Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef4ae8ab-19eb-33ef-85c6-0861d0146a68.roa
File:                     ef4ae8ab-19eb-33ef-85c6-0861d0146a68.roa (raw, json)
Hash identifier:          KH2l0Rnj6IwK+4G02/nQIo1EXRzNmJFMksUBZ6YVghw=
Subject key identifier:   49:98:65:F4:A3:7A:40:9C:4A:15:4D:37:ED:B4:2C:C2:D6:4F:B9:56
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858480388EB0D0B96886644492460
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef4ae8ab-19eb-33ef-85c6-0861d0146a68.roa
Signing time:             Wed 27 Nov 2024 02:30:11 +0000
ROA not before:           Wed 27 Nov 2024 02:30:11 +0000
ROA not after:            Tue 25 Feb 2025 02:30:11 +0000
asID:                     395209
IP address blocks:        2001:470:364::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:88:eb:0d:0b:96:88:66:44:49:24:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 27 02:30:11 2024 GMT
            Not After : Feb 25 02:30:11 2025 GMT
        Subject: CN=6abeabb5-3308-4224-9c1f-028d97d72b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f0:3d:58:42:ed:d5:32:59:11:08:13:5e:ff:
                    1a:ed:cc:e7:84:0c:84:7f:8d:96:09:5c:3c:c8:34:
                    ca:fb:f4:4b:6d:3e:19:5c:af:84:a1:9b:e7:0c:3b:
                    58:e0:bf:16:1c:b7:ba:b5:bf:48:09:db:67:fd:80:
                    cb:98:13:c4:81:8b:ed:3a:a5:89:e6:f0:4e:26:23:
                    84:94:c6:41:ee:3c:a0:d2:39:b7:04:88:e5:1b:a4:
                    ad:66:e3:64:5d:3b:d9:a8:d1:1b:4a:e6:50:ef:a0:
                    67:0e:6f:13:28:1e:54:16:69:34:31:70:9e:a9:d5:
                    94:92:4a:52:21:b8:20:c7:85:24:b7:75:08:ee:6a:
                    99:28:59:01:61:37:48:56:be:17:c4:61:08:2c:c0:
                    2a:53:19:33:67:ce:e1:e9:cb:4a:8c:24:05:0e:0f:
                    f3:a3:01:ef:1f:90:ee:ad:e0:9d:bd:bd:85:80:9f:
                    e3:40:5a:40:93:09:3e:ac:86:a2:3e:44:8b:c1:ce:
                    40:9b:a4:a3:71:4e:98:b2:40:8d:9c:11:04:27:6b:
                    95:26:0b:8a:da:a2:83:36:1c:06:ac:8c:f8:51:6d:
                    a5:c7:82:7c:74:bd:de:7d:06:aa:57:f4:b8:7f:8d:
                    6e:b8:89:26:23:75:6d:70:3b:3e:0c:6f:c0:b2:5f:
                    8f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:98:65:F4:A3:7A:40:9C:4A:15:4D:37:ED:B4:2C:C2:D6:4F:B9:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef4ae8ab-19eb-33ef-85c6-0861d0146a68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:364::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:c5:2e:2b:56:16:b3:42:5a:67:c9:08:f4:5b:a1:f8:db:60:
         79:42:7b:fa:d7:ce:66:ed:1c:eb:bb:0b:b6:3a:88:9e:4f:71:
         00:09:d1:f4:23:cd:cc:ea:d8:5b:64:8b:5f:fa:15:1d:92:a2:
         07:c3:0f:08:9c:84:dd:2e:99:0a:f4:2e:86:36:d9:ff:34:cc:
         81:83:74:11:e3:2e:4a:59:3c:c9:de:fe:7a:64:9d:ec:d2:29:
         ab:e5:a5:39:52:37:de:54:65:c7:70:b7:9b:ee:8a:8a:24:1d:
         f6:12:c0:ca:b1:ac:f7:f6:58:9a:49:de:03:b1:e2:2e:52:c7:
         8d:cc:28:e0:95:17:e9:19:51:1e:74:7c:24:2c:c1:0d:db:90:
         df:6a:da:54:0d:29:a0:e2:60:f4:69:86:94:6b:46:c9:95:c5:
         17:dc:d5:8a:72:9e:de:a3:79:5e:d5:dd:3a:22:4f:71:84:a0:
         26:07:cd:58:db:45:ea:c9:cc:46:20:53:79:b7:71:46:1d:84:
         cf:1b:dd:14:a5:09:d9:e0:fe:15:88:d7:3b:a9:d8:55:6c:cc:
         78:a2:83:4b:1c:86:3f:4b:bf:85:b4:8b:54:2b:0c:73:45:fd:
         3a:b0:4d:3a:30:f9:fb:df:0b:31:b2:f4:24:d7:9f:d2:b1:8a:
         5f:bb:f7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:53:58 2025 by rpki-client