Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/18af8d26-9834-3e39-b56b-860187bc0d7c.roa
File:                     18af8d26-9834-3e39-b56b-860187bc0d7c.roa (raw, json)
Hash identifier:          X/9GVFftK7nd7X4eVph1nPCaE5mVPwMehdQxtZUxCLI=
Subject key identifier:   95:D1:F1:16:BD:5F:CA:15:F9:CB:E0:62:C4:2B:1B:38:BB:4E:E4:B6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B59AFC944CFE81C34AD80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/18af8d26-9834-3e39-b56b-860187bc0d7c.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     398358
IP address blocks:        2001:470:1c1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:59:af:c9:44:cf:e8:1c:34:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=4a841467-701e-4bd6-82d5-d4b19dd4d95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7c:92:95:0e:a0:13:5c:46:0b:2b:6a:e5:ad:
                    18:f8:b9:99:b8:2a:ae:62:3a:7b:bb:64:2a:cb:3e:
                    9f:79:35:70:db:0b:1e:55:37:a5:e2:3b:15:86:38:
                    bc:24:fa:54:b6:33:25:d3:14:5c:ff:2d:cb:d5:0f:
                    c2:e3:93:58:ad:b7:09:c8:c9:47:1d:dd:01:fc:aa:
                    30:d9:38:b7:51:f0:29:bf:ba:36:0c:c0:56:ee:17:
                    5c:c1:01:92:ef:a8:20:3c:e7:6f:df:43:ed:e4:c1:
                    f6:7b:9c:3d:9d:64:b8:3a:ef:85:b0:b0:f1:fa:a4:
                    27:2b:af:02:d1:ec:ca:77:cc:21:47:c4:f3:28:4e:
                    5e:c4:8b:de:86:7f:22:3d:94:82:f8:29:17:b3:56:
                    f4:5c:d5:ea:a7:e3:d0:12:ec:15:ef:3f:75:e6:99:
                    c0:e5:fb:ab:27:d2:3a:e6:ea:73:42:c3:3f:6c:d7:
                    fe:61:4b:bc:a3:08:bd:66:d4:89:0c:6d:8f:4f:fa:
                    0d:97:0c:d8:f2:d3:cf:76:03:de:6f:0f:31:18:fe:
                    14:39:20:e0:b3:62:c7:3e:ef:1c:fd:48:e8:dc:f6:
                    06:e7:50:78:ec:88:14:b1:20:57:2a:76:80:74:23:
                    7e:c5:e7:ba:87:0e:27:ac:c9:a7:d1:68:91:89:af:
                    85:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D1:F1:16:BD:5F:CA:15:F9:CB:E0:62:C4:2B:1B:38:BB:4E:E4:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/18af8d26-9834-3e39-b56b-860187bc0d7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:77:72:ad:93:3f:1f:5a:27:af:f5:fa:a9:cc:74:f2:40:89:
         64:07:84:64:f4:f4:36:2d:68:30:6e:d4:28:e3:7f:85:6e:3c:
         51:58:f2:0a:60:ba:31:3c:ba:98:d0:45:ba:84:0c:6a:a7:42:
         32:82:e1:23:c8:8f:ae:a7:a0:1e:0f:3a:9e:5f:22:8c:84:7a:
         fb:4b:5d:f7:e2:36:5f:64:45:3f:f7:45:12:5a:3a:ea:11:da:
         fe:9c:e4:2e:42:ef:f9:15:68:c1:21:1a:4f:1a:df:71:b6:45:
         08:73:dd:2d:f8:ff:39:17:f7:9b:f3:f4:ca:ce:df:70:dd:d5:
         4b:8e:74:6d:cc:fb:bd:b7:4a:c8:1e:cd:2e:6d:fc:4e:5c:23:
         82:7d:9b:f7:d7:a3:d6:b7:92:e6:a5:8a:f6:93:55:af:5d:26:
         4d:b3:d3:44:e8:89:56:8f:ae:35:14:85:4c:bf:32:78:f7:7a:
         6b:d0:b2:ba:76:46:86:c8:6d:51:b6:c8:4f:94:06:78:79:e5:
         d8:95:4a:df:07:68:ff:b4:b7:90:c4:62:f2:ec:02:89:e1:91:
         e9:0a:84:1b:fd:62:d1:83:4a:b8:ce:57:60:54:2c:83:c7:03:
         87:af:19:69:3f:26:c3:14:5b:ba:2d:da:59:16:ce:64:fa:06:
         c9:0c:dc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:34 2024 by rpki-client on console-fra.rpki-client.org