Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae8b4cde-5136-3123-adcf-b51f1392d563.roa
File:                     ae8b4cde-5136-3123-adcf-b51f1392d563.roa (raw, json)
Hash identifier:          XEjrB8B5ChD9cmSMMrEt26rDTKnIml3ljES8xoRrTn0=
Subject key identifier:   66:6A:E6:7B:17:A1:62:7E:4D:5A:E2:3E:05:99:89:8D:2E:75:FE:90
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B65CA68E216C36F8F6600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae8b4cde-5136-3123-adcf-b51f1392d563.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     61356
IP address blocks:        2001:470:23d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:65:ca:68:e2:16:c3:6f:8f:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=044c3d24-770f-48b4-bef6-2d07e1bd1536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:37:c5:a3:84:88:24:5e:ff:7b:c2:4a:a2:dc:
                    ed:eb:67:b6:24:cb:17:c7:7e:d5:f1:d5:15:68:d8:
                    d3:bc:a2:0c:57:6e:6c:f7:31:ff:09:d7:9e:35:df:
                    dc:c2:fe:f2:ef:2b:b7:01:8b:99:7f:04:24:91:00:
                    a2:9e:77:71:04:63:27:04:12:22:ac:4c:4c:a5:b6:
                    b8:96:9e:db:97:a5:6a:30:0e:8d:7b:fb:cb:c7:79:
                    34:b6:4c:dc:31:fc:a2:3b:66:0a:e9:53:9e:3f:4e:
                    d0:57:c6:a2:35:af:01:11:ce:08:61:cd:57:93:34:
                    df:a1:ad:46:d9:9c:86:6c:5b:3e:33:93:4d:fd:65:
                    63:e0:21:19:e1:52:fd:db:83:3d:0b:ba:5f:0b:2c:
                    b8:99:9d:08:3a:76:c4:c6:dd:8d:22:31:7c:f1:9e:
                    5a:64:6c:0d:c8:59:b2:64:11:aa:18:39:69:bf:84:
                    55:8f:da:b1:7e:bc:e9:b3:73:fb:e0:d0:14:b3:58:
                    a0:1e:91:96:bc:9b:85:9f:eb:2c:d0:ff:3f:fe:71:
                    30:c6:08:51:84:48:a9:1c:8a:3a:f2:1d:90:7d:5f:
                    d0:4a:e7:19:44:38:f0:ce:11:35:e6:a5:70:28:3f:
                    8b:b7:0d:e6:95:42:d0:03:6f:4e:47:92:2c:4b:5c:
                    e4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6A:E6:7B:17:A1:62:7E:4D:5A:E2:3E:05:99:89:8D:2E:75:FE:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae8b4cde-5136-3123-adcf-b51f1392d563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:dc:6b:94:25:e0:0a:de:cf:2e:07:bb:5b:28:2a:60:c2:ff:
         d4:ad:85:e1:23:cd:4e:68:35:d3:ba:20:ad:5b:6c:5a:9c:44:
         cd:7c:53:67:86:3f:8f:a4:5f:5a:de:1c:9b:12:5b:2b:b2:91:
         94:de:da:a4:cb:22:b1:ce:45:d8:13:f1:f6:ae:32:a9:c8:01:
         48:39:4c:fe:18:37:23:f5:23:07:88:b1:55:7f:de:1a:69:53:
         5d:d1:db:59:95:21:46:b8:d5:d5:5f:dd:71:12:76:57:9e:70:
         7e:20:a4:6f:6f:48:0f:98:3f:da:24:97:99:6d:8d:a8:a9:b8:
         76:8a:94:78:43:40:bf:12:db:52:fa:0f:c9:4d:4c:cd:cb:35:
         c5:dc:84:d0:ac:ba:84:b5:58:d7:67:85:b9:e7:83:ba:42:4b:
         5e:4b:6c:9c:40:1f:3f:28:cb:f0:37:3f:d8:e6:f2:c6:57:36:
         a8:3f:77:85:12:79:88:cb:15:9d:8b:20:48:fb:ae:e8:d3:c4:
         95:bc:eb:11:3d:d9:70:37:b4:bf:78:c6:70:d6:86:30:e3:89:
         df:72:0e:66:33:ec:34:f2:3d:61:2a:8a:6d:32:32:6b:80:46:
         4e:47:7e:0b:87:35:1d:be:11:c9:3c:dc:29:05:59:3d:4d:83:
         45:e5:2a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:38 2024 by rpki-client on console-fra.rpki-client.org