Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb7f280e-9a05-381c-9741-2dbcf2b2155d.roa
File:                     bb7f280e-9a05-381c-9741-2dbcf2b2155d.roa (raw, json)
Hash identifier:          tCgZI7xL+l1AW8XxoqJWWukq89UVPPMGoKhIKgWRJBc=
Subject key identifier:   D7:AD:9D:A1:2B:93:C4:BE:B2:F8:C0:1F:F2:11:4A:99:64:27:2C:D7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285847DF3E09C217E9279B9035F580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb7f280e-9a05-381c-9741-2dbcf2b2155d.roa
Signing time:             Thu 14 Nov 2024 02:30:13 +0000
ROA not before:           Thu 14 Nov 2024 02:30:13 +0000
ROA not after:            Wed 12 Feb 2025 02:30:13 +0000
asID:                     27257
IP address blocks:        2001:470:3c6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:3e:09:c2:17:e9:27:9b:90:35:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 14 02:30:13 2024 GMT
            Not After : Feb 12 02:30:13 2025 GMT
        Subject: CN=b9622132-744c-44b3-b024-3e5e0f13237d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:94:06:eb:89:fc:b7:bd:b3:13:81:72:2f:15:
                    99:d9:1f:be:f4:d8:20:c2:ef:47:90:ed:61:7d:f1:
                    eb:b1:28:65:54:2b:fa:df:4c:47:c2:cf:96:c3:86:
                    d7:2a:bb:5d:24:27:48:af:52:e4:7c:65:a5:59:2e:
                    6f:a6:dd:69:21:bb:d7:8c:18:34:d7:c1:8e:a5:c9:
                    bd:13:20:dd:c1:49:67:37:99:6e:f5:b4:35:82:b9:
                    e9:bb:c5:9f:5e:f0:34:a8:eb:8d:05:4c:da:4f:40:
                    45:67:31:a6:46:04:79:fa:0d:e2:14:74:8d:a3:ac:
                    cd:02:e4:aa:e6:a8:53:91:ca:db:14:b4:b5:ab:27:
                    fe:3f:7a:3c:3f:b6:f7:d0:6f:05:c8:5f:a0:d9:18:
                    ce:ab:86:28:2f:7c:e1:5c:ef:e5:b5:23:71:1d:4e:
                    00:5b:2a:b2:f8:fb:33:cb:7b:6f:0d:e0:35:11:4e:
                    87:0d:04:88:30:3e:3f:27:03:11:c2:d5:7c:0f:91:
                    c0:68:6d:66:b8:a9:66:0d:3a:31:e5:8f:bd:81:ca:
                    24:f2:74:9d:73:62:23:8d:75:46:f3:6d:f9:e8:10:
                    12:11:1d:f5:85:4c:b0:12:f5:8c:bc:ae:6e:0c:ea:
                    a1:ed:32:92:33:36:ee:7b:33:98:8b:79:9c:6d:1a:
                    ba:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AD:9D:A1:2B:93:C4:BE:B2:F8:C0:1F:F2:11:4A:99:64:27:2C:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb7f280e-9a05-381c-9741-2dbcf2b2155d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3c6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d0:79:04:2e:30:5c:b1:a4:c1:dd:90:df:8b:b1:5f:03:3f:
         04:71:bb:1d:de:7b:af:52:58:06:84:ab:9b:af:b0:fd:1f:86:
         b7:31:a6:d7:4b:69:ab:ba:52:8d:fa:a9:28:72:07:73:0f:8f:
         a9:86:1b:27:5c:58:b1:2d:0d:f8:07:17:8d:41:21:7e:f1:8c:
         c0:09:c2:58:86:62:53:48:61:aa:82:33:e2:33:f8:83:b0:7a:
         cc:10:7f:23:fb:bb:00:42:3b:f8:04:99:0f:ba:6a:1c:5e:14:
         e9:1a:40:06:54:50:a1:a9:99:26:02:18:b5:5c:4d:ff:8a:64:
         01:11:d1:ac:63:f2:82:d3:42:ee:a7:be:2e:3f:a1:52:8b:0f:
         80:38:8c:26:e0:e6:d1:1d:60:12:bd:07:ca:1d:a1:c4:16:49:
         0b:ec:12:d9:65:d8:5c:ef:76:56:16:da:ea:54:15:6c:71:be:
         97:b4:81:37:97:9f:2a:67:52:3e:69:ee:98:f3:f0:ab:ba:82:
         86:5e:7f:41:22:06:87:ef:db:e4:26:62:5b:0c:78:90:81:b2:
         32:86:4b:33:bd:5d:83:4f:4a:67:91:9e:eb:cd:f4:04:6c:4a:
         ac:69:49:de:d6:a3:f8:3f:36:d5:09:86:6e:0f:24:86:47:01:
         d5:f2:58:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:39 2024 by rpki-client on console-fra.rpki-client.org