Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6fa416f-c041-3446-8288-068130bcb4fb.roa
File:                     d6fa416f-c041-3446-8288-068130bcb4fb.roa (raw, json)
Hash identifier:          QIDBgLEhnAuZB8L/qfWuqzljSoqnajTRPdnPfDoUR9g=
Subject key identifier:   8A:5D:FE:E4:C4:5B:18:88:08:4E:E0:9E:94:2C:E1:AF:CF:FE:EF:00
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B578DE62C91FC633C0300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6fa416f-c041-3446-8288-068130bcb4fb.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     23089
IP address blocks:        2001:470:199::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:57:8d:e6:2c:91:fc:63:3c:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=20f5005e-1b4d-4c56-911d-2b67f7eb9fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:40:81:51:c5:07:82:39:b9:8a:8a:d6:8c:76:
                    58:b5:e7:a5:50:b5:7b:81:4b:03:bb:6c:1f:2c:3d:
                    98:9f:b3:09:97:5e:e6:57:40:02:d9:9e:9b:f2:f8:
                    77:28:56:7d:85:52:5d:b8:69:c0:28:f4:4c:f1:5b:
                    e3:f5:fe:8b:c7:e7:77:2e:bc:eb:bd:f9:ce:15:6b:
                    04:5d:f5:7e:e2:be:3a:4e:ae:38:67:95:86:6c:ef:
                    c3:2b:16:3b:9b:60:72:f3:26:e0:6d:64:c2:0a:26:
                    a3:93:cf:ef:64:15:3a:8f:65:e6:1f:6e:e5:5b:8f:
                    c6:80:02:9d:aa:eb:80:80:64:15:80:fe:ae:da:a8:
                    64:a2:d2:c4:6e:a0:9d:f6:e9:a7:11:55:ad:eb:1e:
                    16:1f:18:ce:38:d0:75:4a:10:a8:36:d1:fe:45:3a:
                    3a:40:ec:4b:69:dd:51:67:5e:05:63:db:d1:33:22:
                    5b:b5:ea:da:39:86:0b:c4:c4:27:98:75:c3:05:44:
                    64:ac:5e:32:e7:d1:87:ce:d3:a0:35:a4:75:d2:c9:
                    8f:89:e3:f9:b6:fd:fb:7a:2d:47:ac:97:fb:d3:97:
                    c5:4f:33:ec:6e:66:aa:4e:6a:58:0d:45:0b:ec:b3:
                    08:75:13:3e:e8:c2:2f:20:b6:12:0c:29:88:97:f4:
                    d0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5D:FE:E4:C4:5B:18:88:08:4E:E0:9E:94:2C:E1:AF:CF:FE:EF:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6fa416f-c041-3446-8288-068130bcb4fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:199::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:90:b7:c8:51:ea:71:cf:3f:f6:84:40:ad:9d:8f:b7:33:fe:
         f7:ec:f7:85:36:f1:64:7c:cc:a4:50:9a:e4:5d:0d:72:6c:ee:
         cc:f0:47:c6:83:3c:5a:36:3d:b0:e9:25:c1:38:cf:02:11:79:
         3b:0c:87:37:23:0d:48:ab:1a:30:23:01:ef:f8:87:ec:96:2d:
         3f:82:93:ee:56:8e:40:f7:64:52:6a:99:0b:67:1d:67:10:23:
         5a:41:ff:64:06:b3:00:0d:46:bb:fb:8f:c3:28:19:e0:fb:a6:
         35:d0:b7:26:17:00:33:31:5b:85:53:f3:c4:93:d6:ee:f6:58:
         ac:b5:b1:13:83:54:f4:e2:fb:b9:4d:c0:2d:05:37:80:c8:3c:
         03:13:4a:5f:e7:b7:36:54:96:72:a3:04:95:b4:30:4f:4f:4a:
         39:85:e1:b2:6b:c2:a5:d4:1b:77:c9:34:ea:64:52:34:e8:d0:
         77:b4:23:d6:b7:78:65:71:e0:79:3d:17:8d:9f:c2:21:28:33:
         2e:48:97:51:f8:ec:37:3b:39:59:79:d0:0e:68:aa:00:e7:c1:
         67:34:0e:eb:f1:60:04:a5:ef:ad:cd:aa:fb:db:08:be:05:9a:
         86:fe:72:24:be:22:7e:7d:b3:8c:ea:c6:de:4c:e8:ba:02:b2:
         99:fe:c9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:30 2024 by rpki-client on console-ams.rpki-client.org