Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3b2770f-b0f5-3bb7-9b43-2dd2ef450e51.roa
File:                     f3b2770f-b0f5-3bb7-9b43-2dd2ef450e51.roa (raw, json)
Hash identifier:          quQ/zmbx5nQcgWyvWwqkDcF/x9BKa4pYXy3V1CYo68o=
Subject key identifier:   CE:5D:E0:5F:81:75:F6:C6:67:05:FC:E0:7F:62:70:D5:34:C9:B7:27
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B4E28990597F45820EB00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3b2770f-b0f5-3bb7-9b43-2dd2ef450e51.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     31769
IP address blocks:        2001:470:133::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:4e:28:99:05:97:f4:58:20:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=69cc6285-540a-413f-86a5-ed414da3ebe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:66:4a:51:7b:55:29:1a:95:c6:f8:31:f6:b8:
                    f9:bc:b1:85:02:9c:42:15:5f:f6:cf:ec:cd:7d:83:
                    6b:72:52:ff:8c:a6:b5:fe:c5:e7:b8:ae:0d:99:e0:
                    3b:9f:54:c9:82:cd:52:23:0d:98:c0:cb:25:c0:c1:
                    a7:c8:9c:ca:98:11:96:0c:8d:ee:bc:13:0d:e3:72:
                    7f:b9:69:84:c6:1d:07:ad:a8:c3:b2:5e:4f:de:70:
                    c6:18:97:0d:04:87:e8:38:0e:b0:01:05:4c:07:71:
                    43:b5:82:e2:be:53:8f:f1:26:6d:88:90:8e:0c:98:
                    9c:6f:9c:0c:34:08:59:23:7f:6d:78:f3:d3:9a:09:
                    c7:3b:5d:77:82:09:cc:ad:27:1d:54:b8:6a:1b:84:
                    04:dd:a5:ab:ca:74:ff:35:a7:02:f0:4a:9a:d2:54:
                    f8:b9:7c:f0:5c:1f:35:0d:c8:99:c2:84:d6:2f:da:
                    55:a4:e3:4b:6a:93:f5:a2:58:93:c4:62:21:e4:0e:
                    35:32:7b:d8:98:48:57:b1:2c:1b:73:09:eb:60:3b:
                    c5:b2:53:7e:73:44:63:32:d8:34:5f:4f:4d:57:73:
                    b6:1e:95:98:18:34:7a:ae:d2:43:f3:e2:44:43:22:
                    1e:95:a4:c9:24:f8:d4:40:90:2b:2b:ef:be:57:6e:
                    57:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5D:E0:5F:81:75:F6:C6:67:05:FC:E0:7F:62:70:D5:34:C9:B7:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3b2770f-b0f5-3bb7-9b43-2dd2ef450e51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:133::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:03:02:cb:d1:f4:7b:90:4c:a6:98:15:56:11:88:16:04:15:
         6f:33:46:1f:df:5a:1d:98:ad:3f:90:41:b8:ae:07:e8:f2:9c:
         4f:40:e1:7f:3d:4a:23:ad:b8:fc:70:7f:b8:78:95:a5:40:6a:
         f0:e6:51:c5:62:49:da:fe:65:ba:64:bb:df:a8:65:f0:b1:c1:
         69:70:03:81:42:ec:b9:94:83:e1:61:f7:05:ce:b4:ba:92:70:
         41:73:47:7b:47:44:54:02:28:6d:3b:92:94:30:08:c5:c4:a8:
         8d:34:2a:dd:88:34:ed:12:e7:46:80:df:f9:3b:fb:66:68:64:
         7b:68:13:f1:67:d2:57:6c:2e:2b:7c:f5:2c:65:dc:d2:58:d0:
         dc:58:34:53:6f:64:8b:3a:fb:e8:bc:64:8b:76:04:ab:09:2d:
         33:a0:db:47:8d:86:22:fb:f5:23:7c:7c:a3:cd:d7:de:a5:2e:
         ee:d3:c0:f3:54:95:a7:7a:f8:96:54:d8:30:b9:5c:24:6b:2b:
         2e:06:41:c2:fa:e2:11:7d:bd:0e:50:e2:f9:92:16:57:ab:6a:
         68:dc:2f:01:82:cc:8a:42:7f:d7:77:6b:0e:93:8b:fc:3d:1c:
         ea:41:d0:5f:49:b0:89:53:f8:6c:f2:7e:52:18:a3:a2:15:42:
         e0:c8:d5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:31 2024 by rpki-client on console-ams.rpki-client.org