Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e3dc7690-4b84-3d9a-be2b-3d4bdd78163b.roa
File:                     e3dc7690-4b84-3d9a-be2b-3d4bdd78163b.roa (raw, json)
Hash identifier:          H+oJ7uNoH0dApTs+8mRHlfMEL+cql9HSIZQlhiPlNhw=
Subject key identifier:   47:71:C2:FE:05:67:C8:2E:4D:F4:00:70:02:5E:67:6C:26:C3:EE:54
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B54E2D1140878F6971E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e3dc7690-4b84-3d9a-be2b-3d4bdd78163b.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     46475
IP address blocks:        2001:470:16c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:54:e2:d1:14:08:78:f6:97:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=30308cf9-a9cc-4109-a22a-3400e6256bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:f8:2f:57:1f:49:5a:56:c0:8a:5c:3e:99:
                    a4:f6:78:b7:43:16:ac:c7:cb:75:13:6d:3f:af:c0:
                    aa:8b:54:58:87:bd:58:c5:2d:26:bb:62:b7:c3:38:
                    86:65:95:20:ed:10:53:9d:95:e3:c7:42:53:2a:69:
                    e2:c7:41:eb:2e:ea:50:db:5c:e4:33:c7:aa:31:27:
                    69:43:76:44:07:91:28:96:d6:fe:e1:a0:aa:47:41:
                    66:1c:45:70:f4:ca:65:98:a5:00:c0:c1:64:63:fe:
                    72:1b:66:9c:3b:54:8f:cb:91:cb:a6:34:b0:53:90:
                    7d:a8:a8:4b:e4:c5:f0:32:67:b2:ef:28:61:32:84:
                    a7:51:ea:e1:d3:16:dc:12:04:53:b1:72:b6:6b:91:
                    34:15:4d:98:74:2e:12:30:f9:b3:0a:ae:3a:5b:3d:
                    86:bf:74:8b:71:da:08:2c:57:99:26:11:f0:ee:62:
                    d7:3c:f3:55:04:1e:c0:10:86:7b:a3:dc:c6:71:18:
                    4d:4b:66:84:3a:77:ce:9c:99:37:cc:44:9b:43:ab:
                    a8:98:43:d8:d6:78:3f:aa:cc:27:27:27:c2:e7:92:
                    11:ce:09:0f:ca:99:0c:81:9e:b8:10:74:06:4a:49:
                    37:07:10:07:1e:5e:7c:c4:c0:0d:73:8b:6c:7b:87:
                    cd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:71:C2:FE:05:67:C8:2E:4D:F4:00:70:02:5E:67:6C:26:C3:EE:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e3dc7690-4b84-3d9a-be2b-3d4bdd78163b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:16c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e2:ed:39:80:24:41:f3:4f:63:97:f7:a9:cf:08:4e:67:c1:
         25:5f:f7:7c:81:2a:04:55:69:d9:df:a5:c3:e9:c7:74:5d:f0:
         92:9d:64:dd:f5:11:6f:27:b8:11:6c:95:21:d8:07:53:a8:ef:
         cd:1c:ce:f2:68:41:40:d4:ec:19:0f:73:10:e9:e6:88:94:65:
         b4:c3:7b:a7:d9:36:13:f7:c3:57:a5:6e:a7:6a:fb:09:71:3c:
         d0:11:6c:69:13:ee:38:7e:d4:cf:1a:dd:70:45:61:6f:88:7a:
         76:0e:54:8f:04:bc:c2:4f:cb:57:b9:09:49:82:89:73:12:7a:
         5c:79:f2:f5:c4:12:e3:bb:37:fc:8e:24:82:d3:04:b1:a7:5b:
         e1:e8:77:51:d9:52:cc:ad:1c:0e:de:64:82:80:f0:45:9b:25:
         01:9d:36:7f:18:dc:8f:c9:d2:18:34:32:a2:98:1d:6f:32:08:
         89:ef:a9:05:bc:bb:4b:6c:5c:25:7e:ff:fd:88:32:b8:23:8e:
         f1:ef:d1:de:05:91:38:8e:96:18:65:0b:71:f1:40:96:4b:29:
         d9:b2:89:e4:b1:c8:2b:bf:ea:55:9b:c2:dc:39:8c:bf:27:78:
         80:31:12:b2:45:8d:09:ab:95:d6:21:f5:dd:a6:5d:0f:9c:e5:
         fe:bb:fa:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:30 2024 by rpki-client on console-ams.rpki-client.org