c:84:
         80:b3:a2:59:0b:f3:c3:ad:4f:b4:c7:a7:fe:36:70:81:e5:7e:
         39:1f:65:05:01:b9:f5:9a:3f:d2:8d:d1:cc:8d:7a:4e:d4:22:
         60:e3:f2:b2:1b:96:d9:a1:46:ea:14:35:1e:45:a8:35:e9:56:
         ac:83:f3:37:12:34:c3:52:fc:f8:dd:b4:f0:71:53:fe:5b:3e:
         08:82:76:19:98:9d:34:5c:b2:9f:e3:59:97:2c:f2:a5:7d:16:
         a6:54:21:32:60:7d:1e:05:7b:52:11:12:15:b7:1a:24:1d:8c:
         13:4f:4f:8d:19:1f:57:b3:bb:40:11:81:c3:30:f5:33:35:33:
         d0:44:65:6f:f5:bd:cd:12:d3:97:de:fd:29:3f:2e:36:4a:d6:
         3b:1b:e8:bb:04:72:b6:76:8e:2c:e3:ea:57:c2:94:4e:12:c7:
         5a:b1:f9:97:b8:07:b1:b0:df:a1:53:3a:d4:88:b7:bd:0f:91:
         8f:dc:05:31:8f:70:91:9e:b9:4d:00:67:25:14:90:05:a3:90:
         49:74:03:d7:08:31:da:5d:df:13:84:09:12:cf:c4:92:04:a2:
         71:a5:01:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:36 2024 by rpki-client on console-fra.rpki-client.org