Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/00107759-6e8e-3975-92d6-fc28f5299042.roa
File:                     00107759-6e8e-3975-92d6-fc28f5299042.roa (raw, json)
Hash identifier:          sYNqW9sOqPoMzI19P+oX4AfppPtDOFhQ9atPuGZmges=
Subject key identifier:   6F:B3:B9:54:69:7A:45:F6:31:E9:02:A5:0B:23:81:27:D8:04:88:FC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584843BEB08EFE6FD982457336C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/00107759-6e8e-3975-92d6-fc28f5299042.roa
Signing time:             Fri 20 Dec 2024 02:30:16 +0000
ROA not before:           Fri 20 Dec 2024 02:30:16 +0000
ROA not after:            Thu 20 Mar 2025 01:30:16 +0000
asID:                     35598
IP address blocks:        2001:470:212::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:43:be:b0:8e:fe:6f:d9:82:45:73:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec 20 02:30:16 2024 GMT
            Not After : Mar 20 01:30:16 2025 GMT
        Subject: CN=36451474-c2ca-4659-93b1-2785448e7426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:df:5c:87:a2:68:19:94:87:1d:45:94:a6:
                    35:37:1e:f3:bc:46:f4:6c:e2:50:19:5a:15:1b:b0:
                    b3:ec:d6:3b:67:14:fa:70:29:38:8e:72:72:ea:22:
                    99:a9:dc:c9:6a:d9:26:26:43:45:14:d6:19:a9:48:
                    04:f9:0a:60:f0:1c:3c:03:f8:8d:74:6d:42:35:18:
                    8c:1a:6b:f3:f2:44:ef:c5:71:19:97:e4:23:91:89:
                    29:23:cb:f4:28:1c:84:04:67:5a:9c:24:22:21:f2:
                    20:23:36:08:5c:f4:e6:ac:5b:9e:79:77:32:ae:82:
                    e7:5c:21:93:1f:4b:fd:c0:35:ed:c0:1e:67:89:0b:
                    9f:8e:e9:0b:53:aa:eb:5f:5d:bb:90:42:47:64:1c:
                    9d:7c:5d:86:22:4e:fc:6a:93:56:96:f8:45:b6:87:
                    b7:76:b0:e7:0a:3a:ad:1e:9d:34:af:92:d7:38:1f:
                    46:75:58:91:05:68:64:57:43:21:ce:3d:3d:58:0d:
                    13:e0:e1:d3:07:f3:9c:de:c6:0f:9c:6c:64:89:17:
                    ca:0c:c2:17:ad:d9:8e:ab:3a:aa:2e:03:c6:99:ac:
                    9b:bb:f6:77:27:d7:69:bd:38:9a:3f:b5:fa:07:99:
                    8b:2a:2b:ab:dc:b9:74:62:b0:3f:81:50:76:cc:4d:
                    6d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B3:B9:54:69:7A:45:F6:31:E9:02:A5:0B:23:81:27:D8:04:88:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/00107759-6e8e-3975-92d6-fc28f5299042.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:212::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:7d:27:a6:07:e5:e6:ca:e4:f5:1c:3a:9e:84:ea:be:86:fa:
         55:75:d9:16:ae:04:90:1a:ef:9b:e4:b0:bf:66:f5:e7:e0:16:
         12:17:aa:66:20:26:67:b0:c1:f7:13:3c:eb:2c:5d:18:44:c5:
         22:05:70:ce:8d:bd:5d:9a:36:c9:ce:7e:2c:5d:3d:d5:1b:b0:
         53:34:b2:d4:3e:8b:10:2d:fc:ab:ea:16:d5:68:ef:e3:90:be:
         b3:f8:5f:08:ec:85:78:1d:c5:dd:07:b1:76:79:c1:9a:6b:9e:
         c0:b7:76:29:a3:64:0f:d5:0a:0b:3d:8e:ad:c0:99:8b:05:b3:
         da:3b:dc:e2:fa:65:02:45:84:78:d1:58:76:95:dc:80:b1:52:
         dc:aa:7a:b1:b0:08:5d:73:fc:02:56:09:b7:e4:5a:4c:2e:32:
         94:7f:9f:92:af:5f:7b:6c:e3:a3:90:6e:04:55:4c:f6:c5:a0:
         7b:1a:f2:55:b4:eb:ee:d5:7e:a2:46:1b:83:8e:d5:67:1e:19:
         c7:8a:ce:48:8b:41:80:89:74:3d:c8:16:81:15:28:76:65:93:
         e7:ee:a2:36:ee:31:30:fc:f5:23:c2:be:78:4f:1d:43:ae:d8:
         c9:74:e4:cd:e5:65:76:e5:ed:af:89:ec:f3:50:6b:62:bf:25:
         6c:7b:ad:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:49:35 2025 by rpki-client