Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1048d88b-8309-3f5f-9d3b-cdb555b881db.roa
File:                     1048d88b-8309-3f5f-9d3b-cdb555b881db.roa (raw, json)
Hash identifier:          ad3NoyYXneCHw7lzWbjPKo1M3EGlsZioJSFjSblFUv8=
Subject key identifier:   85:27:D7:2F:EE:F9:AA:10:1E:7F:35:08:49:8F:E3:C1:3A:BD:7A:E7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B66B15CC285A2E9DEC340
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1048d88b-8309-3f5f-9d3b-cdb555b881db.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     59895
IP address blocks:        2001:470:244::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:66:b1:5c:c2:85:a2:e9:de:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=1dbae875-4588-444c-9f07-224ed94e8492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:98:61:4e:76:a4:5d:e7:46:e3:57:b1:56:fd:
                    d9:4a:89:0b:38:62:00:c7:66:3f:c2:1e:d9:49:48:
                    bf:dd:f7:a6:7a:b9:15:39:8a:7e:0a:7a:04:ac:71:
                    65:ed:cf:f0:4a:be:49:93:3a:85:9c:29:0a:7c:7c:
                    4b:0a:5f:3d:df:a7:8b:38:fd:9f:6d:9f:66:8f:2b:
                    4f:47:a6:ba:d9:41:cb:30:c0:7f:57:b3:3d:5f:ee:
                    3e:d3:9c:ab:14:6b:10:1a:1d:f5:08:c0:b3:7e:91:
                    f7:ca:00:82:8f:b5:01:e8:59:b9:d6:8a:cb:21:48:
                    00:cc:91:46:69:ae:eb:62:0f:07:c0:74:62:42:69:
                    cf:08:66:78:67:72:63:2a:8b:9d:49:f8:b4:60:1d:
                    45:40:8e:71:14:27:ec:d0:d6:30:59:47:db:f2:9e:
                    5d:49:19:fc:3c:ca:68:9a:b8:27:ac:57:a8:67:71:
                    74:d5:1e:44:b5:5b:2c:fd:e7:a6:c2:58:a5:4c:ec:
                    6e:df:48:33:81:95:82:89:6c:aa:d5:90:fb:c0:65:
                    86:6e:9f:57:f3:50:13:df:aa:f1:3c:02:19:64:6f:
                    96:0d:7c:c5:47:76:8e:76:b2:5b:b2:3b:95:c4:76:
                    a4:bc:28:2b:e0:29:25:60:16:1f:5f:89:35:6a:f1:
                    6f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:27:D7:2F:EE:F9:AA:10:1E:7F:35:08:49:8F:E3:C1:3A:BD:7A:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1048d88b-8309-3f5f-9d3b-cdb555b881db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:244::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d3:22:d1:b2:15:4e:20:96:2a:58:1d:88:ac:e0:b2:87:41:
         55:9d:77:84:f7:17:57:e3:11:6c:b8:39:de:85:82:99:f2:07:
         72:ad:c8:0b:c9:2a:d8:2d:a6:1f:1c:44:7f:6b:97:72:7d:81:
         e9:27:45:53:48:26:82:d4:2f:22:62:72:a4:7d:78:02:e9:75:
         5e:ee:fb:0e:fd:e6:49:18:ba:c8:1f:e1:ff:bf:66:b9:af:94:
         da:6f:4b:3e:6a:18:29:43:0f:9e:bc:14:f1:98:2e:9a:80:78:
         ca:0e:c1:28:dd:02:d2:d5:30:10:ad:4d:b0:ec:d6:19:83:35:
         aa:ad:f3:c9:ac:71:f5:90:99:b2:4d:48:b1:be:03:10:ba:f2:
         da:ed:13:47:c1:f4:c7:96:2c:ad:f4:90:d6:83:18:31:bf:9f:
         cd:92:38:62:3a:e1:c1:34:d0:9a:15:07:84:69:43:51:3d:89:
         55:d2:bb:0b:5d:0f:b0:cf:97:8d:44:8f:c8:e0:0d:45:40:b6:
         8d:40:20:cb:77:04:a3:ea:b3:c3:a2:4a:0a:63:02:aa:a0:50:
         40:90:62:f9:47:51:a4:80:3f:3f:4f:46:36:03:c7:00:41:e8:
         1f:a3:01:20:95:51:17:a1:d9:9f:c7:07:60:21:fa:40:81:2a:
         d1:66:be:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:34 2024 by rpki-client on console-fra.rpki-client.org