Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/194d811d-948a-3956-8670-6a186e65f4fa.roa
File:                     194d811d-948a-3956-8670-6a186e65f4fa.roa (raw, json)
Hash identifier:          RqrovLbr6WXdzDW+zmn9lirqV20EVTDIXW0+lfwxKu0=
Subject key identifier:   52:AF:D0:3E:33:2B:91:BC:45:B1:01:68:73:F6:CB:12:AD:D0:32:CD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845D933CE4B19739D90F0E88880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/194d811d-948a-3956-8670-6a186e65f4fa.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     59460
IP address blocks:        2001:470:53::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:ce:4b:19:73:9d:90:f0:e8:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=a7df442d-7b93-4629-96bf-25f023c550c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:94:34:47:08:30:69:29:de:de:4d:ec:9d:
                    a1:e4:63:8c:52:a3:8e:ef:47:79:ca:62:0d:08:69:
                    ad:36:6b:a7:03:90:6a:ae:7a:7a:77:13:aa:31:ee:
                    98:0d:de:9f:47:74:34:d1:f1:6f:db:61:f7:af:3d:
                    b6:2a:36:9f:27:dc:d6:84:4c:a3:cf:6f:bd:50:8b:
                    0e:bb:ee:16:4d:fb:25:be:6f:d7:24:b7:36:63:af:
                    5b:38:59:51:d0:42:39:ce:c6:74:77:9d:8b:18:14:
                    b6:a7:f1:67:b9:f0:f7:b9:02:19:94:55:a3:f7:55:
                    c0:8b:60:bc:f6:c0:5e:a5:d4:3f:bf:59:48:eb:6b:
                    83:b0:0f:05:bc:0e:54:f4:c4:bd:d0:90:6c:a7:f2:
                    2b:1d:62:70:f0:15:72:a7:a3:57:1b:f5:2d:aa:6d:
                    1a:ce:07:0f:b0:67:cf:1d:3b:ce:a4:1b:7f:85:37:
                    1a:62:c5:3f:3c:00:fa:54:67:a0:a6:b6:b6:99:9a:
                    95:4d:9e:04:ad:e5:ee:cd:3b:c3:56:aa:cd:45:cc:
                    6f:40:14:80:8e:c0:9f:2a:93:5c:5f:d5:07:29:cd:
                    89:0b:41:be:99:44:8a:d6:f1:2c:22:a4:83:ca:b1:
                    cf:77:03:69:c5:3d:88:6c:d4:8b:8d:dc:aa:94:47:
                    ca:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AF:D0:3E:33:2B:91:BC:45:B1:01:68:73:F6:CB:12:AD:D0:32:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/194d811d-948a-3956-8670-6a186e65f4fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:53::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:b9:ca:7e:62:e2:b1:93:b4:23:db:96:cd:74:9a:a7:15:5c:
         52:52:73:fb:77:a3:a2:f4:a9:62:c8:b3:95:d0:c2:c6:59:c1:
         9b:59:08:47:e0:71:06:9e:e4:8b:fa:a4:b1:0b:9a:d0:0e:fb:
         20:0d:62:9c:4e:d8:cc:1c:2d:91:21:ea:f6:85:38:38:b0:18:
         cd:4e:2e:96:4c:72:b1:ef:f0:bc:ee:d6:59:9f:b6:87:80:9e:
         17:b5:05:55:7c:fe:87:51:ec:b9:4a:9f:b7:de:51:6b:3d:72:
         9a:2a:da:69:93:f8:51:f9:fe:48:49:1b:d5:a9:64:67:34:66:
         ac:93:ca:13:be:e0:1e:55:e5:07:04:a3:03:22:61:58:35:7e:
         3c:2f:5a:fe:c6:d5:7d:45:24:ae:78:45:f5:57:1e:f9:92:61:
         cf:00:34:70:8d:bb:a4:91:b9:34:68:04:c2:08:d1:49:f8:92:
         85:aa:fd:f1:6e:78:ac:12:59:64:45:87:d7:1f:73:6b:82:aa:
         37:ce:16:1b:9d:a7:bd:a8:79:b7:64:1b:a2:28:b4:70:c9:86:
         b0:88:03:04:94:af:ca:e2:65:8f:98:fb:f8:fb:99:26:8d:dd:
         fb:ab:b7:dd:81:d1:71:75:cd:04:d6:31:33:63:34:dd:e1:52:
         98:3c:e2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:52:43 2024 by rpki-client on console-fra.rpki-client.org