Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b16c3b2d-1356-3441-875c-c10405f00fa6.roa
File:                     b16c3b2d-1356-3441-875c-c10405f00fa6.roa (raw, json)
Hash identifier:          e672tfwt0HdLslLGChKxuNiBGSG/zjxu1xP8JSFxCYw=
Subject key identifier:   74:07:D9:5B:C1:F5:60:64:30:15:67:B1:0A:EF:A8:07:1B:C9:84:B6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B7830BF911B560A008000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b16c3b2d-1356-3441-875c-c10405f00fa6.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     10947
IP address blocks:        2001:470:318::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:78:30:bf:91:1b:56:0a:00:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=ed834a3a-f45c-4905-a535-fb9a9539bddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:33:85:ec:77:39:c0:d1:4c:ed:84:86:55:
                    14:b3:20:ff:76:86:53:75:93:ba:02:98:ff:4c:3a:
                    85:df:e2:4f:c6:14:52:0c:28:47:d2:95:59:c3:4a:
                    7a:ac:46:64:a7:91:c8:c2:c5:b7:f0:3b:48:6c:66:
                    05:c3:41:45:84:04:10:18:3c:16:15:5b:71:68:da:
                    04:0b:ce:6e:09:21:3f:7b:9f:4b:49:c4:59:fa:1e:
                    b7:b5:28:6a:66:12:43:c1:75:cf:e9:2e:97:d9:66:
                    21:ec:df:e0:28:94:35:2f:85:67:cc:0b:1a:3d:19:
                    2e:16:da:87:c6:e0:71:0d:ae:cc:60:53:e0:0d:a8:
                    d6:e6:49:06:a9:04:75:64:72:e0:77:bc:35:5e:bc:
                    42:b1:07:1a:01:66:92:85:17:da:9a:a4:85:ea:97:
                    cb:c3:21:f0:b0:98:12:56:97:9a:38:63:62:9e:33:
                    34:fe:69:9b:96:ba:40:03:ca:de:65:a5:cc:32:2b:
                    5e:43:11:30:bc:67:24:6f:53:52:7b:ee:03:4a:67:
                    c1:a8:2a:a7:c9:cc:26:30:ee:2b:15:ee:e1:6f:aa:
                    98:34:a0:f8:60:63:43:38:c0:6f:01:e3:6a:45:99:
                    47:e8:fc:cd:57:50:3d:71:a5:c5:25:53:79:1f:0d:
                    17:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:07:D9:5B:C1:F5:60:64:30:15:67:B1:0A:EF:A8:07:1B:C9:84:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b16c3b2d-1356-3441-875c-c10405f00fa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:318::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:52:c3:11:7e:77:95:23:2c:ef:36:da:d2:82:a6:97:ec:48:
         bc:e1:fd:3c:e3:17:74:9e:3e:f7:82:cd:0c:d8:67:3a:57:6a:
         74:6c:52:f8:b7:12:d6:48:f9:89:2e:34:ef:c3:b7:d7:a5:11:
         d7:18:0e:06:f4:38:60:c8:39:d4:32:7b:93:55:e4:bc:5d:de:
         e5:33:66:da:c8:64:86:b1:cd:90:52:dc:80:57:df:06:60:35:
         c8:01:e9:f3:bc:2e:b8:64:87:88:59:ba:b0:df:df:77:be:ad:
         83:28:55:8f:83:f4:33:38:31:08:22:6c:f4:46:3e:f1:75:78:
         c9:e3:7c:00:2a:28:84:72:af:43:2f:36:88:78:0b:63:09:e0:
         ed:21:5c:78:4c:4d:ce:fa:94:de:36:ab:10:85:8d:21:b5:44:
         c5:bf:7c:d1:39:06:4e:c5:bf:bb:e0:61:2e:57:f2:7f:0c:fa:
         fa:93:c9:df:90:4c:ff:33:dc:4d:05:52:bd:1f:6d:7e:37:fa:
         52:b6:1b:89:01:6e:9f:77:7a:6d:85:fc:c3:de:80:bf:4f:65:
         e1:a1:c2:c5:35:d1:3a:eb:bf:fd:be:f5:61:7d:78:3f:90:25:
         1d:bc:59:a5:b3:6b:de:3e:d7:eb:73:e3:f2:3b:59:fa:56:8d:
         ba:4b:2c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:29 2024 by rpki-client on console-ams.rpki-client.org