Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26ad342d-1149-3508-9f51-3813ece6dea9.roa
File:                     26ad342d-1149-3508-9f51-3813ece6dea9.roa (raw, json)
Hash identifier:          wk4PpdJTOhDK8e+2ba/JL1jFQV3dBb3gTYZih4JBS4I=
Subject key identifier:   88:E5:48:03:A8:E5:C0:C0:78:2E:2D:25:14:C5:BB:2F:38:35:B0:80
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845C5A8ED7F3F5DAB7B6389B5C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26ad342d-1149-3508-9f51-3813ece6dea9.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     983
IP address blocks:        2001:470:294::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:ed:7f:3f:5d:ab:7b:63:89:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=42a5e99e-f21a-4b78-82a8-263bf4124d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b3:57:86:a7:8d:08:f7:d2:17:88:6b:3f:cd:
                    f5:c5:49:07:7e:bf:98:24:6d:ef:e7:dc:9b:1b:72:
                    68:be:fd:2f:c8:fd:30:e2:0f:e4:12:ff:0d:86:0d:
                    f7:8b:a9:50:46:c8:91:79:47:1e:27:2e:78:39:f7:
                    60:1c:48:d2:e8:02:77:1d:c6:39:c0:34:79:95:63:
                    2e:c7:0a:15:cd:96:c8:f3:a2:01:03:de:36:33:f4:
                    ce:11:35:d2:11:c2:4f:37:03:b3:f1:61:7e:51:9f:
                    a8:65:32:aa:f1:02:2e:fb:a0:10:d1:6d:7e:7f:fb:
                    51:48:71:81:b8:08:f8:5a:bd:63:48:19:88:fb:af:
                    e3:3a:13:cd:49:2a:df:ce:6e:db:d4:08:ff:00:90:
                    3b:fa:c5:6c:6a:4b:e3:33:ee:e7:f2:c8:d1:28:36:
                    3e:14:42:e3:96:0a:58:29:ca:7e:e9:b4:d6:25:3b:
                    c7:96:ea:77:06:58:2f:4c:cb:ce:68:28:89:5d:ef:
                    85:50:89:5c:1e:2c:29:eb:83:90:88:95:b2:66:cb:
                    1b:48:78:35:c8:92:ca:b1:df:bf:2c:77:ce:b4:99:
                    d3:2c:c9:d2:2f:f9:dd:1f:37:25:40:a0:3d:74:c2:
                    c9:d5:5a:6a:68:d6:f3:15:f7:4a:16:5b:3d:8a:cf:
                    28:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E5:48:03:A8:E5:C0:C0:78:2E:2D:25:14:C5:BB:2F:38:35:B0:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26ad342d-1149-3508-9f51-3813ece6dea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:294::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:ce:f0:71:b8:4d:47:be:22:7d:a0:3a:5d:07:5e:43:3a:61:
         18:0f:c0:51:3a:14:be:ec:45:ef:f3:80:fe:33:d5:ef:0c:d1:
         9b:40:6e:f2:2a:a3:6b:f0:fe:35:a8:44:41:8e:30:26:49:61:
         00:7e:10:a9:47:4e:02:5c:d2:95:5e:d7:8b:38:44:db:cc:ba:
         37:ca:2a:e1:3a:71:c1:02:a1:7f:ff:16:50:76:ff:7a:05:0a:
         89:37:4b:0f:52:1e:08:25:7a:81:55:8e:94:28:c5:16:99:2a:
         ae:87:a3:1c:5c:00:7d:6d:83:7f:c3:2d:a2:ab:64:b4:01:d1:
         b8:68:1f:a0:fe:73:ac:49:23:e1:fb:69:e9:57:9d:df:e7:cc:
         bd:f0:b0:4c:b1:08:e2:e6:37:40:eb:76:b9:8d:92:74:e9:9c:
         33:d3:83:f3:61:64:94:ac:31:b6:5e:6f:cc:ed:3e:1d:9a:d6:
         d3:d9:78:67:c6:e1:ae:40:85:98:59:8e:84:24:75:eb:e3:11:
         b2:cb:81:99:70:07:04:7f:33:00:7f:b0:60:2f:46:ae:16:c2:
         9a:93:1d:07:40:5b:f2:b7:f1:99:ba:dd:54:e7:48:02:cb:1b:
         6a:cf:41:b9:ed:c9:a7:da:91:86:8d:63:25:b3:7e:fb:36:c0:
         86:0d:ef:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:09:26 2024 by rpki-client on console-fra.rpki-client.org