Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf21b2cb-c47e-3596-a04f-b8cf35a7c6ee.roa
File:                     bf21b2cb-c47e-3596-a04f-b8cf35a7c6ee.roa (raw, json)
Hash identifier:          fkooTtuGotbawSpeb3/QFCHgyt6aLPdptg6Bl9r3tn8=
Subject key identifier:   A5:75:A6:7F:80:8F:B3:A4:3F:92:02:82:15:B6:19:5C:F3:12:52:C1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B41C06956A1ECBB455500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf21b2cb-c47e-3596-a04f-b8cf35a7c6ee.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     395717
IP address blocks:        2001:470:143::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:41:c0:69:56:a1:ec:bb:45:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=4273c52d-85b9-45d1-8f13-957ae702d91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:92:3f:cf:b2:4e:34:a9:f4:ea:ba:d9:4f:
                    e9:0d:c0:84:1a:50:38:49:24:ea:7c:08:6d:6c:97:
                    f3:5a:90:12:64:a8:d1:20:b4:6a:6f:85:c8:4e:15:
                    a2:29:21:21:a0:ba:3f:2d:ae:41:20:1a:a2:a8:ba:
                    9c:38:41:70:36:9a:92:e1:a3:ff:62:1f:77:c5:a9:
                    a7:69:91:d7:7a:c8:ce:88:07:0a:7a:73:78:55:34:
                    51:bd:d2:e9:eb:1c:8a:2b:19:18:3c:c8:31:56:95:
                    54:4c:39:84:0e:c6:bd:83:c2:67:d7:7a:91:8a:8b:
                    6d:31:db:b2:07:d6:19:65:40:d7:7b:7f:3e:e1:4c:
                    eb:b7:ba:c8:4c:25:9f:f8:e1:51:cb:70:f3:2d:d7:
                    30:94:2f:16:38:3d:6a:ea:ca:47:ff:4a:ee:42:db:
                    f4:90:b4:2a:ac:44:e7:75:7e:aa:9f:93:fb:d6:9b:
                    68:61:86:96:74:38:f7:2f:73:fb:e6:00:3b:16:13:
                    e5:10:a8:96:0d:d6:d3:58:ca:07:37:c2:82:55:45:
                    ce:4d:b5:ed:fe:1d:e9:8b:c7:d5:97:bb:25:7d:da:
                    e3:a9:ab:1f:63:8e:a6:28:49:3b:f6:db:2b:2b:c5:
                    59:fe:85:d8:bf:9e:59:3b:e3:73:05:36:02:fb:90:
                    b8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:75:A6:7F:80:8F:B3:A4:3F:92:02:82:15:B6:19:5C:F3:12:52:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf21b2cb-c47e-3596-a04f-b8cf35a7c6ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:143::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:aa:f2:12:25:2d:d2:21:b5:d2:16:94:cf:32:a3:e9:0d:30:
         0d:10:78:c5:88:78:ca:08:d2:4a:52:36:48:fa:3c:8b:3c:8e:
         23:ec:09:34:01:aa:e6:db:96:4e:d8:53:1d:b9:15:46:fb:2b:
         0f:5f:a0:9c:9b:20:21:a1:56:95:0d:58:17:b5:f1:66:df:16:
         ec:a4:cc:c3:05:24:9f:b5:dc:b3:17:c1:8e:a8:74:ea:ac:2f:
         bc:c9:b0:52:b3:cd:54:91:f4:96:73:52:61:77:5f:99:08:d3:
         7c:63:68:7d:1a:e0:1f:2f:16:16:6a:3c:c8:50:4b:43:98:10:
         fb:7d:c3:79:1c:3e:aa:d5:b4:7c:bd:2d:9e:f6:22:7c:3f:d1:
         51:97:c5:db:e4:4b:46:b9:ff:44:17:4c:43:0c:01:87:16:ae:
         11:73:d6:22:e6:fa:e8:a1:2e:da:5e:8d:d6:8f:c4:46:d7:9e:
         17:08:d3:a7:db:65:c1:ae:38:a1:e8:86:ca:4b:a0:1d:e3:53:
         7f:d8:c0:3a:0e:bd:4b:e9:0d:1e:f7:c0:1d:ab:a8:3d:3b:4a:
         61:dc:42:e1:c4:8b:0a:5f:90:fc:e7:6b:d2:d9:13:d6:e2:6d:
         19:dc:cb:c3:b2:58:82:c4:5f:da:97:4c:c5:60:24:0f:85:8b:
         00:be:1b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:39 2024 by rpki-client on console-fra.rpki-client.org