Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aba21f63-e795-30fb-915b-8287023fddb0.roa
File:                     aba21f63-e795-30fb-915b-8287023fddb0.roa (raw, json)
Hash identifier:          PSPn5BXv2wI8KwFo0cveNYldFFt1+hBG3VWJyG6OqLw=
Subject key identifier:   40:B7:49:96:DA:53:53:1D:A1:88:45:9A:AD:27:71:81:61:FE:16:68
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285847C4A9F44A18AF5559DF598700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aba21f63-e795-30fb-915b-8287023fddb0.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     30383
IP address blocks:        2001:470:369::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:a9:f4:4a:18:af:55:59:df:59:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=d1cc4908-50c2-4bb8-ae22-773f1680133b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:16:8f:2e:61:c1:7d:ba:4d:7b:34:7d:a7:3e:
                    e3:ef:18:a3:90:93:7d:48:6a:f6:7f:bb:ad:6f:4c:
                    ca:8b:d9:af:ea:7f:fb:10:41:bf:22:c1:cd:ba:8b:
                    1c:62:4f:17:f4:2a:2a:bb:7e:10:56:b6:f2:60:24:
                    46:1b:8c:cb:97:91:17:a9:53:35:ea:16:3c:0e:e8:
                    dc:b4:7d:57:b9:f1:1a:fb:41:9f:89:75:a7:5a:b2:
                    7f:15:c1:38:70:88:03:c8:d1:a7:81:4f:d1:55:e0:
                    ca:57:bb:d1:90:b8:48:3a:4e:28:25:a7:b3:99:ba:
                    81:90:89:94:b1:35:2c:c9:d4:5d:88:4b:ef:39:84:
                    f1:0b:11:dd:df:06:60:fa:7f:8d:ee:03:74:6b:56:
                    a7:b1:9b:80:42:f5:ae:c1:e9:f9:09:f9:76:f9:84:
                    e3:15:9c:72:00:08:76:48:03:18:63:9d:32:35:85:
                    15:f4:58:89:54:ca:2e:b7:bd:ff:46:d4:4a:aa:b8:
                    30:1f:8e:59:29:1f:66:fe:18:37:72:d5:5c:73:f0:
                    5c:8f:2e:19:7a:10:0f:08:b5:fe:be:64:0a:87:db:
                    30:56:6b:71:2b:bd:0c:ac:44:8a:69:b2:b4:7a:5b:
                    be:48:64:df:f7:71:1b:55:2e:11:be:64:92:88:e4:
                    d5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B7:49:96:DA:53:53:1D:A1:88:45:9A:AD:27:71:81:61:FE:16:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aba21f63-e795-30fb-915b-8287023fddb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:369::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:6e:40:94:c5:92:c8:10:d3:d0:56:aa:5b:e6:6f:f8:2d:51:
         0b:78:bb:12:86:43:d3:9d:90:92:85:14:fe:09:86:84:80:5c:
         8b:90:f1:30:df:e7:9b:75:b9:a7:89:f6:b1:8a:59:20:1b:0d:
         4f:f5:1e:1d:50:d4:64:81:6d:b5:f4:5b:3c:c8:2f:11:f6:dc:
         dc:ec:a5:6e:f6:fb:15:41:e5:88:d0:6e:ea:3b:fc:92:6c:03:
         2c:26:f8:ce:1b:3c:96:52:a7:67:f6:34:70:13:1d:7b:13:5b:
         44:7b:a4:c1:39:e2:54:27:f1:89:c1:3e:af:9d:ba:46:4f:19:
         35:f7:55:99:3d:19:46:f2:fe:48:31:26:5d:5a:cd:bc:a9:0f:
         ab:31:63:5d:f4:da:c8:0e:00:da:2c:a6:a5:8c:cb:d6:b5:42:
         81:b0:24:f5:7c:8d:25:64:d4:65:1a:18:47:ed:68:7a:c5:76:
         6d:27:b7:6d:83:a3:5a:3b:e6:35:53:8b:f8:ee:f3:50:ce:67:
         a0:60:9e:4b:1b:b5:d9:9c:e3:e3:1e:15:ce:f5:ec:b3:3f:f9:
         bf:d8:a6:37:a4:5a:7c:03:f6:62:cf:0c:20:a9:5e:7f:7b:80:
         96:17:47:68:47:42:86:ed:40:d1:44:74:bf:dd:6e:79:94:26:
         4d:89:17:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:38 2024 by rpki-client on console-fra.rpki-client.org