Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e044f2d4-a947-3c70-ba5c-16f255417a24.roa
File:                     e044f2d4-a947-3c70-ba5c-16f255417a24.roa (raw, json)
Hash identifier:          VG9PzEUtl4wzi5oettC+KJpNKEHlpN4W9KmJfBfAWrE=
Subject key identifier:   37:E4:A0:87:5F:72:42:A0:23:3E:85:CF:92:39:A1:AD:C5:D2:62:A9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B54D20CDC22DAEC94A700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e044f2d4-a947-3c70-ba5c-16f255417a24.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     38082
IP address blocks:        2001:470:16b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:54:d2:0c:dc:22:da:ec:94:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=e4b7a50d-cd28-4953-8370-3b9517bb5a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:41:42:58:7b:47:eb:51:93:54:49:6e:11:28:
                    b0:c4:d1:b4:16:44:52:77:ea:68:5a:9f:11:36:9e:
                    d5:c0:68:18:d8:23:6b:db:2e:6b:4a:54:43:f4:10:
                    a8:9e:73:33:1e:2b:06:20:ff:36:46:f1:bb:39:5a:
                    cc:9a:42:7a:86:91:be:34:d9:89:67:84:6d:b9:2b:
                    52:98:cb:bc:c1:39:9e:76:b3:df:62:a5:6c:68:65:
                    08:18:79:43:82:d1:70:59:05:35:52:61:a0:70:49:
                    c9:ae:75:22:c9:e1:77:2e:66:54:ee:6f:a7:be:8d:
                    d0:cf:51:74:c9:93:c2:d4:af:fd:08:20:ea:7a:dd:
                    1f:9d:90:7e:ba:6a:2d:51:9b:e0:30:33:db:ed:6d:
                    9e:d6:fa:0e:81:47:d3:ce:86:96:5e:c2:4d:16:27:
                    95:de:63:3b:e5:cc:93:75:1b:95:c9:c2:00:67:ca:
                    dd:98:dc:ff:be:c6:2a:c7:bc:4d:b2:32:75:44:f0:
                    30:c1:2a:02:85:5e:77:8e:3a:7d:9b:3f:f6:58:92:
                    1b:5f:62:5c:95:89:dc:53:81:65:44:c0:c4:c0:72:
                    9c:e4:9b:78:9d:90:d9:49:aa:4f:d2:a1:09:2d:ca:
                    f7:88:1d:26:6c:f6:bd:a7:12:cd:ec:66:eb:ff:35:
                    16:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E4:A0:87:5F:72:42:A0:23:3E:85:CF:92:39:A1:AD:C5:D2:62:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e044f2d4-a947-3c70-ba5c-16f255417a24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:16b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:8c:8a:ab:2b:4f:d3:16:13:9e:19:6e:fb:74:43:0b:8a:5e:
         b1:aa:32:ba:45:dc:48:e3:6d:2d:ae:39:71:41:d0:53:bc:fa:
         c2:9e:a2:a7:cb:fb:27:d3:3c:ee:2e:37:36:d2:52:f8:9f:a8:
         eb:21:63:f9:99:2d:03:2a:c2:89:42:20:94:99:c6:f9:cf:88:
         b7:ff:7c:3d:f7:5e:e8:2c:fb:99:fb:37:36:52:e4:28:f8:41:
         bb:51:85:70:04:1d:f2:b9:ac:d5:c0:ed:83:45:01:e9:fd:3e:
         9b:a6:af:7b:79:ef:35:f3:ae:e2:96:a9:a8:6a:18:d8:2f:bb:
         ab:b8:0d:9d:1b:a8:30:e0:18:ae:ad:cc:52:04:bb:d3:3b:81:
         31:1e:d9:ce:9f:af:1d:c5:51:40:3e:bd:a4:5d:13:a4:e7:29:
         d0:ef:dd:9d:60:cf:cf:b2:9c:bd:5e:e9:9d:00:30:8f:12:2e:
         31:eb:d9:3b:38:0f:a0:d5:5f:08:24:17:f8:39:fe:5b:15:80:
         a1:f6:1c:13:2d:94:f9:cc:4f:fc:30:b5:a7:6e:45:13:84:c5:
         d7:98:73:86:02:e8:b1:ff:23:81:3c:54:35:c1:37:cc:c7:3d:
         c2:9f:60:e8:2c:b0:72:c7:a5:2e:18:8c:46:13:f3:68:05:14:
         47:e7:a5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:30 2024 by rpki-client on console-ams.rpki-client.org