Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dd94f673-b462-390a-a0e5-295e920f8c78.roa
File:                     dd94f673-b462-390a-a0e5-295e920f8c78.roa (raw, json)
Hash identifier:          NMDW3RZX3T4MWxw/s15+0cpjHxp0cJEMTJ2xHeUvUJQ=
Subject key identifier:   8C:23:F5:02:5E:15:C6:01:87:DB:82:A2:9A:E7:9E:08:62:B9:6F:CE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845DD639DD537120C8CACB7F900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dd94f673-b462-390a-a0e5-295e920f8c78.roa
Signing time:             Tue 14 May 2024 01:00:24 +0000
ROA not before:           Tue 14 May 2024 01:00:24 +0000
ROA not after:            Mon 12 Aug 2024 01:00:24 +0000
asID:                     203760
IP address blocks:        2001:470:2a1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:dd:63:9d:d5:37:12:0c:8c:ac:b7:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:24 2024 GMT
            Not After : Aug 12 01:00:24 2024 GMT
        Subject: CN=bba12f25-ad4a-48ee-b05e-55956a8d405e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:aa:e5:99:02:11:ea:9e:37:dc:8e:12:4f:
                    4d:a1:41:f6:b7:39:67:90:46:c6:8d:95:4c:b7:dd:
                    5d:98:b5:58:0b:38:e1:95:31:8f:4e:39:98:3f:9c:
                    96:2a:a8:f5:22:3b:29:1d:5d:1c:e6:24:a5:f8:74:
                    7f:1f:b6:7f:22:0e:4f:ca:bd:b1:96:6d:a8:78:ea:
                    fd:49:b3:02:d6:e5:fd:1d:51:26:ec:cf:49:ef:d5:
                    44:d6:e6:36:7d:bf:33:82:87:95:4c:e7:71:44:28:
                    7a:6d:2f:c7:a3:61:c4:1a:34:4b:5b:1b:4d:97:f8:
                    a8:7f:6c:11:10:0d:7f:0c:62:41:1f:2c:f2:10:f7:
                    37:b8:dc:f7:6c:78:6c:79:35:04:a9:87:59:20:d2:
                    de:15:b1:2f:e2:cf:06:20:44:80:ed:e2:83:87:7e:
                    87:7f:cb:51:1a:44:c9:00:9b:c7:3d:e9:b4:b7:e9:
                    9d:ed:af:74:23:d9:da:f8:e3:e3:cf:cb:e6:58:3a:
                    70:c4:ed:4e:85:33:f4:04:d5:42:e6:c2:16:ca:c3:
                    2b:50:d2:e0:ed:37:d3:2b:e0:d6:78:72:53:a9:db:
                    c3:9c:b0:70:37:b3:3c:80:1a:a4:8a:8d:d8:97:f6:
                    41:b5:3a:3d:16:b4:35:d1:95:13:c5:d7:e2:9a:34:
                    21:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:23:F5:02:5E:15:C6:01:87:DB:82:A2:9A:E7:9E:08:62:B9:6F:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dd94f673-b462-390a-a0e5-295e920f8c78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:26:fb:87:1c:48:28:c6:cf:1e:59:db:6d:42:c1:7b:e8:97:
         e6:7f:ba:c5:68:e4:24:2d:f4:f4:1d:05:f7:4c:a7:b2:5d:a5:
         ce:1b:ea:4d:7e:7f:1b:db:43:74:d3:96:a8:6a:fc:cb:ec:63:
         a2:67:94:25:01:f5:5a:10:c9:a7:c7:1a:36:e0:95:7d:64:8a:
         a2:2e:1c:34:20:35:3b:39:ec:e8:c5:8a:52:b0:4b:17:85:4e:
         db:d6:c7:0e:bd:52:70:fc:d1:bc:88:7d:4a:f8:c3:44:7f:6b:
         1c:4f:d6:fc:02:e8:0f:52:d2:ea:e2:43:5f:23:b3:5e:14:f8:
         44:28:d0:69:3f:4c:8a:45:b1:bc:0d:56:ba:8b:84:38:df:09:
         b7:e8:c4:fd:95:4b:17:ee:37:ba:d7:d7:f7:83:58:34:e2:58:
         3a:6f:9e:90:a8:a7:9c:7d:8b:2d:fc:44:54:06:82:6a:9a:1f:
         e3:71:05:bf:07:82:8d:a3:88:fe:32:f4:57:97:cd:76:5f:52:
         3e:18:d9:b5:f8:0c:0a:28:51:c0:ee:d8:e2:06:7b:25:9a:21:
         32:08:50:80:ab:46:04:eb:64:08:65:6c:32:74:70:10:a6:78:
         36:05:5a:4b:c7:a3:3d:90:4f:99:eb:de:bb:b5:a3:52:5b:f7:
         9d:3f:05:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:52:20 2024 by rpki-client on console-ams.rpki-client.org