Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b004841b-030b-31b2-93b8-ab555dde3c91.roa
File:                     b004841b-030b-31b2-93b8-ab555dde3c91.roa (raw, json)
Hash identifier:          A8lHR4D+werJyAPBZY+TOz47rcwKdyT1imAimO85wIA=
Subject key identifier:   A7:68:E4:BE:3A:0B:58:3C:7D:A4:2F:8C:8E:98:97:76:E3:F3:20:72
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D012385A71A10A857CEA40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b004841b-030b-31b2-93b8-ab555dde3c91.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     16637
IP address blocks:        2001:470:170::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:12:38:5a:71:a1:0a:85:7c:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=5e714235-bee7-4b9d-89dc-23a1cc8505e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0b:c1:4a:2e:a2:85:31:a6:33:66:40:bc:7b:
                    1b:3a:31:46:2e:d8:d0:58:6c:2f:61:1a:34:e7:9e:
                    e0:28:6a:8a:f7:92:d4:e9:1c:83:34:8d:fc:77:b1:
                    b6:25:c9:5f:94:39:69:4e:58:8d:a3:ca:54:07:48:
                    5b:31:18:f3:35:89:35:94:b3:19:11:4d:72:a1:d1:
                    4f:29:0d:34:a9:d6:ba:a7:ad:59:97:01:ff:ba:f1:
                    e3:1d:ba:ba:61:70:80:2e:36:87:3f:ab:4e:3f:42:
                    1b:1d:31:a4:a0:2e:49:9c:af:0a:f9:43:01:ae:60:
                    29:4c:e9:e2:3f:d1:d4:96:07:b7:8b:48:04:30:99:
                    ec:84:09:e7:ce:cd:35:bb:98:55:51:1f:b7:a3:1c:
                    6a:c1:b8:5c:55:89:2f:b4:41:85:2b:75:d3:25:d8:
                    2d:c4:4d:53:35:00:04:62:26:1a:be:eb:f3:04:02:
                    0d:88:0d:48:d8:7d:57:19:ea:29:a6:c5:e3:25:19:
                    86:0d:e2:03:8a:3a:ad:79:24:47:ed:d0:c1:ae:43:
                    5c:b9:79:a9:9a:1b:46:04:00:56:86:ec:20:2d:86:
                    90:71:93:6c:e8:67:b7:32:7a:00:cb:5d:14:d0:91:
                    20:85:d5:55:aa:45:82:3b:90:14:ff:5d:cc:b9:10:
                    d5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:68:E4:BE:3A:0B:58:3C:7D:A4:2F:8C:8E:98:97:76:E3:F3:20:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b004841b-030b-31b2-93b8-ab555dde3c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:170::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:8e:7a:89:30:b4:a4:cf:32:8d:c8:91:2c:c4:35:38:86:09:
         eb:1f:e8:65:d5:16:7b:f9:71:0f:2b:ce:fb:bf:a4:65:06:40:
         e0:d0:13:b8:94:b5:92:bd:64:db:fe:49:20:5a:32:b8:15:12:
         f4:d5:3f:2f:64:59:39:75:ed:75:09:53:d8:b5:4d:44:c6:44:
         b4:6a:68:8b:5c:83:ad:1c:1b:9c:d0:d8:fb:f2:86:72:e2:a2:
         3b:95:75:dc:d7:3b:19:a9:38:99:21:7f:67:41:a3:84:6e:13:
         b4:60:28:72:a7:a8:bd:5c:f2:25:d3:97:b8:f5:38:27:cc:8b:
         bd:2c:7c:2b:63:e8:77:dd:ba:1d:d2:c4:72:37:79:1b:e3:c0:
         e2:90:a1:7b:ba:29:9d:31:7a:91:eb:bf:e5:4c:80:35:6a:a2:
         16:3e:b4:07:84:c3:db:d9:f1:0f:63:83:d1:15:f6:20:da:cc:
         cc:6f:a7:5a:b5:36:9a:93:da:73:2b:c3:79:b1:37:b6:9c:f6:
         2b:d9:17:a6:af:08:53:35:17:46:3d:94:01:0b:87:7b:cf:c3:
         e1:3b:a4:58:07:c1:84:e8:46:17:ed:bb:9c:24:f7:b6:5d:fe:
         74:3b:89:d8:3a:9d:e5:1d:4a:cd:05:ed:2a:c3:cd:7f:9c:a1:
         41:3f:e5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 7 11:32:56 2025 by rpki-client