Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/baba8a46-5e4b-3132-a577-25dfcc514262.roa
File:                     baba8a46-5e4b-3132-a577-25dfcc514262.roa (raw, json)
Hash identifier:          Qurb2icSUS8x1Ts92ukk2d/Z3mI2jLnge1M9XlmISZk=
Subject key identifier:   8E:88:BD:6B:A6:D0:F3:D8:8E:54:0D:2A:97:EC:31:D1:B5:4A:A0:89
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B69E730A727BADA981F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/baba8a46-5e4b-3132-a577-25dfcc514262.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     147024
IP address blocks:        2001:470:21d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:69:e7:30:a7:27:ba:da:98:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=f627cc5f-b6de-4322-bde6-f4048cbd7058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:90:af:92:6f:ed:1a:d8:67:40:7b:ba:5a:f7:
                    50:47:9b:df:c7:a4:df:f9:67:00:df:cd:45:7d:d2:
                    68:d6:68:ed:83:9f:b5:c8:de:7c:f7:38:3b:4a:64:
                    7d:2c:52:e8:82:43:d1:48:7a:db:b2:87:90:77:69:
                    06:98:af:0f:1d:40:c5:91:d2:a1:20:26:52:d5:0e:
                    8c:b3:0b:97:fe:b0:9d:71:e7:c3:1b:ab:ec:79:24:
                    09:62:a2:94:a1:51:ef:96:14:dc:c4:a7:7b:38:05:
                    b6:51:9b:c0:63:cc:fb:65:3b:f4:b8:eb:43:a5:6f:
                    15:5f:6b:13:3e:6b:88:ae:03:9b:5b:37:50:d2:f0:
                    1c:81:2f:49:8e:d6:c4:71:5b:19:71:c6:7f:b8:e5:
                    11:75:35:c5:ef:d7:d2:30:70:ff:a0:8b:ff:45:c1:
                    5c:97:11:36:1a:42:b5:42:5f:19:2d:6a:8e:9e:06:
                    b4:24:6f:8a:19:8a:38:94:55:48:a0:ba:f2:7f:de:
                    2a:cd:c8:4b:2d:39:af:fc:c3:a8:aa:b3:09:fa:78:
                    dd:c6:9f:2f:75:07:2f:8f:01:af:d9:99:60:67:e5:
                    9c:ab:69:08:da:c2:8e:f5:9c:7e:a6:4d:7b:30:6b:
                    28:55:a8:31:4c:11:cc:3f:35:26:0e:bc:52:13:db:
                    a1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:88:BD:6B:A6:D0:F3:D8:8E:54:0D:2A:97:EC:31:D1:B5:4A:A0:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/baba8a46-5e4b-3132-a577-25dfcc514262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:21d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:57:55:cf:1c:6a:e6:de:02:d1:44:08:c1:5b:33:1b:ba:7d:
         00:85:2d:10:ee:c6:d2:20:87:cc:b2:05:a6:cc:54:1e:69:a0:
         78:eb:72:4c:56:c7:7b:b1:b6:53:dd:33:3c:a9:6c:a6:6a:2e:
         15:25:51:23:63:d4:56:ac:f0:41:6e:a3:f3:d7:13:5e:5d:80:
         c3:25:3c:9c:fe:3a:3a:9d:56:bd:d2:4e:f0:7b:82:9d:da:9e:
         02:f9:3e:9d:78:fd:f1:95:0b:47:8d:97:3c:11:36:5b:a7:11:
         4c:3f:99:b4:e8:46:8b:76:5a:b1:01:a2:03:2d:9e:45:cd:ef:
         cd:ad:58:f3:eb:5c:b5:e7:c4:79:44:a0:2d:58:67:a7:b4:f7:
         38:70:52:4b:d6:d5:bf:a8:82:1e:e8:8a:93:ab:fa:85:f8:d6:
         80:e2:54:f5:fc:9c:77:e5:ea:2a:10:78:8e:fb:d1:d1:5c:2b:
         a7:11:c7:4d:39:0a:ef:51:ed:fe:23:d6:f5:09:34:23:eb:69:
         87:f4:e0:0b:46:10:71:12:47:13:57:61:8d:93:0a:ca:fe:a1:
         11:7e:b1:34:43:85:54:4b:47:74:34:9f:1d:c2:53:bb:d2:bf:
         46:81:e2:7f:59:2a:84:4e:0e:ca:24:ca:4c:84:62:b8:2b:b7:
         9b:98:62:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:39 2024 by rpki-client on console-fra.rpki-client.org