Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20e5194-1e49-35af-9248-92bde05f0419.roa
File:                     d20e5194-1e49-35af-9248-92bde05f0419.roa (raw, json)
Hash identifier:          9wwr31xlaaeztI5pHKljoAK7GIzlIqkN/jrJggCQYfw=
Subject key identifier:   45:46:93:37:8B:68:6E:70:BB:6C:B4:4A:92:9E:A3:E1:0C:65:4B:BF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B478C214F00305730BDC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20e5194-1e49-35af-9248-92bde05f0419.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     64238
IP address blocks:        2001:470:f8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:47:8c:21:4f:00:30:57:30:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=bd0c0e3c-a2d3-41e2-a5ea-4634dc0a765d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b4:46:63:76:7a:1b:32:45:39:b0:02:e9:f8:
                    28:7f:ec:38:c5:39:36:54:72:9b:8a:83:12:a4:d6:
                    d5:40:de:f3:97:56:ff:9a:e3:87:c6:5f:80:9f:cc:
                    bb:8a:85:bb:62:2d:c0:cf:33:37:a8:e4:cd:ef:18:
                    c9:3e:61:f3:20:3b:5b:92:63:16:ff:34:4b:a8:1d:
                    de:f7:de:85:27:6c:75:94:44:1d:74:21:f2:57:73:
                    56:68:3b:c7:8c:9f:56:f2:9b:cb:51:1b:1f:43:6d:
                    24:c4:b9:0d:d6:c9:8e:db:6e:fc:24:2d:e4:06:4c:
                    5a:49:06:56:26:b4:2d:b0:2c:16:cd:45:0d:79:84:
                    4c:20:24:ea:9c:98:5a:7d:03:54:33:83:4e:d5:7e:
                    19:16:66:f5:c4:6a:7b:0d:38:9c:40:e3:6f:78:df:
                    5a:10:b8:6f:60:77:5f:88:65:35:26:53:a0:83:dd:
                    29:7c:d3:95:23:12:56:69:68:1e:8e:39:7b:08:35:
                    7f:68:e1:43:8d:73:51:d4:1f:25:56:7b:2a:b4:a6:
                    c6:6b:94:e8:53:f7:51:36:55:8d:2d:14:3f:ca:f1:
                    07:c0:96:30:81:f9:d1:a0:d9:a2:65:e2:d8:a4:de:
                    ac:50:1a:c8:fc:a5:28:93:2f:26:09:0a:6d:18:57:
                    ab:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:46:93:37:8B:68:6E:70:BB:6C:B4:4A:92:9E:A3:E1:0C:65:4B:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20e5194-1e49-35af-9248-92bde05f0419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:f8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:47:6c:00:c5:fc:6a:e6:53:38:d5:69:0a:2d:01:66:62:5e:
         23:1c:7e:f9:ad:95:aa:c4:2d:26:2f:fe:bc:7d:fd:51:66:a7:
         ff:4a:f3:e7:70:f8:44:53:90:b6:e4:50:92:38:7c:d9:69:d8:
         29:c8:6f:5c:07:67:a4:92:9e:a3:bf:ea:a7:09:13:e0:cc:af:
         bf:9b:4a:5b:f5:f2:94:83:8d:b9:b7:ea:f5:16:f4:78:41:fc:
         dc:a8:17:f7:8f:8f:34:44:e5:ea:2c:74:bb:38:1a:4e:51:2c:
         34:d1:46:95:64:7c:e5:cb:c2:d7:90:33:d4:70:50:fc:e2:e8:
         4b:f7:eb:aa:a1:7f:f1:2f:d9:74:29:18:93:12:75:bd:cf:5c:
         42:a6:20:55:cf:b6:4f:d5:08:c4:6c:4c:43:2e:46:9f:52:40:
         d1:b2:76:6e:5d:ee:2b:a1:6a:08:52:24:a2:ad:d6:90:ce:1a:
         8a:ff:18:a2:e5:76:dd:70:c9:e5:8e:1e:a5:b0:2f:c9:d0:2e:
         fc:e3:b9:0d:1a:46:56:c6:d2:98:ac:ed:6d:3c:46:37:59:0c:
         a5:c6:88:8b:28:f6:61:7d:11:93:a1:a0:45:c3:f4:93:e2:56:
         22:13:29:7f:25:9d:88:0e:e5:e8:9d:98:82:57:07:62:14:5f:
         7c:07:4a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:30 2024 by rpki-client on console-ams.rpki-client.org