Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0db7e480-b6ec-37af-8548-65a50da554be.roa
File:                     0db7e480-b6ec-37af-8548-65a50da554be.roa (raw, json)
Hash identifier:          WFain83gUXA4DuWWZ0wEAIZPG2vSw1PPextbFbQ2KH0=
Subject key identifier:   C6:D7:13:B6:FA:15:C8:9A:37:DF:3B:C5:54:38:67:09:FC:11:0E:CA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B79523FD8458DB9EF1680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0db7e480-b6ec-37af-8548-65a50da554be.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     12025
IP address blocks:        2001:470:31a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:79:52:3f:d8:45:8d:b9:ef:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=346f7f24-f677-4655-9fcf-9ad47839a0cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d9:0a:fd:65:ea:53:f7:cd:d6:c7:5b:95:c9:
                    ba:b7:f0:5c:f6:2b:80:ef:e4:16:d9:8b:d0:d8:8f:
                    9d:d6:c0:52:59:ff:36:a6:03:83:5e:d0:4e:29:e1:
                    a9:da:14:52:2f:ad:9c:2c:2b:6b:96:5c:8b:77:c3:
                    a0:4b:fa:01:79:fe:60:8d:5b:af:22:ff:9e:eb:e5:
                    b8:1e:67:90:9f:92:79:51:7e:47:9b:2d:d8:7c:4e:
                    ff:a8:88:7b:9e:54:5a:b4:a8:7f:d4:d6:43:99:20:
                    1f:29:1e:ac:d3:4d:b0:c9:c4:83:44:fe:4f:03:cf:
                    8f:85:41:df:71:3c:80:93:80:6d:bb:e8:f3:d5:19:
                    5f:72:0d:44:c3:1e:6e:50:f6:e7:61:5c:89:01:6e:
                    03:31:7a:b8:4c:32:af:8d:ad:3e:c6:1f:99:2b:61:
                    fb:e6:f7:9e:25:18:a8:eb:a0:3f:90:f7:db:1e:0c:
                    59:d8:37:4c:4e:30:47:c6:15:65:57:57:ed:96:b7:
                    82:75:b7:70:6c:a7:4e:ef:5e:d8:82:d2:94:9c:9c:
                    f1:95:a0:0e:1a:58:fd:73:f5:f6:0e:fe:e5:e6:16:
                    73:ff:89:b6:51:22:d8:90:9e:8c:0e:5f:0a:5c:2c:
                    3a:ee:05:d5:4b:bf:cb:23:64:49:ce:92:e2:66:ef:
                    1e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D7:13:B6:FA:15:C8:9A:37:DF:3B:C5:54:38:67:09:FC:11:0E:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0db7e480-b6ec-37af-8548-65a50da554be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:31a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:57:00:b2:24:d7:97:9f:9b:0f:c2:2a:7a:49:7a:1f:74:df:
         20:c0:15:e0:e8:54:79:fb:8c:ae:af:6d:92:3c:5b:e1:2e:ef:
         f0:06:81:ee:09:d8:a1:78:67:c9:ea:70:aa:2d:7f:9e:f9:35:
         09:e4:89:0e:c0:47:08:a7:6d:92:7a:0a:a0:d5:ae:78:ef:a5:
         a2:a8:76:c8:99:b3:68:1f:1f:a6:24:4b:0e:05:f6:87:ee:3e:
         68:a6:04:f2:f3:6f:fb:65:fb:ef:6d:74:6c:c5:a3:59:82:eb:
         61:0f:11:fe:c5:9d:24:b6:e1:72:d7:83:56:51:40:e8:8f:8c:
         ac:39:31:7c:b2:0a:85:71:98:b5:9c:76:65:2e:a4:b6:6f:9c:
         e5:5a:ac:56:40:49:be:19:7f:19:c5:6d:63:66:7e:64:15:35:
         6b:51:33:11:f7:df:2f:50:bb:79:2e:68:0e:c9:f9:91:cc:d3:
         26:9e:46:75:1c:6d:dd:2f:3a:97:fd:7c:64:6a:31:63:55:37:
         6b:5c:05:cb:4f:27:36:b8:27:9e:b6:9b:3e:3a:1f:eb:cb:23:
         c3:fe:af:25:9d:85:53:a6:2f:a9:48:a9:a5:18:23:e7:38:51:
         71:16:3c:c7:e7:e9:24:14:f8:d1:db:4a:bb:db:12:49:90:6b:
         49:e0:95:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:21 2024 by rpki-client on console-ams.rpki-client.org