Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6142388-e8df-3153-ae91-c8e66d3117bf.roa
File:                     f6142388-e8df-3153-ae91-c8e66d3117bf.roa (raw, json)
Hash identifier:          Dcs7a3X9FMLXgQcZxoTtufEBz/LFQhbR3x6XIiudfL8=
Subject key identifier:   F8:72:42:C7:14:58:A4:9A:49:9B:37:DA:76:6A:6F:78:99:BF:14:CB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584733608A0DE2C6E412473AD000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6142388-e8df-3153-ae91-c8e66d3117bf.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     62371
IP address blocks:        2001:470:aa::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:8a:0d:e2:c6:e4:12:47:3a:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=065f8bc7-996f-43ef-ab4d-a88ab6b546bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3e:f2:41:34:ed:ed:fb:a5:4f:94:84:69:27:
                    39:e4:88:19:eb:55:64:0b:59:e1:ec:66:a4:6a:d6:
                    8b:39:6b:12:4f:a1:bc:ed:cf:99:16:0b:da:56:bc:
                    c7:ba:25:68:c7:cc:29:40:3a:ea:62:5f:f9:13:15:
                    e2:31:e1:22:31:03:f2:ba:4d:cc:4d:b7:00:de:bb:
                    ea:58:b0:25:7d:c8:de:06:a1:72:14:ac:9e:e0:3a:
                    85:47:72:cd:ca:56:10:e2:1d:8c:2e:e2:75:22:f1:
                    be:63:bb:da:da:e0:b0:89:56:ac:28:0b:20:b6:80:
                    f9:36:75:ec:e0:b2:e9:c6:3b:f8:d1:fe:ec:6d:e0:
                    d2:8c:d3:dd:c8:67:21:8b:4e:6d:83:dc:b8:f9:30:
                    bf:94:a5:53:ad:a9:4b:c7:79:13:98:c8:32:9e:e3:
                    69:a9:c0:da:36:5a:6a:58:30:2c:ee:77:c0:52:4a:
                    ab:08:5a:7b:ad:15:01:bd:c5:94:35:81:42:26:70:
                    17:68:73:f2:de:88:d8:71:36:38:83:2f:29:a1:ad:
                    b5:64:a0:24:7a:1d:f9:29:37:a1:ad:ce:ef:db:fd:
                    20:a3:38:f8:c3:39:70:bc:90:7d:90:bb:56:55:14:
                    54:c1:a5:55:84:6d:05:d1:7d:51:67:8f:6f:96:ac:
                    e1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:72:42:C7:14:58:A4:9A:49:9B:37:DA:76:6A:6F:78:99:BF:14:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6142388-e8df-3153-ae91-c8e66d3117bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:aa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:f6:85:63:1e:90:fa:9b:5f:aa:64:29:27:d4:1f:72:65:f7:
         54:aa:18:14:96:65:38:bd:7d:ff:54:aa:e8:4d:55:9e:8f:eb:
         3d:bf:2e:7f:47:ba:82:91:c1:f6:b3:72:89:18:78:8a:0b:fb:
         17:84:b2:b7:c3:8f:04:6f:91:ab:bc:c9:e6:fc:05:7b:5e:28:
         f7:ca:97:15:db:bb:ee:bd:bb:04:f3:b7:5d:89:92:68:0c:41:
         47:dd:e6:29:60:30:7d:b6:ad:80:b7:15:86:65:27:81:8d:a0:
         35:40:6b:43:78:75:59:32:cc:2a:40:ec:23:15:76:44:99:2a:
         68:ed:61:f1:ad:f1:a1:e8:63:db:bc:83:6c:7f:0d:ea:26:76:
         2f:c0:30:d6:09:39:ec:e3:ae:17:b1:7f:b4:99:0a:3a:5e:84:
         bb:4d:82:87:cb:c6:7a:2d:5a:ed:9e:ee:d1:80:98:4a:fe:e4:
         6a:57:76:b4:01:e3:e6:6a:7b:67:ee:10:34:4d:d0:16:8a:6e:
         01:38:1f:77:fa:eb:79:56:e9:72:53:54:83:ca:d9:8d:9f:19:
         bc:43:05:d3:b7:df:58:f7:54:7d:93:8e:d2:72:74:f3:58:3a:
         85:0e:e7:0b:88:c2:4c:71:76:1d:c7:7c:11:cd:0b:a6:7f:35:
         86:b9:c1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:40 2024 by rpki-client on console-fra.rpki-client.org