Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d578c2d4-b5b4-3d27-8d85-826867d83c63.roa
File:                     d578c2d4-b5b4-3d27-8d85-826867d83c63.roa (raw, json)
Hash identifier:          W0VZImVeG2W3xby78ygKIo35hhGhLUDI2SfHZ/NzyWg=
Subject key identifier:   6A:04:78:8B:B4:9F:29:F4:D4:A4:C9:47:50:EC:FE:75:71:5C:9F:FA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B775873A43425BE1CEE00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d578c2d4-b5b4-3d27-8d85-826867d83c63.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     46440
IP address blocks:        2001:470:19b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:77:58:73:a4:34:25:be:1c:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=bcdf0261-407e-4733-8c9b-9cf4135f5205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:da:a4:21:92:70:f4:23:a1:86:aa:3b:8f:c1:
                    6f:39:bc:ed:35:94:eb:aa:1f:f4:12:6c:02:cd:99:
                    64:57:c2:fa:06:bc:70:2d:3b:6c:cc:80:d4:c2:ab:
                    d9:95:4b:2f:a3:90:71:ee:35:17:6f:14:bf:73:47:
                    71:b0:46:9e:98:c9:08:40:6c:8c:cb:92:f5:9a:3a:
                    2e:33:e7:18:6a:c3:1e:1a:d1:08:df:59:9d:88:ae:
                    8b:40:d5:e2:93:8d:18:9e:fb:f1:3e:12:83:a8:be:
                    0f:5b:eb:05:d4:9b:27:90:36:6f:cf:39:e3:42:24:
                    e9:a8:05:9b:fb:9b:2c:cc:e8:0d:5e:44:74:34:88:
                    ae:61:e6:a3:29:bf:27:e7:28:a3:b7:89:93:ec:d0:
                    f7:9b:ce:8f:d8:2c:24:dc:9d:ae:9e:5b:74:d0:10:
                    18:c6:9c:c6:bf:ce:39:ad:09:0f:dc:4d:88:01:3c:
                    39:93:53:49:2f:1d:2b:0a:2e:1a:ea:1c:c5:a3:42:
                    f6:bd:cc:24:94:0d:86:17:93:d6:07:d6:12:9b:82:
                    c0:c8:9c:d7:c9:75:f7:cb:18:ce:fd:11:34:63:c8:
                    6f:f3:19:25:f4:eb:ef:70:94:62:22:13:02:9d:a4:
                    87:72:20:ca:e7:1b:a2:c3:b1:dc:65:72:26:2b:c1:
                    04:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:04:78:8B:B4:9F:29:F4:D4:A4:C9:47:50:EC:FE:75:71:5C:9F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d578c2d4-b5b4-3d27-8d85-826867d83c63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:19b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:5e:78:04:ad:d1:2c:0a:da:81:93:ed:b5:bb:b0:a6:b1:b2:
         80:1b:57:3d:e0:5e:6e:92:68:9e:3d:58:ce:4e:b8:fb:1d:49:
         7b:93:73:24:d2:79:98:41:fd:7d:cb:29:67:2a:e9:1d:05:80:
         b4:03:77:22:5d:ae:01:9a:c4:26:ac:e7:ea:4b:57:db:57:af:
         d1:49:23:ae:61:6d:90:0c:45:c9:14:fa:78:ea:b7:66:9f:10:
         60:e0:45:b5:cf:16:b7:a9:f1:d1:24:bb:a8:5b:f1:ad:95:11:
         3a:e3:ad:9d:fd:bd:a6:25:dd:c8:6c:6d:40:08:6f:71:15:08:
         42:d9:ce:00:98:d2:e2:03:e2:23:ec:98:cd:34:c4:1f:12:76:
         45:f7:3c:14:16:f4:ec:df:9c:db:9e:5e:42:ce:9e:05:29:88:
         c5:f7:73:bc:da:a3:55:b1:84:9f:7f:b1:96:09:55:6b:12:37:
         0d:71:6e:3f:e5:6c:ee:be:eb:d3:d3:c0:98:af:c0:f2:57:06:
         d4:b3:86:d4:f6:9b:60:0d:6f:4b:2a:63:d7:a2:71:45:93:a8:
         ea:39:ff:f9:65:24:40:39:bf:4e:9b:8e:41:9f:4a:9a:d0:3b:
         9c:a1:8d:e2:a2:91:29:a2:8b:d6:f0:84:e4:f3:3f:f0:ea:03:
         78:dd:09:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:30 2024 by rpki-client on console-ams.rpki-client.org