Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0919f3cc-a2a1-3c20-871d-35d3ee4d414c.roa
File:                     0919f3cc-a2a1-3c20-871d-35d3ee4d414c.roa (raw, json)
Hash identifier:          zgS8JEEWx/rKMLMdrqtxhTn90WLUc/I5CfVVUTOwMGw=
Subject key identifier:   69:E7:5E:F0:E7:E4:07:3F:2F:4A:09:BB:D4:56:38:FD:AA:8F:DB:00
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844FB6F0C50017CDCB5BABFBC00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0919f3cc-a2a1-3c20-871d-35d3ee4d414c.roa
Signing time:             Fri 23 Feb 2024 02:30:47 +0000
ROA not before:           Fri 23 Feb 2024 02:30:47 +0000
ROA not after:            Thu 23 May 2024 01:30:47 +0000
asID:                     215684
IP address blocks:        2001:470:a4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:6f:0c:50:01:7c:dc:b5:ba:bf:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:30:47 2024 GMT
            Not After : May 23 01:30:47 2024 GMT
        Subject: CN=0463780a-285c-4c91-9958-0b9bfbb5dfa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:30:b2:84:84:1d:ff:b5:6e:5d:a1:52:dc:ed:
                    f9:19:fb:87:9e:11:fa:80:21:2d:d0:ec:d1:1f:ae:
                    cb:44:e8:2b:df:92:9a:a4:ce:dd:16:ca:03:cb:4b:
                    4c:1b:2e:d0:28:25:59:f0:d1:b2:8b:dc:70:aa:92:
                    a1:22:55:50:ad:00:7b:19:37:79:7a:55:9c:67:fe:
                    2e:30:21:57:08:60:fb:a7:6c:b7:2d:c2:3c:98:36:
                    b1:fa:5a:89:73:f2:f7:25:9f:d2:33:93:d3:d0:7c:
                    b3:a2:df:c6:03:10:e4:f2:7a:5f:07:87:d8:08:94:
                    c8:b5:ca:55:4e:a6:1d:10:af:cd:ce:f1:ac:6d:53:
                    4f:93:e9:6e:05:97:7e:12:43:5d:cc:65:79:8c:63:
                    1c:6c:00:a9:fb:af:32:df:43:f4:10:8c:95:4e:97:
                    36:7c:16:95:5e:4f:4c:64:f5:91:7e:7d:6b:82:7a:
                    a1:af:0e:2a:75:ff:0a:c7:7e:8a:9f:c6:86:1b:f3:
                    84:21:da:31:cd:c5:b6:99:41:08:63:fe:6d:71:33:
                    7d:f9:c3:ac:9a:ee:23:b8:6f:0c:e3:36:3a:92:ad:
                    90:5d:7a:b2:70:15:30:94:cb:2e:a5:77:75:8e:3f:
                    bc:b1:0f:32:89:a6:ee:0f:95:77:c8:ce:6a:d2:cd:
                    82:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E7:5E:F0:E7:E4:07:3F:2F:4A:09:BB:D4:56:38:FD:AA:8F:DB:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0919f3cc-a2a1-3c20-871d-35d3ee4d414c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:a4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:97:7b:e7:16:87:91:6f:43:e1:48:5d:43:71:45:1d:fa:42:
         80:94:70:3e:b3:27:b3:80:47:8b:b7:ae:1f:98:f0:b8:37:12:
         e7:cc:cd:4c:6e:d0:21:2f:0c:16:37:9e:a6:de:b4:03:41:f0:
         49:07:9d:3e:d5:7c:11:4b:24:33:39:aa:99:ea:e6:c3:ee:ec:
         d0:06:fc:07:b5:49:12:83:ff:90:42:00:d8:5f:4c:ce:1b:87:
         bf:f6:23:dc:10:32:b1:d6:a7:c6:1c:15:36:00:cc:ee:74:07:
         a7:c8:8a:a5:fe:33:69:69:98:94:b6:ed:62:b1:4d:6a:24:8f:
         d1:c8:30:8c:45:ef:1b:f9:3c:c7:e1:f5:8e:c1:b9:a2:ac:21:
         9c:e2:4b:9d:6e:22:50:2a:8c:fa:37:1b:c1:cf:69:fd:78:1b:
         92:eb:4c:e8:9c:db:e1:d5:18:53:70:75:76:7d:d5:d6:0f:e5:
         54:4e:21:6b:db:81:26:4a:44:08:da:74:af:15:7d:1e:82:9a:
         4f:10:8d:82:9a:59:61:6c:86:1b:32:c4:8b:8e:40:58:7a:02:
         65:7c:ea:5f:3b:a1:42:0a:03:7e:bd:4d:44:76:35:89:27:0a:
         39:7c:ef:8f:91:e3:33:e3:ee:ea:33:76:9e:b6:ea:0c:fa:b2:
         18:35:8f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:02:15 2024 by rpki-client on console-fra.rpki-client.org