Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ad3907b2-32a3-3611-b9fc-0820dd81460b.roa
File:                     ad3907b2-32a3-3611-b9fc-0820dd81460b.roa (raw, json)
Hash identifier:          orfR6u7zSO5KJPZ3pidgnei3zjUtl6FD7YepAHihrwE=
Subject key identifier:   AB:E6:0D:7F:89:5E:35:F6:F7:3D:E7:7F:6B:8A:AE:0C:32:BA:8E:50
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858465A7717A4905A796DDE689AC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ad3907b2-32a3-3611-b9fc-0820dd81460b.roa
Signing time:             Thu 27 Jun 2024 20:15:43 +0000
ROA not before:           Thu 27 Jun 2024 20:15:43 +0000
ROA not after:            Wed 25 Sep 2024 20:15:43 +0000
asID:                     400686
IP address blocks:        2001:470:2f3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jul 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:5a:77:17:a4:90:5a:79:6d:de:68:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 27 20:15:43 2024 GMT
            Not After : Sep 25 20:15:43 2024 GMT
        Subject: CN=837f6acd-4819-4257-a259-032b0c3dd746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:28:85:9e:20:4f:09:b6:de:c1:bd:65:69:fa:
                    d0:4e:3f:40:0a:a6:8d:79:b7:5f:0f:d5:e0:a7:e5:
                    bf:86:5a:7b:55:0d:1e:13:88:98:ff:fa:d9:64:46:
                    63:d0:c4:b3:1f:48:95:04:93:26:6b:2d:80:14:ec:
                    f5:d5:36:f2:d4:5d:b1:33:ba:0c:b0:18:45:a6:ef:
                    5d:97:70:da:05:94:3a:3d:1c:95:50:4f:01:b9:86:
                    b3:1b:3f:86:99:0b:14:ac:35:e1:57:66:ab:40:4b:
                    02:df:1a:8d:9d:6d:c9:74:75:32:da:79:af:1c:65:
                    de:eb:b0:96:1d:80:af:06:6d:33:1d:ba:51:ac:0a:
                    1d:d8:42:a3:3e:bd:93:d3:34:5e:b3:a0:ed:da:2c:
                    8d:f3:1d:09:bf:c0:a7:0b:2d:6b:8e:e0:e7:19:20:
                    b9:f0:b6:69:d2:72:20:ef:73:e9:9e:46:53:d2:f1:
                    47:15:d8:6f:3b:4d:ee:b2:45:03:09:f6:12:90:c4:
                    56:52:d5:5f:69:b7:90:1b:be:fc:66:2e:e8:b6:ea:
                    0b:7d:da:5e:e0:8e:74:8f:fe:b8:e3:ce:58:4e:2c:
                    42:5f:f2:83:55:47:b8:35:9a:26:99:79:0f:4d:41:
                    65:1f:b7:8b:ef:3d:40:45:0a:31:4e:13:6c:94:5c:
                    79:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E6:0D:7F:89:5E:35:F6:F7:3D:E7:7F:6B:8A:AE:0C:32:BA:8E:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ad3907b2-32a3-3611-b9fc-0820dd81460b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2f3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d5:ac:90:5f:48:58:f3:57:43:c0:01:9c:78:5e:2d:bd:0a:
         92:89:51:28:a5:16:8b:f8:fc:94:72:31:e0:b2:ef:a2:5a:22:
         6c:92:75:4e:c8:48:e3:a8:71:c5:47:b1:8c:6e:d3:3a:11:52:
         22:f9:f4:72:5f:41:57:cc:97:de:3a:ea:64:db:11:5d:cf:2e:
         39:04:68:ad:73:36:1e:4a:fb:ce:02:10:2b:46:6a:9a:db:16:
         04:4d:14:5f:58:9a:56:8c:25:4e:e4:d3:4d:7a:84:a6:44:3d:
         5c:4c:0e:bd:18:c9:48:77:c3:55:02:91:74:57:39:2b:73:1c:
         37:b6:97:43:12:79:08:5c:1f:3b:7f:d5:f8:1b:10:10:11:85:
         17:5c:c0:0c:dd:15:0b:8f:8b:7e:b7:b8:9f:1b:4e:77:d5:b9:
         ab:53:01:93:87:15:af:94:86:32:97:96:41:4e:98:76:cf:1c:
         47:d5:51:18:ef:90:71:1e:c0:e1:a3:8a:15:cb:8f:26:ba:8b:
         19:2b:5d:a6:b1:b3:35:63:86:ec:97:92:79:48:23:34:94:6f:
         0e:7d:a0:a8:b3:fc:ff:e5:72:ec:be:d1:f2:12:99:bf:a0:be:
         4a:73:91:32:c0:ef:47:80:53:b4:0d:1b:9d:f4:75:96:2b:40:
         ac:61:16:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 03:41:01 2024 by rpki-client on console-fra.rpki-client.org