Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/119c94b5-141a-309f-87b8-37be374d16c2.roa
File:                     119c94b5-141a-309f-87b8-37be374d16c2.roa (raw, json)
Hash identifier:          GQXI+fMglOdQvfjXDvA2BOYJIyHbPqJK3RCfo3coEJA=
Subject key identifier:   A0:74:30:15:C9:A5:15:E5:49:D6:DA:6F:44:CD:74:9B:09:32:0C:03
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845A428D732E61A971FEAF5C680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/119c94b5-141a-309f-87b8-37be374d16c2.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     46506
IP address blocks:        2001:470:211::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:d7:32:e6:1a:97:1f:ea:f5:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=cc620da9-813d-498b-9974-0fb78fbcf029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f2:2d:79:1e:34:db:58:cd:4e:8c:08:08:91:
                    1d:cc:34:4d:c3:f6:2a:28:d0:96:2e:79:d6:3a:63:
                    35:73:c0:93:6f:8a:69:9a:65:85:6b:04:2c:41:f2:
                    30:33:ba:db:6f:15:2e:bb:a3:ae:03:b7:1c:fd:5b:
                    66:e8:bd:7b:76:04:f6:ce:77:23:8e:d1:1d:47:39:
                    e1:2b:ad:75:85:f3:aa:fb:80:5b:7b:cd:6c:aa:e7:
                    f7:f9:73:bc:85:21:b9:78:10:b0:26:5a:90:3d:52:
                    6b:1f:f5:c5:da:1b:1b:e6:91:5c:99:35:e3:79:56:
                    d3:c3:b6:be:c0:0b:8c:3c:7e:8b:7b:98:9b:3b:4b:
                    a8:4a:05:3f:9a:13:10:95:b7:30:55:10:a2:6c:6f:
                    0e:39:5c:85:0f:7b:3d:cc:51:8b:a0:d6:88:9f:0d:
                    d7:17:db:99:17:34:f7:e4:8c:fe:9f:05:d4:65:a2:
                    2e:f1:95:c3:67:7f:67:9a:88:b2:0e:f2:c6:08:3d:
                    a1:35:26:62:39:f9:8c:02:8e:c4:88:7a:55:80:af:
                    d7:13:be:5c:42:26:7b:de:db:90:35:32:9e:f7:fb:
                    20:03:9d:15:29:8a:28:df:0c:f7:4f:e4:5b:72:b7:
                    3b:12:b7:a5:06:02:f5:98:80:86:de:04:33:e2:08:
                    56:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:74:30:15:C9:A5:15:E5:49:D6:DA:6F:44:CD:74:9B:09:32:0C:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/119c94b5-141a-309f-87b8-37be374d16c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:211::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:7e:78:8c:7b:9b:03:a9:a4:9c:06:30:4d:fc:70:a3:9c:fd:
         1c:29:76:8c:f8:4b:47:9e:f8:4f:02:b3:15:11:a7:0d:d4:13:
         7d:f3:66:62:68:db:e3:de:09:0f:2d:f2:02:4a:d2:57:5d:a4:
         b1:66:3c:2a:3d:96:04:aa:4f:85:76:fa:46:b7:e6:b5:95:d9:
         35:d4:77:3f:00:20:da:3a:20:bd:2f:13:c1:61:2b:05:e1:77:
         2c:a4:a3:a9:cf:46:50:9a:7e:15:ed:88:ae:8d:f5:94:49:fb:
         bf:41:69:e4:9a:fe:97:65:bc:2e:8b:e4:6f:5b:4f:06:ca:9c:
         da:d5:c5:5e:0b:a8:4b:f4:46:6d:dc:30:a0:f7:29:d3:3f:8a:
         b4:df:25:87:63:d1:0d:96:ab:15:50:88:cb:2e:20:f5:a6:87:
         e8:2d:4f:88:af:1f:d2:49:7b:19:28:71:4f:ef:c6:44:71:d6:
         6f:dd:e6:7e:e9:0b:07:58:30:76:de:e3:3b:e3:e0:da:5d:56:
         40:ba:1d:6f:1a:52:be:51:6c:22:2c:04:fb:0b:cc:1f:cc:8b:
         b5:55:8b:32:02:82:fa:5e:56:70:da:b6:25:67:a4:e9:84:b4:
         0a:6b:a7:84:3c:24:03:c1:1f:a5:f7:78:c7:c0:6d:d6:8b:64:
         e5:1c:8c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:28:37 2024 by rpki-client on console-fra.rpki-client.org