Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/91f865ca-971d-3b25-ab4d-155bf4d6a773.roa
File:                     91f865ca-971d-3b25-ab4d-155bf4d6a773.roa (raw, json)
Hash identifier:          yG7rFcZm6UuGSi9MgUx/4KnOZsz4EWJNSwNYf6PfS/g=
Subject key identifier:   0D:32:B8:48:EC:C7:CC:11:DA:5D:D9:CD:2D:47:87:19:1D:35:9D:71
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285847B3CC00E8F8BEB11A9E2DF900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/91f865ca-971d-3b25-ab4d-155bf4d6a773.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     293
IP address blocks:        2001:470:358::/46 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:00:e8:f8:be:b1:1a:9e:2d:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=4592e4b3-5752-454a-9b56-2c0a7a7e66e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:53:af:19:88:1d:11:e2:63:29:99:27:9c:a0:
                    8b:2e:7e:6d:6c:6a:e7:66:9e:d3:3f:75:b9:59:f0:
                    6d:b0:21:30:58:cb:59:84:74:35:e2:77:e1:f4:29:
                    cf:2f:4e:70:55:cc:9c:26:25:da:fb:1c:75:0e:db:
                    fa:c3:1c:f4:0d:da:90:46:ac:15:23:04:6c:55:c9:
                    60:8b:f3:19:0a:97:1a:06:85:d8:b8:f9:3e:cf:94:
                    ae:57:89:34:76:30:92:e6:ba:ea:d2:a1:08:29:f3:
                    2b:a1:aa:3c:9b:c5:ee:97:c4:bf:cd:e3:92:5e:3b:
                    21:66:a5:be:84:2c:f0:fc:48:5a:34:dd:39:3c:bf:
                    90:0c:91:10:a6:28:a5:1d:c6:a5:55:25:fc:af:f8:
                    8e:e1:88:28:f6:f0:4a:73:51:d1:2a:e5:10:c8:72:
                    2c:d8:94:ff:08:b7:01:15:55:a3:c1:64:95:c8:1d:
                    34:b4:3d:96:4e:7b:ca:b6:f0:57:1b:40:30:a3:d9:
                    a6:ef:c8:33:31:47:b7:2f:8a:a4:c2:77:36:f5:3c:
                    c1:ad:12:eb:b0:09:d8:b1:ab:73:f2:f4:56:38:20:
                    7a:c8:03:60:24:c6:c2:9c:71:64:25:42:1b:b6:5f:
                    46:3b:88:37:49:bf:08:39:bc:ea:f0:29:f1:e5:d2:
                    b3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:32:B8:48:EC:C7:CC:11:DA:5D:D9:CD:2D:47:87:19:1D:35:9D:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/91f865ca-971d-3b25-ab4d-155bf4d6a773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:358::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:c1:0b:b1:f0:f5:d4:24:c2:9c:e5:12:b5:06:0b:ee:d0:9b:
         fc:5e:59:33:54:c0:32:6a:ed:a1:e0:2d:65:8a:28:61:a5:b8:
         b4:46:97:3c:f2:0f:89:3f:58:e5:7e:58:33:82:03:ba:e5:e5:
         81:70:f2:a3:7f:1e:21:e3:c3:47:4d:88:c2:43:60:73:92:fc:
         f1:db:25:64:64:c2:8c:db:78:ab:52:0d:b1:ab:50:11:cd:19:
         6f:a5:9a:52:be:43:0d:17:fb:0e:f7:22:07:40:ce:35:71:05:
         cb:ab:dd:18:9d:ea:06:1d:ea:cd:95:82:9c:24:3b:e4:69:23:
         7e:9e:2e:3f:b5:6e:86:a8:e6:04:5d:09:0b:c5:33:37:3e:4e:
         72:e4:b8:24:eb:5b:db:f8:f2:f1:43:9b:bb:59:b0:b6:14:08:
         8d:2c:37:39:b9:2d:e0:39:7d:f3:4a:54:24:9c:2d:61:92:43:
         3a:78:f7:60:82:0f:83:02:51:37:80:7e:e9:b9:ad:92:26:e3:
         d5:6b:57:0b:7c:73:9d:19:b7:55:3a:6b:da:43:9e:eb:77:09:
         e0:c2:dd:30:d5:1d:0c:03:82:a0:36:a7:1d:f7:55:7f:64:b1:
         89:c3:3d:aa:a9:7e:3a:c0:1e:08:fa:58:c1:be:a7:0d:78:7c:
         27:91:65:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:37 2024 by rpki-client on console-fra.rpki-client.org