Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c92a70f2-2749-36eb-b3fa-ba6d1d993152.roa
File:                     c92a70f2-2749-36eb-b3fa-ba6d1d993152.roa (raw, json)
Hash identifier:          BSfa2I2DjM7Q3Q94MHPwKXS37vqsjsJmuJelV2/+sC8=
Subject key identifier:   F8:8E:CA:F2:08:2A:1E:A6:CB:2B:1E:43:5C:13:DD:5B:28:E5:18:0D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B37B905C3AFAEC76CE480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c92a70f2-2749-36eb-b3fa-ba6d1d993152.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     14979
IP address blocks:        2001:470:13e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:37:b9:05:c3:af:ae:c7:6c:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=594d877e-25f7-4084-8a28-97da32b56440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a3:5d:77:a7:4b:b6:49:ff:c5:1b:17:d2:ba:
                    2e:e8:24:79:44:58:d4:d1:cd:bb:d4:8f:04:91:30:
                    88:74:a1:39:65:ad:39:96:13:fc:83:d3:e9:fd:04:
                    c7:f4:82:eb:72:25:96:d8:96:b8:bc:0c:4b:af:d3:
                    f4:80:f8:8c:7e:eb:33:97:f4:f7:a8:11:a9:03:2d:
                    a1:13:25:ff:5d:30:40:3f:db:fb:8a:1b:cb:4e:4b:
                    b9:f0:c9:d7:36:7e:cd:60:da:b1:02:00:78:d5:8a:
                    f3:83:1d:40:7b:a9:d3:b6:df:8f:02:8f:06:4e:fc:
                    84:c1:b1:ab:5e:84:37:40:e7:03:9a:78:b9:96:b3:
                    f0:1d:11:c9:ad:5a:c2:eb:07:31:88:11:90:dc:c8:
                    83:b5:71:16:6f:14:5c:71:2b:fb:29:bf:cd:82:bc:
                    f4:7e:0c:ec:a6:fd:05:2c:c8:90:8b:9b:04:81:df:
                    1f:e2:83:52:1f:27:1e:34:33:67:31:8d:2e:f9:52:
                    66:57:f4:70:38:33:8f:89:7f:e9:36:cf:38:94:3c:
                    c0:fd:f7:a2:52:5e:96:ef:b1:3e:f1:16:65:0c:14:
                    44:44:13:5c:c2:14:48:dd:9d:df:dc:dd:6d:d6:ed:
                    33:99:56:9a:98:fc:8f:58:d4:1d:fd:21:8f:36:16:
                    93:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8E:CA:F2:08:2A:1E:A6:CB:2B:1E:43:5C:13:DD:5B:28:E5:18:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c92a70f2-2749-36eb-b3fa-ba6d1d993152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:13e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:81:6c:07:21:ef:0f:e7:e1:16:45:69:66:27:2e:83:f7:63:
         12:27:a1:61:75:17:85:e2:57:41:09:5a:1a:db:62:6e:a6:80:
         f5:49:e8:9e:e8:f8:50:cc:1c:f2:9a:c7:ae:20:84:75:39:45:
         8a:ff:d5:83:55:02:ca:90:4e:03:33:1b:8b:c6:80:ff:2a:05:
         d8:9a:6a:bb:d1:ab:4f:27:9e:bd:07:f8:c7:ce:c5:7a:9a:22:
         1b:64:35:63:f1:7b:ce:00:8e:e0:de:18:ad:37:67:fd:79:ef:
         f1:52:ad:9d:d4:8e:74:85:13:1c:bf:00:8b:75:28:c5:32:e9:
         a3:4f:09:ac:9c:bb:7d:61:77:d7:5b:03:c9:77:51:88:88:47:
         ab:38:89:3d:5b:df:60:1d:a2:bc:21:32:94:93:66:31:53:8e:
         6b:83:3f:d7:34:a4:9b:76:a8:d5:bb:d2:75:cf:6f:3d:1d:5f:
         45:96:75:1f:00:9d:e2:0f:bf:97:1d:b3:c9:47:39:02:f5:78:
         53:9d:95:a8:1a:24:e6:55:20:0b:6a:28:18:c4:52:b9:fa:2d:
         45:cc:73:89:19:f9:40:2c:ff:ac:e1:38:61:b2:fd:5e:b0:96:
         a2:0b:22:46:06:b1:33:37:70:77:a8:32:6e:f1:d5:9d:3b:2a:
         c0:07:7d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:39 2024 by rpki-client on console-fra.rpki-client.org