Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0bc17c5-ba50-3779-a0dd-1b8f6daa4022.roa
File:                     d0bc17c5-ba50-3779-a0dd-1b8f6daa4022.roa (raw, json)
Hash identifier:          t1tQizBds6d+C/mMHJL8CKUzbr43mi/8o+R2k5soTeQ=
Subject key identifier:   12:39:51:DB:D5:99:B5:65:77:79:08:57:9F:46:73:AB:00:F6:37:05
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584742C9E9377611F066E1805000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0bc17c5-ba50-3779-a0dd-1b8f6daa4022.roa
Signing time:             Thu 19 Sep 2024 01:30:08 +0000
ROA not before:           Thu 19 Sep 2024 01:30:08 +0000
ROA not after:            Wed 18 Dec 2024 02:30:08 +0000
asID:                     215546
IP address blocks:        2001:470:387::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:c9:e9:37:76:11:f0:66:e1:80:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 19 01:30:08 2024 GMT
            Not After : Dec 18 02:30:08 2024 GMT
        Subject: CN=455e4b6b-a149-4afc-a007-4fefb8746ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2b:8c:03:e4:53:71:31:85:57:24:d1:3c:48:
                    63:39:05:53:4c:85:65:5d:ca:c4:07:6e:19:3a:b6:
                    cb:78:83:93:08:41:03:eb:e4:8a:a3:35:23:93:42:
                    13:88:2a:b3:ff:fd:6b:ac:9b:fe:0a:d4:07:30:78:
                    fd:9d:e6:cf:ef:be:88:2e:e1:14:23:ba:79:93:b6:
                    d9:54:22:2b:95:0a:68:0e:55:3a:b2:cd:29:35:e4:
                    a9:c3:dd:c2:99:5e:0d:c2:5f:fe:7a:33:4d:32:a4:
                    55:17:55:c4:4a:11:15:dd:ad:97:a9:1a:3a:1f:2e:
                    6b:9b:15:ff:c3:7d:24:a2:8b:34:73:81:be:c2:39:
                    f4:80:47:62:cf:85:a4:1b:78:d0:27:65:b3:2f:60:
                    a2:c0:e4:64:49:97:02:b1:d7:f5:0a:a0:a6:ac:e6:
                    73:60:48:1b:5e:78:69:fd:eb:46:2e:4d:61:f0:09:
                    58:2d:dd:a2:c2:5c:61:91:99:d5:79:fd:f0:42:1b:
                    da:51:3c:4b:02:e0:33:a1:af:14:c6:fe:c2:d9:49:
                    44:36:4d:91:79:be:5c:33:e7:20:13:82:96:ed:d5:
                    9a:b1:2d:eb:14:d4:87:29:1a:0d:c3:a1:02:ea:70:
                    70:c9:6c:29:17:e6:68:ed:74:9c:78:d6:31:47:b7:
                    dc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:39:51:DB:D5:99:B5:65:77:79:08:57:9F:46:73:AB:00:F6:37:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0bc17c5-ba50-3779-a0dd-1b8f6daa4022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:387::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:d6:dd:ce:2d:52:5e:6b:b2:55:47:3c:92:c8:4f:aa:92:16:
         2f:07:07:35:99:d3:2f:bd:a8:20:fb:64:48:36:c1:41:29:9b:
         3e:b2:73:81:81:c4:fc:dc:3a:bf:5b:2d:3b:d2:dc:b0:3e:e9:
         e5:98:08:d9:4f:e9:87:6a:cd:74:3f:83:20:d9:2d:10:f0:0d:
         96:17:9f:46:ee:6a:73:9c:13:f0:ee:bc:b9:26:ec:96:b2:83:
         a1:68:c2:89:f6:e9:bb:6a:ce:0d:29:31:a9:81:51:22:5b:87:
         62:82:9f:4d:2a:48:66:1a:20:23:32:0a:1c:72:8b:5f:9b:2b:
         14:37:6d:f6:36:46:64:6e:a2:70:95:2c:ab:53:4f:52:38:fe:
         fd:68:7d:54:e5:47:87:0d:a2:83:60:ef:2f:e3:e5:b0:0f:be:
         46:11:30:9c:c6:c4:de:35:bc:9e:8f:05:22:6a:dd:8d:3d:7f:
         e8:fc:67:6b:47:9b:8b:41:9c:af:5c:18:3d:72:68:66:61:f3:
         b5:95:d2:4c:d5:ec:fc:1f:56:3c:33:73:1c:e7:58:cd:0d:fb:
         47:2b:2a:a2:79:61:22:fb:d7:a8:6c:28:26:b2:3a:a1:c5:3a:
         a3:17:6f:b1:05:26:ce:b1:12:40:e6:0d:9a:ee:27:8b:8f:4c:
         b3:62:72:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:30 2024 by rpki-client on console-ams.rpki-client.org