Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9eca4c78-a08f-355a-a494-348a24536bda.roa
File:                     9eca4c78-a08f-355a-a494-348a24536bda.roa (raw, json)
Hash identifier:          da2Cqv/E75MfavmkxR9UlmkTcScSrGuoOy4vzGTP/WE=
Subject key identifier:   AD:96:08:98:D5:7F:50:C7:EB:B2:2B:30:2C:CE:5E:54:D6:5A:FA:C3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B5E58622756785E311860
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9eca4c78-a08f-355a-a494-348a24536bda.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     34547
IP address blocks:        2001:470:1f0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:5e:58:62:27:56:78:5e:31:18:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=d3f53970-accd-4bcb-a98b-fe3d8bf115d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1b:1c:4b:78:b2:f2:a0:9b:4e:ce:86:bb:f5:
                    94:e0:0a:a0:12:50:5f:33:cf:6b:9b:ce:d7:40:db:
                    e4:10:de:43:a4:97:ff:3a:b3:81:fc:cf:02:71:5b:
                    e9:6e:29:fd:68:05:68:dd:29:f2:4e:6a:58:85:30:
                    86:0b:17:f9:c0:17:11:37:06:69:4d:b5:e7:ea:35:
                    ce:6d:cd:27:ea:0a:71:72:2a:81:b0:b3:02:c2:f7:
                    e3:44:07:7d:2e:f5:ae:f0:1f:15:5f:bf:5e:a8:43:
                    cf:36:af:6a:c8:c8:df:f2:5f:3b:1b:d6:d3:e8:24:
                    25:cb:b0:61:3b:14:a5:7e:b4:20:ed:3a:be:08:49:
                    65:80:31:83:34:d7:c8:de:37:b1:b3:68:3e:8a:a3:
                    c7:73:c2:7a:6b:29:a9:83:99:b8:44:51:0c:1f:37:
                    0e:f4:43:41:32:09:2f:b5:97:ec:eb:34:3a:51:f8:
                    53:76:e1:52:83:6c:d5:38:6a:56:98:35:7a:9a:26:
                    29:19:9c:2e:73:97:e8:04:56:90:e5:63:2f:99:56:
                    07:47:76:c0:c8:9d:c2:e2:19:d9:92:9b:48:9b:be:
                    ce:c7:07:60:b7:ae:03:37:08:4f:32:cc:55:bd:67:
                    e6:2e:ef:70:c9:7a:8d:c6:a3:a0:a2:65:41:3f:32:
                    62:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:96:08:98:D5:7F:50:C7:EB:B2:2B:30:2C:CE:5E:54:D6:5A:FA:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9eca4c78-a08f-355a-a494-348a24536bda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:c4:41:d5:34:96:80:87:f3:fc:c2:36:8d:7c:ae:0e:7c:4e:
         9e:a8:62:a2:cf:24:fe:8d:e0:ba:bc:ab:c3:1c:7e:33:01:20:
         8c:f2:22:51:e3:7d:c8:38:50:8c:31:22:2b:b4:28:a6:ee:ca:
         55:6c:f8:61:72:50:90:e3:ab:1e:21:50:7a:04:1a:c8:c8:17:
         d3:22:8e:5f:dc:56:6f:f6:4b:97:80:41:5f:2f:41:8e:b2:9c:
         00:2b:01:af:56:16:9d:26:e6:ea:c3:5f:95:dd:32:c1:ce:77:
         50:f0:36:47:11:ae:3b:7f:80:71:6f:02:57:6f:41:79:7a:cd:
         70:bc:97:f1:4f:20:c8:42:5d:2a:f7:56:99:2c:6a:5e:56:8b:
         36:ce:9a:21:1c:5c:8e:fd:0e:0c:4f:dd:7d:87:7c:51:da:18:
         b3:a5:00:68:e6:6e:fc:22:1e:ee:b1:e9:eb:f4:d2:f5:47:4b:
         76:3e:e3:f6:0a:3d:9e:42:a1:cf:e7:a9:94:68:5a:14:39:7f:
         a3:12:c8:38:eb:7c:2a:36:68:4e:19:0f:26:3a:e7:d6:61:49:
         d9:3b:ed:7b:40:ae:1f:93:8c:c0:73:dc:eb:0e:23:8a:16:78:
         06:36:d0:38:c3:c3:2a:6e:50:5c:f1:e9:25:79:de:64:5e:26:
         54:dd:da:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:29 2024 by rpki-client on console-ams.rpki-client.org