Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92bcef3d-b73f-37f1-bfff-9877cfbefa5d.roa
File:                     92bcef3d-b73f-37f1-bfff-9877cfbefa5d.roa (raw, json)
Hash identifier:          serwcgOFKPBjpw/JjI1rQeqfs/Z4m/b6obcNWwVUYtA=
Subject key identifier:   64:C7:4C:6E:57:1F:CC:CD:7B:34:AD:1C:6A:F7:07:2E:DF:63:51:8E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845D933C75CD1627B6D2276DB00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92bcef3d-b73f-37f1-bfff-9877cfbefa5d.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     26679
IP address blocks:        2001:470:60::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:c7:5c:d1:62:7b:6d:22:76:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=0711b7e9-2bb1-4a16-83b8-9fa316c1cfcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2e:eb:d2:3b:46:ec:61:2f:6f:e9:b7:c1:24:
                    fb:f3:bd:65:34:a1:3a:cb:8e:c0:27:df:e4:00:f2:
                    f8:6d:e7:fe:e7:4a:0d:00:23:86:3a:23:9d:f7:9b:
                    0f:c4:1f:ce:62:17:2d:38:36:47:bb:40:a2:4a:b5:
                    cf:88:8b:03:bd:42:a3:8a:71:9e:8d:68:73:00:27:
                    40:9a:a9:da:a7:87:34:06:f9:85:f3:4d:e8:45:26:
                    17:a4:2c:09:52:f2:d4:2f:96:10:34:b0:da:70:31:
                    be:59:87:20:e8:57:dc:fe:e4:7e:ea:eb:df:6e:41:
                    39:93:66:2e:ad:50:a4:94:07:c0:de:8e:c2:42:9f:
                    99:8f:7d:3c:46:e2:dc:5e:37:c9:c6:ab:0e:5e:58:
                    2a:c0:c4:f2:9e:f1:b3:42:15:19:09:f4:60:96:bc:
                    18:a8:c0:ae:1a:df:fd:8c:a4:22:5f:a8:5f:b0:50:
                    0e:d6:6a:ad:c6:ae:87:df:8f:d1:ad:63:2b:b9:25:
                    ae:ef:cb:04:a3:ae:16:ec:97:48:1a:56:bf:55:4c:
                    03:9d:23:1e:c2:13:d0:3e:a7:3d:b3:8d:35:13:7a:
                    1e:33:10:69:ab:bc:8f:2b:07:09:36:bc:65:91:7d:
                    71:b9:f8:ea:fd:7d:f9:c6:3c:5a:da:91:64:17:86:
                    8a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C7:4C:6E:57:1F:CC:CD:7B:34:AD:1C:6A:F7:07:2E:DF:63:51:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92bcef3d-b73f-37f1-bfff-9877cfbefa5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:60::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:2c:26:aa:52:25:5c:6d:f6:1f:73:28:15:17:d8:ed:9b:9e:
         d2:7f:dc:2b:59:c5:26:22:b7:f5:38:74:86:1a:e7:6f:70:45:
         a1:ee:86:ea:27:02:6d:6a:f3:c4:6c:44:5f:83:4e:3d:db:c6:
         b9:90:37:47:8f:a2:85:3e:66:2c:d1:1d:4b:19:68:21:d0:b9:
         35:b7:da:17:c6:25:0b:c6:59:1b:40:49:50:b6:48:c0:77:e1:
         56:31:ac:0f:e9:ba:2e:d9:cf:f6:73:bc:9d:62:8e:42:b9:cd:
         1e:7b:e6:05:b8:84:7e:e1:de:4d:b5:74:1d:a1:e7:78:b3:bb:
         ca:9c:74:f7:3b:24:60:ad:06:c3:34:38:97:c1:b8:2a:53:cf:
         2a:a4:f1:f6:73:eb:c5:f1:1f:f4:35:66:49:3b:7d:d5:73:10:
         2a:3f:1c:6e:8d:7d:dd:38:5d:ef:0d:fa:64:41:76:3c:4e:50:
         35:98:7a:2e:ae:8e:84:20:30:79:74:f8:ba:3a:46:42:4b:34:
         b8:b3:9c:ae:44:76:bf:80:6d:44:fb:07:0e:5f:3b:1f:aa:c6:
         db:4a:4f:c1:96:ab:01:f8:b4:1a:2c:02:a2:4b:e8:eb:ab:7e:
         38:08:3a:bf:6a:b0:96:a8:67:71:52:ff:e0:ee:3d:1e:99:1b:
         cd:c6:cc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:52:46 2024 by rpki-client on console-fra.rpki-client.org