Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dba82392-5667-3988-bdd9-348348548257.roa
File:                     dba82392-5667-3988-bdd9-348348548257.roa (raw, json)
Hash identifier:          FCdbauZIO2Nb7GCGPLwQX8R6Wi1RNCrhmvCjwqWAOuI=
Subject key identifier:   86:D7:96:1D:38:25:5F:63:EF:04:B4:50:86:EE:39:67:AA:88:53:E9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B6035FB90F513CDEC3EC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dba82392-5667-3988-bdd9-348348548257.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     55195
IP address blocks:        2001:470:209::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:60:35:fb:90:f5:13:cd:ec:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=7ed523a9-fb4d-4375-88b2-b5b35f758d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d8:4a:b6:a0:6d:07:79:a9:d1:83:48:6b:32:
                    38:c7:2e:3f:97:9b:50:52:67:7e:54:6b:f2:29:76:
                    f1:f8:16:50:d4:99:32:b5:da:2d:d0:34:72:62:8d:
                    e5:8f:fd:b0:ea:e3:1d:34:2c:36:d2:b4:e2:45:25:
                    b0:1d:a5:96:8b:ad:93:e3:3d:b7:5f:86:aa:55:18:
                    d0:c7:8c:c2:c7:63:82:d6:56:34:bf:3c:c7:ba:ce:
                    83:b0:5c:b2:6b:30:9d:d2:96:2b:45:59:31:10:47:
                    c6:2b:49:5f:b6:cd:d9:75:88:3d:c2:5e:cb:f6:6c:
                    c3:a9:84:8c:9f:32:54:6f:0e:bc:42:24:c0:7f:a3:
                    19:7e:81:15:9a:23:62:28:0e:16:64:72:b0:bd:30:
                    ec:1b:70:f4:fe:52:57:11:65:32:3b:8b:f8:7a:23:
                    2d:0a:db:10:40:dc:ff:fc:00:3c:81:48:c5:77:10:
                    7b:5f:26:7d:3f:0d:ea:66:7b:53:f1:b1:40:ef:a5:
                    e7:82:72:d1:cc:b4:c6:ce:30:c1:70:67:b0:32:1b:
                    17:de:a1:0e:b2:fb:ad:f9:76:ab:8a:fc:4e:a3:a6:
                    63:05:54:5f:70:fa:7f:45:c8:e4:4e:0a:e8:94:9f:
                    6a:97:16:fc:5b:5d:a4:9a:eb:54:e9:93:93:44:75:
                    c0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D7:96:1D:38:25:5F:63:EF:04:B4:50:86:EE:39:67:AA:88:53:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dba82392-5667-3988-bdd9-348348548257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:209::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:74:d2:f2:11:e3:03:00:e5:7d:39:7c:32:fb:e6:de:4c:c0:
         17:1c:17:85:2a:28:e6:d0:99:2f:cd:6e:94:d0:e5:80:e7:60:
         fd:c6:93:5b:05:9e:15:1e:e7:e1:25:7a:71:33:5e:d2:cd:72:
         d5:40:86:1f:c9:7b:d5:dc:b5:69:47:d7:3b:e9:45:c2:3e:53:
         9b:06:83:d3:b7:23:4a:56:c2:9e:ff:f4:58:f2:eb:03:79:af:
         6f:d8:6c:7e:8d:5e:73:4e:56:30:34:19:86:d2:ef:c0:7a:a3:
         01:61:cb:c2:02:69:33:54:20:e5:f4:21:d1:48:5b:05:55:18:
         24:ed:e4:b5:e7:fa:30:ef:84:aa:df:f3:ac:c1:27:a3:f3:84:
         1d:11:b3:9b:1e:5e:0d:f8:6b:b7:13:57:7f:a0:4c:49:24:5a:
         72:c2:30:90:6e:f7:a8:66:c3:51:ae:36:96:4a:2f:74:6e:2f:
         34:eb:7e:9d:57:fd:76:d5:88:c7:cd:25:f8:7b:34:65:b8:b4:
         26:bd:b5:22:9e:21:f1:f1:86:a2:5a:cd:9f:57:0d:c8:66:6b:
         12:f8:62:f7:47:3b:e5:97:f7:9d:b0:9c:aa:d3:66:73:df:bc:
         61:ca:ad:4b:a8:5d:30:d9:10:45:9b:ce:73:46:77:f5:06:b1:
         3c:07:e1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:39 2024 by rpki-client on console-fra.rpki-client.org