Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3fc5b14e-5a71-32ea-adfc-f8409dc3e1b7.roa
File:                     3fc5b14e-5a71-32ea-adfc-f8409dc3e1b7.roa (raw, json)
Hash identifier:          WQx4hV07C9zXaNFPzqy0Iw9/CNSpLezayAKGh/QD65Q=
Subject key identifier:   F1:B1:A5:B1:AB:67:D8:75:F2:AD:75:1F:B6:88:F4:65:EB:55:33:F9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F465531451FF9C74A422CA80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3fc5b14e-5a71-32ea-adfc-f8409dc3e1b7.roa
Signing time:             Tue 20 Feb 2024 14:00:31 +0000
ROA not before:           Tue 20 Feb 2024 14:00:31 +0000
ROA not after:            Mon 20 May 2024 13:00:31 +0000
asID:                     397945
IP address blocks:        2001:470:235::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:65:53:14:51:ff:9c:74:a4:22:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 20 14:00:31 2024 GMT
            Not After : May 20 13:00:31 2024 GMT
        Subject: CN=de92ead2-eb96-40b0-9195-2f57274c7e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:79:a2:3c:d1:c9:a9:0d:0d:97:d5:30:7c:ca:
                    80:7c:25:0c:8c:d0:9c:3f:60:b6:62:7f:ed:93:81:
                    2e:ca:39:8a:2c:ba:1b:59:51:f0:59:60:31:44:70:
                    c4:1a:10:9c:0b:e2:f5:4e:7a:26:ee:e5:67:0d:77:
                    c3:6e:f6:a9:c2:fd:20:7e:e5:08:9b:dc:74:73:45:
                    41:24:ce:81:80:b7:1e:4e:c5:94:61:3e:a7:cf:90:
                    b4:fe:05:54:4d:8e:78:55:cf:cf:83:3d:ee:98:23:
                    f7:12:92:47:cc:cc:94:e7:98:96:b6:7f:17:38:18:
                    c8:fa:72:44:2f:45:87:36:dd:c7:85:65:9f:17:b5:
                    89:a7:e6:17:53:a1:db:d7:14:2c:cc:64:61:80:6e:
                    ca:bf:75:b0:06:87:a7:3d:52:50:8b:c6:b4:5c:32:
                    f9:8a:bd:b3:77:3a:8c:8b:60:59:51:82:97:7e:29:
                    9b:b9:f1:e9:7a:51:f3:1e:ce:19:38:0f:3f:1c:a2:
                    7b:79:f2:02:00:9b:52:68:09:79:7b:87:60:c2:2b:
                    34:07:37:aa:57:e1:d3:1d:bd:00:67:83:19:8c:a1:
                    d4:53:ee:dc:47:24:c7:f8:35:d0:46:8b:ad:d0:9d:
                    1e:0c:03:14:8c:6a:64:84:c0:7f:4a:a1:02:c2:c3:
                    55:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B1:A5:B1:AB:67:D8:75:F2:AD:75:1F:B6:88:F4:65:EB:55:33:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3fc5b14e-5a71-32ea-adfc-f8409dc3e1b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:235::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:37:d0:fe:fd:ca:e4:2e:e4:93:2a:93:2b:63:22:d5:66:cd:
         da:16:66:00:db:94:9b:21:db:13:20:b3:35:59:35:e4:b1:33:
         68:7d:69:6b:c1:1b:18:b6:f4:3e:a8:22:1b:da:a3:37:52:da:
         74:10:5d:47:98:36:7f:a2:fe:2c:61:79:71:e7:5e:d4:55:a6:
         2c:f5:e7:b4:fb:a6:33:40:64:3f:ac:9f:e0:6f:4f:c6:47:d7:
         f3:3d:10:71:a3:6f:ae:13:d8:cf:51:7f:33:23:8c:ce:9b:35:
         3d:32:b9:2e:bc:32:d6:9b:fb:00:cb:45:5b:42:04:64:3b:92:
         b3:d8:22:cb:7c:a2:f5:20:c0:02:4a:11:78:5a:ad:92:59:64:
         5b:dd:07:1e:8c:93:90:4a:6f:31:9b:e3:76:80:eb:05:d0:d7:
         58:60:f5:88:ae:9f:04:28:39:42:2d:12:9f:bc:6e:43:a7:e7:
         0f:20:2f:d0:18:ce:dc:67:3a:3c:87:3b:26:45:7d:15:e9:b5:
         b8:03:06:66:f7:6f:5d:90:40:b9:a5:08:57:a7:83:ea:ec:47:
         94:2b:bc:2f:ea:48:f8:06:22:1d:14:9d:6b:b9:9a:45:15:5d:
         ef:54:d8:a3:64:20:9e:10:e3:c3:03:15:99:aa:f6:3f:44:44:
         d5:75:b9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:20:36 2024 by rpki-client on console-ams.rpki-client.org