Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0714e10e-31d0-3e54-bed7-860cf3ea6f61.roa
File:                     0714e10e-31d0-3e54-bed7-860cf3ea6f61.roa (raw, json)
Hash identifier:          r/HHx+/1RN7bqrlZoTVEycugHgk8Xp2b9kRpIwpgwiw=
Subject key identifier:   B5:FF:1B:2F:19:04:08:4A:AE:F7:B3:A6:21:2E:DE:AF:1A:E8:22:35
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D00AF9D265CB51EDDF2640
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0714e10e-31d0-3e54-bed7-860cf3ea6f61.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     30032
IP address blocks:        2001:470:91::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:0a:f9:d2:65:cb:51:ed:df:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=208a5c88-6ec5-4cc3-904d-e21f7f322995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:94:66:3f:03:e2:8a:ed:2a:7f:d0:8b:4a:07:
                    04:65:d6:b5:4b:9c:7d:d2:d6:ab:a5:34:ed:0f:29:
                    94:40:e9:9d:46:11:27:4b:98:eb:9b:1c:bb:6b:17:
                    af:9a:48:b4:9d:4a:f3:ea:43:e1:6c:08:80:34:86:
                    51:b3:01:fe:f7:5a:62:9b:e7:11:f5:e6:80:5b:7f:
                    95:b9:e4:6c:61:e7:d6:e2:9c:af:aa:aa:31:a8:4f:
                    09:5a:af:30:72:52:5f:dd:51:76:dd:78:fa:d1:e2:
                    3c:e8:87:db:ac:f8:89:67:c5:d1:e0:59:17:d6:16:
                    5c:c7:3d:5d:44:75:6c:fb:f3:32:87:d2:bb:6c:15:
                    0d:e9:42:e5:b9:6b:a2:ed:e3:6a:81:0f:e3:83:9c:
                    e3:9b:ec:c0:b0:25:99:24:43:54:35:5a:ba:1a:3d:
                    ae:ff:ee:00:38:07:d6:dd:66:34:3f:6f:15:21:05:
                    76:bd:a4:97:05:ed:e9:bb:bb:a3:ee:65:c2:0c:f2:
                    55:2d:0b:9a:dc:cc:bb:ca:c9:82:01:a6:f2:8a:3f:
                    6d:a2:d7:98:e9:33:e2:70:4c:f7:c2:e2:ee:9f:e7:
                    04:97:63:cb:71:b0:d6:69:16:d2:26:90:43:f0:dd:
                    b0:59:26:fa:fa:38:3f:b1:7d:60:9d:95:98:67:90:
                    b5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FF:1B:2F:19:04:08:4A:AE:F7:B3:A6:21:2E:DE:AF:1A:E8:22:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0714e10e-31d0-3e54-bed7-860cf3ea6f61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:91::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:f3:c4:6a:ca:38:9d:43:8e:cd:f3:91:df:d2:a0:8c:3e:f6:
         a7:c8:2d:4f:0f:35:a9:fa:ca:41:03:97:4b:ef:34:8b:d3:e4:
         77:d3:1b:c7:90:9c:14:12:c9:45:bc:05:92:2d:37:e7:e2:71:
         0c:8d:93:db:bc:dc:b8:a2:d1:3c:ff:4d:97:82:e8:28:d5:3e:
         0c:6a:53:fc:69:d7:b6:c3:ab:87:b0:fd:0d:46:1f:13:43:6f:
         49:f5:a2:f7:ac:e0:d2:2c:63:55:e1:6f:f8:51:64:34:83:a3:
         d8:9f:ab:83:9e:f9:a4:d1:88:fa:4e:a8:bc:f2:84:32:16:c3:
         00:ab:d2:1e:6f:b6:71:6c:d5:6f:be:a5:7b:60:5f:98:c9:ec:
         f2:7f:0b:50:55:99:f0:b5:96:62:f2:cd:bb:9a:e6:33:96:a0:
         b7:5e:e4:20:2c:ea:80:39:3f:8a:62:8e:c4:95:e3:c3:d2:b6:
         c7:eb:aa:66:bb:c9:1f:e8:24:ea:2b:c5:df:7a:82:ac:7d:13:
         7a:0b:e8:49:26:ea:3b:73:34:62:e3:26:95:da:a7:32:df:4f:
         47:04:49:b5:6f:aa:47:65:0f:1f:b8:48:ea:6a:81:23:ee:f8:
         2a:ba:59:39:39:e7:fa:86:f3:dc:0a:42:4e:d6:83:0d:17:72:
         ba:ee:f2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:52 2025 by rpki-client