Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b720e6e1-bfd6-3554-9954-1efcf5ba348e.roa
File:                     b720e6e1-bfd6-3554-9954-1efcf5ba348e.roa (raw, json)
Hash identifier:          jksBWpnUD7M0V7HZoDe5NV5g38UCKN2lFxshNYd5QgI=
Subject key identifier:   9F:80:AC:5F:78:42:FC:86:D7:95:DA:51:B9:39:D5:2C:B4:CD:A5:02
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B39F5FDC85459CFC482A4
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b720e6e1-bfd6-3554-9954-1efcf5ba348e.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     33309
IP address blocks:        2001:470:5f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:39:f5:fd:c8:54:59:cf:c4:82:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=dd24d7f6-254f-4f8c-a4fc-d71b121888c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:35:ee:92:6e:e8:d2:85:28:83:e0:5f:73:bc:
                    83:fd:c3:e2:4c:70:2c:95:7d:8f:7c:de:6f:c5:b3:
                    f2:8c:72:2f:58:7e:8f:eb:2f:c5:99:8b:fb:09:f8:
                    04:a9:3e:56:3a:98:63:86:84:2d:a1:64:ed:06:af:
                    35:bc:38:a4:41:4d:df:cd:d4:64:24:a3:3f:6f:9a:
                    9e:dc:a2:b4:97:a1:d4:04:46:3d:d2:24:cd:fe:8c:
                    88:a2:d8:50:5c:98:b4:85:ca:24:cf:c4:a5:4d:1b:
                    88:90:22:fe:bd:5e:95:c6:49:1d:a1:4f:0d:22:c8:
                    89:6e:2c:ef:8e:bc:d0:0a:ab:00:99:a5:f6:5f:a8:
                    00:02:f0:28:b3:ba:f6:3b:08:51:78:85:f5:07:5b:
                    6b:c3:27:cd:13:f6:a4:b1:98:4e:58:c9:28:97:e1:
                    86:5d:37:8c:aa:69:41:f9:6c:81:dc:dd:74:20:b3:
                    68:ce:f2:2b:07:20:72:fd:de:d8:40:a9:c8:85:44:
                    fa:89:4f:1f:a6:62:52:94:af:69:a9:27:6d:72:b1:
                    69:cf:a6:a1:80:24:37:39:9e:7c:e4:4e:68:d3:ea:
                    86:3f:7c:66:5a:1a:d6:9d:c6:f6:96:48:4c:9d:fb:
                    86:68:17:36:29:30:c1:70:91:e3:17:cc:88:69:fa:
                    7c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:80:AC:5F:78:42:FC:86:D7:95:DA:51:B9:39:D5:2C:B4:CD:A5:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b720e6e1-bfd6-3554-9954-1efcf5ba348e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:5f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ba:b4:fb:08:14:58:f0:9e:07:d1:00:37:df:12:46:ed:9a:
         ff:ed:2e:0b:ec:71:3a:e9:be:56:b2:00:85:bc:3d:91:6b:96:
         e3:78:93:6c:39:7e:ff:d7:f6:43:81:5d:d1:6f:34:c7:eb:0b:
         ae:86:84:56:1f:a6:1b:15:c6:79:20:59:08:34:60:b2:cd:88:
         37:e5:dc:24:c8:34:da:a3:59:41:b7:24:9b:52:38:29:80:05:
         4d:8a:c3:70:b9:57:e6:93:a3:19:52:77:d1:3f:87:69:fc:88:
         a4:52:68:11:97:6a:af:04:39:cb:ff:a0:eb:5d:c0:bd:89:2a:
         70:96:53:fd:08:6c:a7:54:78:55:47:c6:69:4c:89:45:47:93:
         ad:91:a6:07:0b:2f:78:f4:41:43:6e:c0:90:58:c0:27:12:22:
         64:b4:61:53:99:0b:48:55:7a:e5:9a:66:8a:82:8e:fb:a2:4d:
         13:f0:77:85:e7:fb:cb:98:cc:5c:14:43:90:b6:34:00:c1:e6:
         b0:1c:1b:c5:dd:23:0a:f8:d5:d3:e6:f6:80:72:cb:14:95:8f:
         24:75:aa:86:d0:71:3a:9c:01:85:a2:eb:3a:89:de:45:3a:f9:
         18:37:1d:87:85:19:5a:8f:6e:b9:ec:45:08:3d:f0:ab:a0:08:
         1f:13:23:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:29 2024 by rpki-client on console-ams.rpki-client.org