Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2b7f762-98f6-3db7-bcb4-13edf17ba3d3.roa
File:                     a2b7f762-98f6-3db7-bcb4-13edf17ba3d3.roa (raw, json)
Hash identifier:          44if5lfvtS5JjqGVusq7YebTMkBNhxg/BpIP3KNeHp4=
Subject key identifier:   D6:2E:C0:07:4E:D6:B9:AE:89:CA:37:3F:E5:A8:93:63:F8:56:C5:FC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B72661EB808FFDBA0A400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2b7f762-98f6-3db7-bcb4-13edf17ba3d3.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     216360
IP address blocks:        2001:470:2d2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:72:66:1e:b8:08:ff:db:a0:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=0caee5dd-0181-4eb3-8536-619ee757a5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:7f:74:59:01:77:70:10:64:49:15:49:e6:02:
                    54:61:4b:5b:53:0a:4b:ec:88:3c:27:6a:61:67:e0:
                    78:9d:d7:95:ef:7b:af:b2:4e:55:56:1b:0b:4f:df:
                    93:18:dc:d7:8a:5c:dc:f4:d5:96:4a:33:a8:32:8b:
                    aa:7d:55:64:3b:56:da:5a:b0:25:f9:b3:9b:42:84:
                    bc:96:b1:2a:a1:89:18:a6:95:c2:f9:48:6a:00:02:
                    71:d2:a8:b7:61:25:31:fd:88:1a:40:f6:3d:ea:03:
                    f1:70:d3:eb:14:5e:f7:f2:4d:6f:41:4b:49:22:59:
                    61:68:6d:60:21:13:c0:16:d1:9e:e3:08:18:46:b4:
                    fb:3a:8b:cb:4e:71:2e:77:c3:b2:c4:21:3c:14:4d:
                    9b:67:95:10:7d:fb:85:fc:cd:e9:a1:ff:5d:f7:27:
                    16:ad:5e:61:2f:b5:1b:4b:4f:72:59:23:40:a9:2c:
                    9a:37:57:c7:bd:aa:b9:53:a7:11:d7:28:06:d4:cd:
                    7e:74:b4:5a:44:2a:bc:61:2c:08:64:34:a8:ff:24:
                    00:bd:d9:40:84:49:0a:27:82:e8:cd:d1:c3:55:d6:
                    f7:3c:66:6b:6b:fa:4b:f7:07:d0:3f:8f:a2:ef:58:
                    d5:26:76:52:32:75:dc:4b:ad:1f:b9:d6:d0:3d:84:
                    8a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2E:C0:07:4E:D6:B9:AE:89:CA:37:3F:E5:A8:93:63:F8:56:C5:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2b7f762-98f6-3db7-bcb4-13edf17ba3d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2d2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:78:f2:77:12:09:d7:2f:62:16:4c:fd:c5:d8:12:ab:ac:a6:
         6d:01:64:9a:6e:d7:3c:a4:a1:75:e3:d3:2e:1a:54:dc:4c:50:
         c9:fc:17:94:f7:d8:0b:80:9b:0d:85:06:3d:ea:76:39:3b:58:
         7e:74:7e:3b:68:0e:67:4a:0b:ac:3e:9e:08:af:99:5f:1c:1e:
         d5:c8:c3:e1:83:ee:ab:c9:f4:e0:79:46:b8:f2:6d:c1:02:49:
         33:12:db:0d:78:fa:e6:19:21:3e:c4:99:a9:77:fb:49:71:7f:
         3d:a2:80:91:8c:a0:3e:77:c9:58:87:f3:76:75:92:3b:6f:36:
         8a:f9:13:dd:d1:91:0e:2d:7d:dc:20:d0:0b:a2:c6:fc:4d:ab:
         6f:46:4e:f2:92:d9:ef:68:e6:30:50:f7:48:af:e8:7a:a0:38:
         4f:74:7e:56:6f:c7:02:7c:11:7e:93:d2:1b:f2:4b:0a:fc:cf:
         4d:ac:80:b8:05:15:6c:69:31:e3:c9:0d:c1:08:c4:28:86:60:
         b5:10:59:d3:ee:26:29:ba:81:94:9e:fa:6e:f9:5c:ca:99:b8:
         05:bd:0a:45:7f:75:6a:90:f1:b6:9c:d7:1b:1f:19:62:34:5b:
         62:63:57:8f:20:5a:93:38:a1:dc:4d:1b:ab:1f:5a:9f:4f:d8:
         e5:51:d2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:38 2024 by rpki-client on console-fra.rpki-client.org