Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a91ca0b2-1292-32f5-b167-dc9a75614b82.roa
File:                     a91ca0b2-1292-32f5-b167-dc9a75614b82.roa (raw, json)
Hash identifier:          i0wM23q/2MBjk8aTGX11tmgGk6xcfzq94jMmPGjWI64=
Subject key identifier:   F8:58:A3:8D:51:A9:AD:E3:E3:DB:89:65:A1:09:E2:5B:62:0E:6B:94
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D005A448D48D74A0DF1880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a91ca0b2-1292-32f5-b167-dc9a75614b82.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     55184
IP address blocks:        2001:470:fa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:05:a4:48:d4:8d:74:a0:df:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=d0cec42a-321e-4036-9b04-dbf797fde025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:eb:3c:56:37:f1:3a:09:d1:54:94:47:5a:e3:
                    23:d7:3d:80:ce:96:4e:13:cf:e4:4b:c4:e2:49:33:
                    48:60:07:d4:7a:04:f2:8f:79:d9:80:59:42:bf:9e:
                    6c:89:2c:97:92:a7:8d:d4:b7:2b:75:0f:d6:83:6d:
                    ad:f7:43:5f:2b:93:c2:06:9e:72:39:dc:55:54:73:
                    ed:05:e5:95:a8:4f:36:24:55:a7:93:d2:58:7b:e7:
                    70:d2:64:43:83:dd:61:af:2e:66:bf:e7:c8:f6:9f:
                    90:fc:65:e3:98:c8:2c:f2:e4:ff:a9:a0:27:78:25:
                    83:90:2e:70:80:c9:96:b4:ba:e2:68:ce:8a:96:35:
                    65:2b:fb:74:77:56:b5:a2:cc:e0:69:1e:7f:9c:22:
                    41:1d:4c:7f:56:48:82:c1:f0:e0:0b:5a:51:5a:ec:
                    74:51:7b:56:e6:29:de:b5:54:30:de:73:bc:0f:81:
                    ba:fe:d6:32:06:a2:2b:47:43:5c:28:02:91:8e:d0:
                    99:b2:58:08:86:22:51:a5:15:9a:fe:30:76:b6:48:
                    8a:1d:26:a4:6e:13:84:54:ae:1d:05:98:04:96:37:
                    a9:92:3c:1b:ed:04:53:a6:a1:13:c6:f3:ca:d3:53:
                    15:87:2e:b0:04:6f:c8:15:56:62:76:c7:6d:f7:dc:
                    b6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:58:A3:8D:51:A9:AD:E3:E3:DB:89:65:A1:09:E2:5B:62:0E:6B:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a91ca0b2-1292-32f5-b167-dc9a75614b82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:fa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:6a:e3:25:d0:b5:1c:7c:1f:1e:74:91:8c:39:c9:f1:b4:2c:
         9f:da:71:1f:e8:90:50:6b:46:84:4c:7b:bd:7b:ef:e0:4c:29:
         92:45:90:32:10:6e:1f:c3:fa:30:28:6b:7f:00:b7:76:0c:53:
         e3:de:2d:b7:c5:18:55:e3:84:a4:22:c6:9c:ee:63:16:15:d6:
         f3:fa:01:1e:e5:bf:a7:f5:88:14:20:72:1e:39:c0:72:49:b1:
         45:0a:64:28:c9:04:e8:78:4e:00:e9:9e:ea:06:62:98:eb:33:
         e6:f7:ba:10:d4:92:0f:31:c3:06:fc:12:98:f4:f2:95:78:b4:
         f4:63:9c:cb:10:24:0e:99:28:93:0f:14:88:a0:09:0b:d0:82:
         fb:7f:4d:1e:93:bb:da:e1:76:ad:e1:44:d9:d3:bd:a1:41:f0:
         0f:62:d0:09:75:22:88:a2:db:93:37:dd:9a:5d:4b:e7:d7:0d:
         4d:e6:87:0f:2b:3b:d4:94:b4:ad:bf:7e:7e:cd:27:24:23:5d:
         ce:4d:49:ca:69:db:f3:b4:a5:05:95:e3:7d:7b:bd:b5:65:75:
         32:55:67:80:0c:33:26:c7:2e:13:07:c0:bd:44:32:03:bc:d7:
         07:b1:a4:c2:5e:8f:42:ac:03:f0:8c:7d:ea:5b:7f:51:97:1d:
         0d:9d:63:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 7 10:57:12 2025 by rpki-client