Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f79830dc-9ef3-376e-b26d-fac83df72f1a.roa
File:                     f79830dc-9ef3-376e-b26d-fac83df72f1a.roa (raw, json)
Hash identifier:          ZmzVxVLaRKiLSjv4rDUegia4Zyfp5IC8h7Q0nOu2pi8=
Subject key identifier:   36:36:39:FA:3D:29:01:8D:BA:7E:72:85:6F:89:83:02:5D:A6:89:48
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B54263332DCC11E53A100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f79830dc-9ef3-376e-b26d-fac83df72f1a.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     48971
IP address blocks:        2001:470:15f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:54:26:33:32:dc:c1:1e:53:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=79db9928-8f6b-492e-9196-32c17194d566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e8:74:eb:1a:cf:e5:5e:df:0b:3a:4f:64:80:
                    32:81:42:03:47:5a:ab:16:e1:7d:84:5c:d5:52:94:
                    a6:93:4a:31:04:ff:e0:75:cf:48:bf:7d:7b:02:17:
                    55:f6:a8:20:ff:b5:92:f2:d4:35:be:ed:ca:62:27:
                    3a:44:cc:9f:ca:3e:3e:47:bb:e6:ed:d2:3e:91:65:
                    1f:b3:70:fd:b8:5f:bf:27:03:bb:71:b3:73:51:6f:
                    9b:82:f7:17:25:2a:2d:38:ce:4e:ab:29:e2:ce:46:
                    00:45:c7:38:5c:55:8d:54:5c:04:f0:af:44:90:87:
                    ed:e8:ea:f1:9f:6f:fb:fc:e3:c7:44:67:ff:b4:83:
                    61:69:c4:2f:4e:2a:03:77:16:09:26:76:77:57:8d:
                    ca:b1:cd:48:06:a9:ba:32:d8:7e:9a:b5:3b:a7:c5:
                    df:57:da:3e:ee:aa:27:b6:70:f2:c7:c7:76:d8:55:
                    ee:6e:37:60:2e:f6:19:22:60:01:9e:d1:13:a1:af:
                    b4:e6:75:63:ba:db:2f:d8:41:64:a0:17:de:70:97:
                    c8:58:06:aa:17:49:d8:58:99:a0:fa:cc:0e:95:96:
                    82:48:b6:64:67:54:83:41:26:31:ff:b3:ad:c1:14:
                    d8:66:17:49:69:59:6c:72:39:24:58:65:08:d2:ee:
                    05:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:36:39:FA:3D:29:01:8D:BA:7E:72:85:6F:89:83:02:5D:A6:89:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f79830dc-9ef3-376e-b26d-fac83df72f1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:15f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:32:d5:42:86:95:56:84:2c:f4:41:c7:bd:2d:29:6e:38:fb:
         bd:5d:66:96:9a:93:55:27:ce:6c:19:f6:19:71:68:f8:05:ad:
         01:7d:b7:b7:4a:20:47:7e:d4:8c:65:5c:13:03:39:4a:16:49:
         af:2d:bc:b0:85:7b:95:b9:e1:b4:dd:0c:e2:35:c9:b0:61:7e:
         9b:71:b4:d1:8b:db:08:01:27:42:bb:bc:20:2d:1a:b6:cc:02:
         2e:da:b8:6c:89:4c:eb:9a:6b:67:e3:1a:c4:6b:1d:d5:8b:e6:
         76:c8:1e:2d:d2:1a:aa:f1:a3:07:3d:4a:fb:45:03:bf:bb:37:
         ac:49:e4:fc:3a:d9:25:a2:d5:48:2e:b1:a9:94:b3:6e:58:51:
         42:9e:88:56:35:e9:4b:1e:92:c9:fb:24:3c:be:58:79:72:5f:
         fd:cb:b4:54:d9:8e:cd:8a:d3:f7:85:8f:24:fa:4b:a8:4f:65:
         41:c7:f3:68:43:e0:f8:fb:ad:8a:63:42:0e:ab:f7:d9:5f:c1:
         3e:39:50:46:2b:17:8d:13:80:50:1d:c8:50:20:1d:9c:93:a6:
         68:18:e9:32:e4:02:0c:5b:3e:ff:d5:04:21:78:71:0f:c5:16:
         cb:5c:08:cb:84:91:6e:20:2d:d6:60:6e:dc:0c:1e:fb:07:55:
         28:9f:6e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 21:33:01 2024 by rpki-client on console-fra.rpki-client.org