Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eef0e49b-0cee-37ea-ab02-234cd09f25ce.roa
File:                     eef0e49b-0cee-37ea-ab02-234cd09f25ce.roa (raw, json)
Hash identifier:          fT74hjYsTm5T/hLtzwwfbYhkZ3ifuyuj8OtVNVu50Qw=
Subject key identifier:   60:66:31:9D:39:68:1C:B3:A6:DE:11:D1:D6:8B:2F:64:F8:4E:7D:D2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B6D2EECA0857B531C9000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eef0e49b-0cee-37ea-ab02-234cd09f25ce.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     207804
IP address blocks:        2001:470:2a1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:6d:2e:ec:a0:85:7b:53:1c:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=92528ad3-fc4b-453d-b741-7d163b0b5d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:36:f0:65:4e:2d:37:f8:27:e0:7f:48:78:
                    d1:ee:74:11:c8:87:3b:46:b2:24:8a:a2:4c:0e:f7:
                    3e:36:19:d1:70:1a:2a:f6:a9:ab:f8:e5:67:14:d3:
                    fc:2d:6a:5a:89:85:43:f2:57:4c:c2:e1:1f:2a:00:
                    31:97:99:c0:33:97:cf:04:75:54:d8:0c:0f:b5:32:
                    2a:e0:cd:bb:48:a6:f8:d2:3e:04:84:d8:c2:1b:45:
                    bb:87:45:8b:49:5b:30:92:f8:32:57:e6:3d:87:b1:
                    d9:49:e4:7c:6e:37:41:ed:85:10:65:df:b2:32:e6:
                    f9:95:3c:39:65:2e:5d:19:3f:c6:67:7c:52:9d:c3:
                    8e:b9:f9:92:f0:0b:8d:fa:a7:b7:d1:a4:a3:11:3f:
                    e0:45:18:b4:b2:84:c9:42:f2:91:29:0d:6e:70:ce:
                    d3:e7:53:d3:ac:13:3e:92:b5:a8:a5:7e:b3:32:a5:
                    ec:9a:0e:89:42:c4:c4:cb:37:52:6a:79:d5:d2:10:
                    30:0a:4b:e0:7f:1c:8c:12:66:a7:e3:a3:6d:f4:fe:
                    c6:1b:d3:a3:72:e5:e8:53:d6:7d:9a:9b:c2:12:0a:
                    9c:17:8c:0f:52:e2:df:35:e4:13:6f:f3:14:53:49:
                    a1:75:ba:bc:da:f8:e0:59:25:4b:47:1a:ae:ea:84:
                    99:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:66:31:9D:39:68:1C:B3:A6:DE:11:D1:D6:8B:2F:64:F8:4E:7D:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eef0e49b-0cee-37ea-ab02-234cd09f25ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:2a:5e:ad:85:c4:ba:72:c3:32:9b:35:11:f5:a0:5b:76:b1:
         c2:18:ae:dc:03:73:4c:0b:77:0b:77:20:50:4d:3a:23:35:19:
         e7:c5:6f:5e:16:23:a4:71:6d:b9:68:60:4b:a5:aa:a2:23:16:
         ec:1e:71:46:b0:77:44:f9:df:f4:f1:c7:8a:5f:5f:03:4d:ab:
         9c:ac:4b:06:23:2d:7e:06:86:41:40:2b:86:b4:d6:18:04:00:
         83:15:98:0a:b4:58:44:09:08:1a:0b:79:0c:46:62:4e:c7:dc:
         f7:ff:3b:92:70:04:56:70:f4:cf:6e:c1:18:aa:4b:0b:cd:ac:
         8e:2c:b9:98:de:9c:8b:48:55:15:95:e1:18:82:89:98:51:bd:
         b0:27:6e:0b:1d:86:ac:53:09:65:a7:c3:fb:73:46:ca:23:24:
         af:93:96:c4:ac:8b:67:b9:6e:ab:01:5b:b6:37:1c:54:66:4c:
         7c:e3:20:83:a1:99:28:ee:d8:ce:1b:55:85:83:29:28:9c:91:
         e8:05:31:ac:ac:bb:ea:81:fb:19:e4:2a:6b:f8:87:95:90:1a:
         0b:55:b6:7f:86:ec:ed:d6:3e:6c:1f:15:f2:45:ad:59:ba:88:
         97:dd:29:53:19:3a:aa:cc:3e:9c:e8:a3:9c:50:56:08:d2:87:
         87:e3:f3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:31 2024 by rpki-client on console-ams.rpki-client.org