Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d1dbf132-887d-314c-b6eb-76f057774a72.roa
File:                     d1dbf132-887d-314c-b6eb-76f057774a72.roa (raw, json)
Hash identifier:          C40JfndtloN4VTAehtvhlNPiIjhcLn17b90lehui/dI=
Subject key identifier:   D8:91:94:8B:0F:BC:DC:EF:54:7B:67:6E:0F:73:34:E5:A6:ED:55:59
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858484D757F94945F806820486580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d1dbf132-887d-314c-b6eb-76f057774a72.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     149448
IP address blocks:        2001:470:39f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:7f:94:94:5f:80:68:20:48:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=f23f5768-cb93-4083-bc2b-e4c83d48cc46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5c:41:27:67:37:d5:df:6b:12:b0:61:4c:4f:
                    8d:ca:2c:de:49:35:b1:cc:ad:c0:41:fa:dc:e3:bb:
                    f8:7c:40:a4:a6:1b:3e:a5:e5:b5:76:2b:59:4d:55:
                    8b:81:b7:61:ef:f8:8d:20:73:c2:b5:03:9f:e7:c4:
                    9d:58:a0:d7:bd:b7:c9:e3:33:40:17:dc:3c:c6:73:
                    65:9c:5d:68:7d:1c:0f:2e:71:96:da:2c:df:13:d4:
                    39:21:1d:8c:20:55:52:6a:71:0e:e6:33:2b:1a:b4:
                    a5:27:e4:60:e7:30:27:3f:2f:fd:52:72:ba:8a:80:
                    f8:d2:38:39:f8:63:d4:ee:de:65:20:12:dd:1d:ee:
                    00:9d:64:5f:f0:d6:eb:f0:d3:2e:82:d0:42:ad:91:
                    8b:55:41:ac:d7:f2:1a:bf:b4:31:77:ab:40:7e:d1:
                    73:2b:37:23:79:d2:38:b6:ae:2b:da:7a:38:ec:a6:
                    cb:9a:3b:d7:9e:8f:a9:cb:7b:ca:d3:96:7f:c9:cc:
                    5a:bc:e3:4c:de:16:f9:2b:a2:8a:b3:f7:b7:47:65:
                    d5:30:9b:93:af:51:3f:98:1a:2c:4d:06:c6:60:5f:
                    ba:70:85:71:11:58:4d:b5:33:0e:4c:f0:8e:07:54:
                    13:25:50:2d:43:43:07:b6:9a:1f:45:6d:65:92:dc:
                    30:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:91:94:8B:0F:BC:DC:EF:54:7B:67:6E:0F:73:34:E5:A6:ED:55:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d1dbf132-887d-314c-b6eb-76f057774a72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:39f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:91:5d:a5:98:d0:a2:22:ce:86:58:11:34:91:de:50:35:6e:
         0f:97:d2:ae:a1:cf:83:be:bc:17:ab:41:81:95:cd:92:1f:59:
         b4:59:2f:89:0f:47:3d:3c:3c:b5:ff:4a:db:98:6b:c3:c1:bb:
         99:de:93:ef:11:d5:fe:fa:d6:3f:8f:bd:5a:8c:ee:fd:e4:ed:
         69:2a:bf:ea:71:d5:73:f2:7c:ea:0a:f4:1a:3b:0c:cb:4a:7c:
         b9:44:b7:5a:89:4c:3c:f8:4c:7d:cb:d6:a6:7a:a2:c5:47:7b:
         1e:44:36:2d:9e:4a:2e:64:c5:bf:4c:85:fa:fa:e8:05:ce:17:
         5a:d5:bd:85:af:1a:88:01:42:c6:73:7c:8c:90:93:b4:b6:5d:
         3b:4f:3b:96:0e:f0:4a:85:7d:29:5e:28:a0:54:80:2d:57:89:
         69:19:41:00:eb:09:e6:6f:bc:91:c7:c4:fe:63:0a:c9:cb:10:
         fc:6a:c5:44:cd:b5:78:a8:5b:97:7b:1e:f5:67:eb:67:a6:98:
         02:a2:a0:16:a7:70:c6:d9:25:86:39:12:d4:bf:d0:78:db:0d:
         2d:65:42:bc:66:ff:8e:5f:be:c5:a6:55:24:36:cb:d8:ec:38:
         75:14:61:5c:bb:cb:1c:af:cf:80:71:9e:7e:2b:e0:a5:1a:37:
         94:04:41:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 7 17:50:09 2025 by rpki-client