Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/07c2bd9b-2990-3161-9f21-fb86b2576d29.roa
File:                     07c2bd9b-2990-3161-9f21-fb86b2576d29.roa (raw, json)
Hash identifier:          F2K3HMY2OHxoOvpkQ11BMrzDbxT0TdnBdkJz4y26Ce4=
Subject key identifier:   F0:04:29:09:B6:27:47:C4:90:2F:6C:44:22:CB:4B:8A:B2:36:18:46
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845B65D2D53C480F1A5FC9EB7A8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/07c2bd9b-2990-3161-9f21-fb86b2576d29.roa
Signing time:             Tue 30 Apr 2024 01:30:56 +0000
ROA not before:           Tue 30 Apr 2024 01:30:56 +0000
ROA not after:            Mon 29 Jul 2024 01:30:56 +0000
asID:                     17473
IP address blocks:        2001:470:2ef::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b6:5d:2d:53:c4:80:f1:a5:fc:9e:b7:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 30 01:30:56 2024 GMT
            Not After : Jul 29 01:30:56 2024 GMT
        Subject: CN=62377896-bb18-408d-9d1c-008e7b45b96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a8:8b:f1:56:ce:e1:1e:12:46:9e:52:f4:99:
                    89:00:cb:45:c7:1e:51:90:78:6c:b6:4d:64:55:ef:
                    21:00:7e:18:de:73:66:6c:8e:00:67:22:57:93:a1:
                    df:55:da:47:e2:7b:0c:85:80:c1:f1:b2:d0:1b:34:
                    fa:bc:da:81:45:83:ab:5e:f5:66:25:21:1a:2e:07:
                    ef:be:08:f1:b5:8b:98:b8:ee:62:8d:bc:85:7d:5f:
                    0f:75:68:cf:a2:ec:7a:ca:c0:59:6a:79:c3:f2:7f:
                    84:c7:5a:7c:1e:79:f3:40:8b:53:10:b5:ba:35:50:
                    55:96:77:5e:11:df:38:8b:89:8f:18:5c:55:65:eb:
                    ab:00:ef:22:22:bd:55:c7:60:ae:54:77:6b:a4:50:
                    ee:5e:f9:f5:7d:1c:18:2d:70:aa:43:8c:e1:7b:e9:
                    45:d1:be:c2:3b:b9:ba:e5:d2:e1:09:1b:28:62:33:
                    c9:1f:17:0b:c4:28:10:a3:51:42:1a:61:3a:f0:0d:
                    83:8a:13:dd:8a:be:ee:cc:41:cc:45:ec:67:03:ed:
                    de:ac:74:75:84:43:14:cb:ea:96:9e:46:36:4c:b9:
                    e2:d5:71:2c:81:b7:05:51:ff:2c:99:43:63:b4:f5:
                    ce:ab:34:60:c9:81:4a:a1:5c:2f:42:51:ea:5b:63:
                    05:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:04:29:09:B6:27:47:C4:90:2F:6C:44:22:CB:4B:8A:B2:36:18:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/07c2bd9b-2990-3161-9f21-fb86b2576d29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2ef::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:82:d3:f4:26:5b:a6:4c:c0:7b:2b:2d:f3:82:42:91:80:48:
         5f:00:40:45:37:9d:8a:bd:00:63:e6:07:fa:60:a4:bc:de:25:
         b1:7f:35:ad:58:e3:50:5d:f5:cf:0e:9e:85:0d:26:1a:d6:a9:
         d2:56:b3:55:e1:d6:e3:4d:08:47:cd:d8:83:74:fa:4e:fe:ed:
         de:8b:a5:f7:1b:ff:c3:c6:17:22:da:79:29:05:65:bf:5d:9b:
         ab:3f:0f:58:23:83:48:db:3b:b0:e1:88:7b:3b:87:5a:81:6e:
         57:f1:cb:1b:a1:1b:fb:c5:0b:bd:5d:ec:ef:15:32:c0:7e:b3:
         e6:88:f0:7a:ac:cf:ed:99:fe:80:fd:04:ec:29:4c:51:d2:de:
         88:b3:24:e5:24:1e:58:ca:36:95:6d:45:b7:10:3c:f0:f1:e3:
         e4:19:d1:49:ae:79:64:f1:73:d2:1b:14:d3:13:b6:f1:61:d0:
         c6:12:90:d6:39:f8:b6:64:65:b6:ad:0c:84:dc:f6:5c:61:2d:
         99:f7:5b:6e:d6:19:02:95:c9:a1:7c:81:64:7f:e2:dc:fd:2d:
         52:45:30:ba:96:a0:39:56:27:2f:23:f1:bd:02:19:10:bc:30:
         4b:02:a9:14:6d:2f:06:e1:a3:0b:f4:aa:6f:e5:d0:9f:4b:17:
         c6:14:ab:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:52:42 2024 by rpki-client on console-fra.rpki-client.org