Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bbf3ebf1-63de-3a9f-90b1-85359b49ae71.roa
File:                     bbf3ebf1-63de-3a9f-90b1-85359b49ae71.roa (raw, json)
Hash identifier:          SQY4z4T1Fgs2e8KpAqn9yxgwIjInGD1ADksmtyQEZGI=
Subject key identifier:   EC:4F:BE:81:66:97:54:A3:6A:D2:F3:27:EA:5B:58:20:AE:B0:FC:B6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B68CB1FE307F340B9AC40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bbf3ebf1-63de-3a9f-90b1-85359b49ae71.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     136897
IP address blocks:        2001:470:255::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:68:cb:1f:e3:07:f3:40:b9:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=633a4ba3-ce89-4d9e-9b6d-3f4455f0be37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ca:12:c7:01:2a:ec:ca:60:59:50:37:eb:a8:
                    93:71:69:f0:ee:88:1d:ee:aa:06:fc:40:b0:d9:5b:
                    d1:2f:45:85:43:ee:ae:6c:a6:aa:fa:45:cf:13:87:
                    6c:de:42:9c:24:e9:57:cf:6d:d1:fd:32:89:85:f3:
                    79:72:95:2f:bc:d8:05:df:02:c7:7e:ed:8d:1d:27:
                    8c:9c:5c:f5:5a:1a:5a:b0:83:0f:ec:9e:62:d7:87:
                    35:7d:d7:b7:da:bf:4c:0d:9d:2e:50:03:7c:32:0e:
                    b7:63:5b:11:b9:a9:3b:9d:90:12:25:bd:88:dd:38:
                    a3:e2:e6:ef:47:c6:9c:c7:60:54:50:75:ec:2f:6a:
                    7f:b7:12:33:de:5a:03:ed:c0:fb:95:71:cc:ae:48:
                    f1:7c:ef:f5:77:f4:17:e0:a2:ac:ee:83:ba:74:81:
                    8a:e9:63:47:09:22:64:e7:50:bc:54:02:05:4d:84:
                    1d:dd:0f:e1:a8:63:19:46:61:56:b8:b6:ef:eb:24:
                    ae:c5:0c:bd:9f:00:b8:7d:dc:d1:68:cd:b2:e3:16:
                    22:9b:91:c8:39:ef:e9:0f:d9:8f:2e:f7:4b:47:2d:
                    01:52:ad:71:63:1b:0d:28:54:04:3a:6a:0b:47:99:
                    19:51:91:7d:7b:e1:83:f5:f9:2c:9d:5f:c0:85:94:
                    8a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4F:BE:81:66:97:54:A3:6A:D2:F3:27:EA:5B:58:20:AE:B0:FC:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bbf3ebf1-63de-3a9f-90b1-85359b49ae71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:255::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:7f:e4:b4:cb:75:96:bc:da:89:b6:cb:c1:3b:e9:28:d5:3e:
         a5:86:ef:94:6c:a5:e5:2e:72:58:9e:6b:39:c7:f1:d0:0d:16:
         35:45:5d:cf:4d:8c:cc:33:c6:07:a7:a9:ea:15:09:c9:48:21:
         12:03:c4:f9:44:77:31:93:87:50:02:e5:75:92:19:1a:21:11:
         b7:fb:a3:b8:33:d6:1b:da:79:78:39:1c:3c:90:48:e5:e5:f5:
         27:e4:a7:43:5f:5e:90:cd:f0:2c:ec:12:63:9f:f1:b3:68:9c:
         7c:c4:72:6b:6c:e4:4d:4d:67:f6:bb:2d:0a:d3:6f:06:f5:17:
         ae:e9:d5:33:7f:ea:25:24:3b:d0:43:77:e2:6d:3b:bf:de:77:
         7c:83:70:fd:99:af:c5:a4:3a:7d:02:b2:a9:01:4c:43:86:23:
         7d:88:b4:2e:31:c5:3d:6e:6e:a5:70:c6:44:eb:64:c4:25:2f:
         10:ab:03:c6:70:4a:a9:89:d6:3a:e0:ea:92:36:e2:e0:af:99:
         e4:13:62:5f:6f:43:98:ed:13:5e:d2:df:6e:fe:3a:bc:d6:a1:
         05:35:de:6f:5e:19:86:fb:e6:24:b6:2e:43:82:31:59:6f:2b:
         fd:95:c0:db:78:ea:d3:6b:ad:96:2d:30:7f:49:e9:09:04:c0:
         3a:6e:6d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:30 2024 by rpki-client on console-ams.rpki-client.org