Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8f706f2-5fb8-3490-bc6e-0af2cbc72e38.roa
File:                     d8f706f2-5fb8-3490-bc6e-0af2cbc72e38.roa (raw, json)
Hash identifier:          9LMJm0FqomzBW7yFVQCrUGYSaI9Kg7iJjFCufrOM9Z4=
Subject key identifier:   31:F2:4F:6B:FA:24:AC:E1:17:81:29:C0:C9:89:D8:6E:6F:68:D4:25
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B4A2B426F638861475880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8f706f2-5fb8-3490-bc6e-0af2cbc72e38.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     397778
IP address blocks:        2001:470:11b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:4a:2b:42:6f:63:88:61:47:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=68ef94d8-49ee-4b4e-9605-f375cd363165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:03:f9:e8:40:b5:21:12:f8:c9:2c:fa:d3:49:
                    f2:99:89:14:ca:a3:c1:9d:4b:e6:f0:62:4e:90:8b:
                    aa:1f:9f:e9:4d:f8:7f:21:ec:86:23:28:2f:c5:21:
                    70:66:82:04:49:72:49:b6:b0:92:bc:ce:4e:d0:5a:
                    a2:92:cd:a0:f9:c8:6d:bb:c3:ba:06:2d:9d:6d:1b:
                    5e:85:01:81:f0:af:9f:fb:a0:bb:79:11:73:cc:a1:
                    bf:dd:4f:65:e4:9d:87:24:7f:29:74:3c:27:d3:cb:
                    40:d9:af:70:f8:1d:ec:07:8a:f7:b8:06:e8:2c:be:
                    24:16:00:ba:8f:4e:dc:bd:77:f5:3d:7d:23:60:dc:
                    51:29:ba:a5:9a:88:be:b4:10:75:c3:31:c3:b7:22:
                    e3:9d:79:2c:91:a9:07:5b:03:7e:25:b6:b2:d7:5e:
                    c3:6e:97:77:ac:35:b5:44:ea:5a:a4:7b:28:91:e2:
                    51:b4:6b:6b:11:1f:b8:7d:dd:a1:cc:48:b6:f7:dd:
                    93:77:03:fa:76:e4:39:e2:c2:94:84:9e:37:89:b1:
                    23:07:d1:72:31:b2:87:7e:85:27:b3:16:0d:c6:c6:
                    cf:f7:79:75:98:9f:ba:90:6d:5f:d2:91:9a:0b:b1:
                    38:53:bd:9c:84:66:8d:c9:a1:80:ad:f4:60:e1:45:
                    7b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F2:4F:6B:FA:24:AC:E1:17:81:29:C0:C9:89:D8:6E:6F:68:D4:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8f706f2-5fb8-3490-bc6e-0af2cbc72e38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:11b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e3:d8:ae:21:4d:1b:5e:be:0d:43:71:25:10:3f:fe:88:c0:
         b1:a7:8f:ff:63:de:03:b3:35:12:22:ef:b1:18:ac:f7:5d:04:
         7a:43:13:b9:79:1c:94:a7:58:5e:e8:e4:fb:d1:c1:6d:9e:55:
         e1:2e:52:20:45:0e:aa:15:de:fb:96:bf:e7:ac:bf:22:70:4c:
         75:ff:1f:c8:5d:80:af:b4:07:17:f4:b3:b0:d7:37:81:bc:6d:
         53:31:01:bc:2f:b5:26:06:c1:fa:a2:30:47:f5:13:67:01:8d:
         35:6d:8f:20:3a:a8:a9:fa:77:b9:49:38:ed:17:48:a4:2d:81:
         bf:6e:ee:3e:14:94:d7:c4:86:8e:42:c7:11:b8:27:5a:b5:3d:
         d6:6b:60:09:e5:3e:fb:29:39:1d:3c:d3:53:28:31:b0:b5:62:
         50:ae:57:a0:57:68:15:2c:1c:9b:4d:93:aa:58:6b:e7:79:09:
         dc:cf:86:36:90:d8:36:a7:51:58:f4:4b:be:9c:25:2c:54:03:
         5f:b0:5c:56:c9:58:38:5d:f2:4b:83:41:da:5c:03:18:ea:57:
         f9:6b:bd:c6:eb:b7:03:b1:b0:1f:88:2c:ba:77:9c:6b:6d:1d:
         54:60:22:9a:a9:5e:c5:6b:4b:e4:64:8b:d0:c8:8d:ab:92:7d:
         74:7f:f2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:30 2024 by rpki-client on console-ams.rpki-client.org