Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3026b249-874e-3cb9-9e6c-3bbb4a28028c.roa
File:                     3026b249-874e-3cb9-9e6c-3bbb4a28028c.roa (raw, json)
Hash identifier:          es4yfMNvX32lAKMrmm3P99mkqHHve/uVyyCmjLrH5nE=
Subject key identifier:   14:35:15:00:8F:B3:00:7E:0C:4F:17:12:BE:D8:2E:A9:A6:1D:FF:8A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B6C7D19B9501284DA2900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3026b249-874e-3cb9-9e6c-3bbb4a28028c.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     215684
IP address blocks:        2001:470:296::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:6c:7d:19:b9:50:12:84:da:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=20e2897c-dabd-4e6d-805a-0b71c962eff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:af:f0:80:ab:76:ed:35:07:41:75:96:1e:8a:
                    e6:4d:ef:dc:f9:2d:16:4a:a4:59:6a:53:4d:bc:4b:
                    be:99:4d:9e:94:f4:46:98:f6:da:10:1d:98:2a:c6:
                    bf:32:3c:22:54:4c:e2:21:3a:5c:01:d1:7e:6b:72:
                    b3:b4:ad:5a:53:78:d6:fd:b5:94:10:f1:13:03:e6:
                    9d:f0:6b:a2:4b:34:2d:99:67:7f:3b:e4:7e:1b:db:
                    55:7f:ac:db:ea:c1:3e:74:65:89:80:d3:eb:e2:82:
                    fd:2e:8b:ca:fd:39:4a:b6:d4:f6:7d:cf:15:31:de:
                    a1:07:41:c0:71:5f:74:25:ef:23:2f:9b:9f:93:5c:
                    9f:eb:67:9d:d5:27:92:a4:c1:a8:74:ac:3c:d3:f8:
                    1c:cd:e5:38:eb:71:17:41:bd:45:0d:07:c0:bb:87:
                    3f:dd:ed:6a:62:dd:95:c4:e2:31:0f:d7:e8:a2:6c:
                    83:dc:11:27:a8:bc:44:5c:87:da:d2:49:3c:15:3a:
                    16:6f:a4:be:cd:00:3c:36:fe:43:65:a0:d3:61:50:
                    55:92:6b:7f:9f:39:f9:2b:53:01:1b:86:d6:cc:9d:
                    9b:5f:c6:14:99:af:04:20:38:c6:f8:61:c1:5f:b2:
                    e1:a7:10:61:9e:10:94:f4:0c:42:18:5e:25:a9:79:
                    31:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:35:15:00:8F:B3:00:7E:0C:4F:17:12:BE:D8:2E:A9:A6:1D:FF:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3026b249-874e-3cb9-9e6c-3bbb4a28028c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:296::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:4a:07:d2:c1:a2:16:7d:af:21:f2:0d:5e:85:a6:f6:43:a7:
         4c:c4:55:8f:0f:c3:29:7a:80:8c:1e:27:50:dc:78:77:70:63:
         3b:96:0e:2d:cb:2e:71:4c:4c:3f:7e:6d:53:95:3b:08:af:62:
         72:5b:d7:89:d5:fc:f8:45:56:b8:a9:c1:a1:e9:93:a8:b5:11:
         fa:41:c2:ba:ee:5a:35:09:a6:fe:d1:b0:7a:87:da:32:69:3d:
         8b:15:cb:80:08:28:2b:b5:3f:37:f8:33:0e:91:7f:e2:57:74:
         56:0b:82:5f:26:d3:8e:6d:0e:4a:d6:8e:29:3e:f7:ce:ba:fb:
         cc:53:e3:84:09:bd:a9:6d:b3:ba:99:f2:f4:64:79:30:50:e8:
         6d:6c:42:a5:37:6f:77:a6:a7:6a:ca:02:c3:b0:78:65:67:88:
         24:4a:f4:f1:da:8a:1c:57:69:69:e1:4d:42:31:41:10:f9:67:
         e1:c4:81:5b:23:af:27:b1:e8:54:9e:e8:c4:56:00:79:af:59:
         4a:68:cf:05:f0:b5:f7:29:0e:7b:ac:9e:69:f8:3c:e2:3c:0c:
         d0:f6:e3:82:f3:61:77:c4:38:d6:d8:c4:e9:a5:69:7c:44:33:
         e4:1f:3b:49:91:14:0c:b2:b9:25:dd:cf:a0:13:0c:52:b2:65:
         72:53:ea:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:34 2024 by rpki-client on console-fra.rpki-client.org