Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b479defc-2f23-3f2c-88e9-a504b21d9d70.roa
File:                     b479defc-2f23-3f2c-88e9-a504b21d9d70.roa (raw, json)
Hash identifier:          WcxthbAUcAEXtY8oMlZy7ucTmTuROjh//cEn5e7yZdI=
Subject key identifier:   53:90:F4:73:C7:96:78:48:E0:D3:2B:AD:D5:3A:A8:6A:AA:5E:F9:69
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285847E208B15B7949613525D46700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b479defc-2f23-3f2c-88e9-a504b21d9d70.roa
Signing time:             Fri 15 Nov 2024 02:30:09 +0000
ROA not before:           Fri 15 Nov 2024 02:30:09 +0000
ROA not after:            Thu 13 Feb 2025 02:30:09 +0000
asID:                     30688
IP address blocks:        2001:470:3c9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e2:08:b1:5b:79:49:61:35:25:d4:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 15 02:30:09 2024 GMT
            Not After : Feb 13 02:30:09 2025 GMT
        Subject: CN=6e0b265c-c5fa-4aee-84d7-419b7a7eee3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:76:09:b8:09:cd:73:60:14:ea:1c:94:43:fe:
                    65:df:07:a9:37:77:d9:ea:11:b9:81:64:d5:26:ca:
                    c3:e4:28:32:dd:68:dc:cb:a1:f4:74:fc:70:29:55:
                    bb:ef:d2:96:cc:4a:bb:87:64:69:9d:e3:60:c9:7e:
                    a6:86:c6:28:10:c6:d1:8e:81:5c:cd:10:cf:7e:8e:
                    ac:68:32:70:9e:ed:03:68:ba:29:f7:52:ce:93:db:
                    a4:55:b1:55:d7:5c:ca:b7:33:04:1d:f9:1c:18:91:
                    71:2b:48:b1:c2:ed:05:bf:27:ed:19:21:52:e8:38:
                    4c:4b:cf:e2:94:64:c4:d4:7d:f2:5f:46:3e:73:f4:
                    c4:04:32:7b:1f:3d:ff:a3:46:f3:66:7c:b8:63:bf:
                    a6:c1:f5:4d:45:3b:0e:d8:b7:4c:84:91:d5:02:52:
                    04:1b:91:0d:8e:cb:aa:a2:2f:05:70:f1:3f:66:c8:
                    60:ac:03:0a:86:3a:88:10:c3:4f:6c:08:c2:dd:18:
                    3e:03:12:ce:5a:32:be:01:fa:75:d1:72:06:3a:ce:
                    12:17:2d:25:0d:44:bf:a5:d2:f4:45:39:c7:c6:1e:
                    3c:a1:0e:7a:44:13:12:68:ac:04:65:5a:ee:7a:45:
                    ab:34:9a:b5:7a:64:c7:60:b7:b8:9b:ce:72:ff:1b:
                    b4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:90:F4:73:C7:96:78:48:E0:D3:2B:AD:D5:3A:A8:6A:AA:5E:F9:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b479defc-2f23-3f2c-88e9-a504b21d9d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3c9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:a0:5a:36:a1:02:c2:ed:04:40:6b:2e:42:1b:c6:c4:9e:fa:
         4b:2b:78:4d:9c:54:22:5e:97:16:e2:ec:26:db:b3:aa:fa:75:
         f2:1c:dc:88:09:25:0b:6e:dd:e6:5a:60:81:2b:61:5d:42:f1:
         7d:75:d5:94:8f:10:38:74:e8:95:ec:15:94:f9:09:79:3a:9a:
         e1:34:ca:92:10:95:cd:63:12:8e:4b:60:9b:72:b9:b6:af:96:
         af:db:02:f0:f3:8a:84:29:d9:f6:b9:75:19:0f:0f:e9:53:5e:
         ad:0c:e8:25:46:59:bf:0f:33:8c:57:ad:e4:65:b9:b1:50:6e:
         38:e5:ea:5b:99:db:1d:a4:0d:35:c9:a8:89:86:a0:f6:4a:a2:
         d1:76:11:ee:a8:f7:a9:0a:69:5b:ab:62:ef:0e:e0:cb:b7:15:
         81:30:b2:ca:c3:06:d4:6e:b9:d1:4d:ae:e4:8f:ea:d1:e4:84:
         6f:a3:ee:b6:32:ef:b5:6a:8a:c9:cd:76:d8:d6:a2:97:87:b5:
         cd:33:f8:af:c5:d7:3a:d7:3a:e3:5d:95:5b:95:c3:a0:42:91:
         65:a3:26:c0:97:b3:38:55:75:3b:d3:41:e8:a0:55:7d:f7:ff:
         66:b2:8b:39:3b:e1:64:2a:b3:59:24:b3:c4:31:aa:5a:38:c9:
         1b:69:bf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:29 2024 by rpki-client on console-ams.rpki-client.org