Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/83aa6a33-f207-3b7a-bbc0-72e13aba57fc.roa
File:                     83aa6a33-f207-3b7a-bbc0-72e13aba57fc.roa (raw, json)
Hash identifier:          kpS30AV59D/m7xHmG0dRBdTvfKciPlTEiDTQzzzJYMA=
Subject key identifier:   88:BE:0B:EA:A9:EB:93:03:C2:B7:D9:07:0B:AB:96:DD:7D:54:C9:9B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285847E4D366391FE820A1525D9C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/83aa6a33-f207-3b7a-bbc0-72e13aba57fc.roa
Signing time:             Sat 16 Nov 2024 02:30:12 +0000
ROA not before:           Sat 16 Nov 2024 02:30:12 +0000
ROA not after:            Fri 14 Feb 2025 02:30:12 +0000
asID:                     18526
IP address blocks:        2001:470:15e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e4:d3:66:39:1f:e8:20:a1:52:5d:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 16 02:30:12 2024 GMT
            Not After : Feb 14 02:30:12 2025 GMT
        Subject: CN=03cffc0b-41ef-491c-a7bb-c8562301df2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:1c:e6:e3:89:69:9b:0a:1a:fa:3f:a3:a7:
                    c7:76:f2:aa:3c:81:d0:23:c9:44:e4:58:ff:84:d6:
                    04:64:4b:72:70:2d:cf:73:4c:eb:60:32:4d:c7:62:
                    df:72:92:4f:42:30:70:9b:55:98:86:c1:ff:8d:a8:
                    63:bf:bf:38:b5:51:2f:d5:48:2b:9b:7f:be:2d:ed:
                    b2:62:33:9e:44:88:40:db:ec:3c:ec:cf:c4:ca:a4:
                    81:ce:77:37:5e:70:b4:b6:8f:bf:aa:1f:a7:f0:97:
                    a4:0b:47:91:df:65:91:2c:f4:96:dc:b2:15:91:e8:
                    f7:48:44:34:f2:e8:a2:76:25:a3:be:40:49:db:8f:
                    9a:80:91:57:89:e4:46:8f:f0:f7:53:2b:2e:60:5d:
                    f8:7a:79:ed:32:d6:d1:c1:5f:6d:d0:27:5b:4c:b4:
                    3c:03:ae:ac:a9:2e:a7:e5:90:70:0d:69:e9:23:cf:
                    30:14:cd:c6:11:a7:f4:5f:33:a3:05:eb:e9:51:24:
                    14:4e:68:3e:97:9b:6b:36:82:74:f8:3a:b9:ed:62:
                    ca:ff:cd:46:43:60:79:7b:89:79:7a:c2:d7:cb:02:
                    72:aa:77:b4:10:97:cf:39:5f:5d:51:a8:a5:51:e8:
                    30:2e:f0:c2:3c:69:1a:2b:a1:91:f4:23:00:d4:6d:
                    37:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BE:0B:EA:A9:EB:93:03:C2:B7:D9:07:0B:AB:96:DD:7D:54:C9:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/83aa6a33-f207-3b7a-bbc0-72e13aba57fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:15e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:16:13:b2:53:b5:de:1d:2e:c4:78:23:d8:60:c6:44:b4:a4:
         a6:6e:8c:50:96:26:51:1b:4a:0c:84:29:4e:a6:6a:8a:72:93:
         36:35:e7:87:b6:a6:62:c0:60:54:f6:15:f0:8a:1f:4b:d0:aa:
         87:5e:c7:ac:35:35:5d:80:ab:2b:9a:db:85:0b:a6:a6:b1:3b:
         c9:57:88:df:e4:92:7b:a3:b8:77:0b:14:93:65:e2:7b:80:46:
         51:3e:89:a5:05:d1:ce:33:59:76:21:b9:53:79:48:57:7a:0c:
         45:da:cc:bc:1a:8e:0a:0e:53:74:84:ae:36:0e:a8:71:4f:75:
         b4:db:0d:eb:f0:89:59:13:8b:8f:08:a5:c0:1d:02:2e:b8:95:
         ff:90:60:8f:8e:8b:e0:96:0d:fd:3a:10:58:74:bd:82:11:e4:
         6a:84:9d:a4:0a:c5:86:9a:85:94:3e:9d:35:f9:bb:bb:5c:d5:
         3e:67:59:7c:c6:d9:81:04:1a:bc:e9:2a:d2:36:da:57:41:d5:
         23:ae:41:0e:a6:a6:87:a1:ae:cc:0a:0d:32:cc:65:0f:b4:26:
         ca:b2:8b:0e:ab:e1:09:cb:02:28:2a:ae:ff:5a:70:9f:d1:be:
         4a:b7:68:2c:94:63:95:6e:c8:de:32:88:f4:dd:a5:ce:e9:c7:
         20:3e:10:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:37 2024 by rpki-client on console-fra.rpki-client.org