Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9995772b-7377-391c-8274-6ba7c9f287b9.roa
File:                     9995772b-7377-391c-8274-6ba7c9f287b9.roa (raw, json)
Hash identifier:          h1Xs1d5SR/OztAiXu6jGk6Rq+20HaJn00R927meU4uk=
Subject key identifier:   83:A6:B4:8B:28:C9:80:82:D0:71:AA:EC:37:E7:FA:C9:06:A0:9F:CC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B4E3C11F5038227E40E88
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9995772b-7377-391c-8274-6ba7c9f287b9.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     14277
IP address blocks:        2001:470:137::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:4e:3c:11:f5:03:82:27:e4:0e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=4597461f-2f35-4b43-9195-57ba10993dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c3:8b:c9:32:9f:d2:ec:f0:ac:33:2d:97:ce:
                    36:0b:44:b3:d1:65:7b:23:fe:8d:0d:eb:27:9f:fd:
                    1e:be:3d:16:ee:f4:27:6c:f0:78:3b:b2:bd:9e:fe:
                    67:62:cc:90:ba:53:cb:bb:59:13:1a:b2:20:fa:ca:
                    59:dd:7c:c7:66:4b:13:bd:81:c3:a9:9f:67:fd:a0:
                    01:50:19:da:b1:9e:7c:4b:68:73:00:a7:54:ed:60:
                    99:63:db:78:d8:8b:81:2b:6e:9b:7a:bf:96:37:96:
                    58:37:02:d7:a2:a5:21:74:25:4a:cf:96:56:02:ca:
                    13:57:ed:94:f6:37:14:8e:29:dc:dc:91:05:43:48:
                    4f:0a:f6:5f:73:70:5c:1a:37:d7:77:c8:b9:21:d9:
                    a1:0e:6f:65:6e:bf:e9:65:be:37:1b:4e:5e:1d:04:
                    94:f9:96:1e:5c:a0:eb:48:a3:b0:78:d8:7f:1b:ec:
                    24:f9:8e:ba:1d:17:71:c5:35:11:9c:06:d0:ef:40:
                    7a:a5:49:d9:fb:a6:4b:1b:de:80:1b:08:a9:f6:0d:
                    c8:bb:0b:19:10:4d:6f:49:2c:ff:d8:78:63:26:41:
                    3b:6f:3a:4b:f1:0e:94:4f:2d:77:84:9a:39:e7:8e:
                    5e:6a:1f:ff:d4:e0:a0:1a:f4:1b:2c:d8:5b:fa:73:
                    69:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A6:B4:8B:28:C9:80:82:D0:71:AA:EC:37:E7:FA:C9:06:A0:9F:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9995772b-7377-391c-8274-6ba7c9f287b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:137::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d8:aa:6e:0b:11:1c:60:3c:bb:43:be:24:95:98:71:9f:9f:
         b8:a3:7e:50:45:5f:ea:53:fd:d0:c4:26:0a:82:7b:8d:6a:64:
         ac:15:a3:09:6e:67:05:2d:84:39:f2:dd:68:c1:63:ed:23:58:
         fb:54:35:7e:b7:4a:c7:0b:42:af:c6:11:a2:e3:85:e6:1a:6e:
         90:3e:28:ba:91:06:d0:4c:0c:b0:7a:e2:6a:c9:40:a1:c1:1d:
         27:9d:be:d0:85:fc:62:7a:3a:2a:63:d9:5c:a0:57:75:99:2b:
         db:76:0f:0e:34:5d:a9:7c:e9:70:e8:ac:f5:be:8b:c2:07:29:
         6a:be:42:27:28:55:07:ff:2b:d8:9a:24:b9:3b:70:3a:43:3c:
         21:2a:b7:5c:e8:5d:46:3f:ae:2a:65:c3:82:7b:5d:33:d1:08:
         e3:c7:ac:19:bf:a3:d7:87:0c:16:1d:26:25:39:ca:33:d9:b2:
         1f:7b:5a:6e:1f:ff:d6:39:e7:bd:dd:d9:79:2a:b3:aa:dd:e6:
         6f:9f:51:02:c7:44:7c:4c:75:d4:1f:3a:97:94:45:ed:13:4c:
         91:2a:ef:62:ef:e6:05:26:a4:94:b5:be:ef:b2:a4:88:40:0b:
         c8:bc:f9:aa:21:69:fd:a2:6f:ef:d4:05:89:c1:47:0c:70:72:
         f5:65:19:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:38 2024 by rpki-client on console-fra.rpki-client.org