Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3fe31b04-19a8-3ae4-8d97-bebb185e0385.roa
File:                     3fe31b04-19a8-3ae4-8d97-bebb185e0385.roa (raw, json)
Hash identifier:          WZEapABcSE2lgUSFukykLUyNnq1NzGcjMnEVtP+G19s=
Subject key identifier:   52:BF:B1:A4:67:FC:90:16:37:42:EB:62:E7:E3:CE:2C:3D:DF:B8:50
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D02148D77B8FB0395B0960
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3fe31b04-19a8-3ae4-8d97-bebb185e0385.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     31942
IP address blocks:        2001:470:69::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:21:48:d7:7b:8f:b0:39:5b:09:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=e9bc5529-310e-4115-8f2c-cfc6117a6af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9e:96:14:a7:83:9d:fe:95:f9:05:68:f9:75:
                    23:04:f9:95:7c:c2:c2:cb:3d:85:8b:06:1d:e8:68:
                    45:a2:4e:23:f9:11:92:c3:78:d6:af:e5:05:8b:17:
                    06:a3:bf:11:3d:80:82:b2:4b:5e:6d:77:de:fc:11:
                    21:6f:50:f9:79:ad:f7:1c:39:b5:fb:01:46:a0:46:
                    d0:06:e5:45:a9:ca:14:fe:aa:42:de:56:48:97:85:
                    98:f8:08:b7:94:1b:0f:51:cf:1b:fa:20:88:da:3f:
                    7d:0e:b7:ad:4e:46:4d:5d:ad:a0:85:6d:58:a6:53:
                    c3:e1:35:7f:9a:85:35:1f:3a:b2:dc:04:86:f4:88:
                    7f:cf:b9:dc:f6:51:8f:00:60:92:83:6d:38:48:17:
                    fb:72:ab:8e:1c:e8:b2:cb:a0:5a:7a:37:57:25:95:
                    13:08:5b:da:0b:27:5f:f0:c8:e3:0f:e4:b6:01:10:
                    ae:6f:d0:94:b4:a1:10:92:9e:dc:d3:cf:86:d9:38:
                    f6:01:46:96:13:c4:27:4c:ce:57:ae:7f:57:cb:1c:
                    60:a2:a0:07:42:1c:51:33:fb:63:36:46:91:4e:19:
                    77:eb:5d:c3:17:cc:c4:56:2f:48:ad:22:0b:01:47:
                    a5:4d:45:2b:7c:6d:20:d7:a7:2d:32:3a:ff:84:b0:
                    ff:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BF:B1:A4:67:FC:90:16:37:42:EB:62:E7:E3:CE:2C:3D:DF:B8:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3fe31b04-19a8-3ae4-8d97-bebb185e0385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:69::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:93:60:32:a7:b3:3b:00:6c:7b:f3:7d:ff:c9:9a:39:94:cb:
         12:03:b8:c3:bd:65:55:ed:eb:8d:0d:69:1a:ba:3a:d2:4b:e6:
         1d:49:0a:80:16:65:98:13:1e:68:95:c2:c3:37:ed:c3:04:d8:
         4a:9e:d8:a3:fa:9a:e4:06:37:b0:2e:2c:03:ba:82:1b:11:0d:
         3b:7b:ac:c5:b5:53:8f:53:00:ac:2d:75:b6:e3:7f:94:e9:2d:
         58:7c:7a:9a:53:49:a8:60:c2:79:5e:5f:6a:20:97:57:2f:8c:
         f8:2e:c9:64:ca:b6:f3:f8:2d:34:a8:db:88:dc:ab:ae:f4:76:
         73:27:49:f5:00:4a:7d:34:36:61:1a:96:1e:92:36:7e:87:1d:
         93:a9:ed:36:2d:1f:74:fd:97:77:7c:4c:89:d6:96:56:b8:50:
         3a:c2:95:4a:5b:2a:42:c7:ca:08:6e:5a:bf:ad:a7:7b:26:9b:
         35:e4:9f:3d:ee:ba:f9:c9:c6:bc:cd:db:7f:45:87:32:37:43:
         fb:d8:6e:00:03:81:8f:0c:96:84:0d:01:fd:a0:2a:11:2d:b5:
         a5:ab:01:f8:60:b9:27:7c:71:d7:de:9f:11:55:ae:fc:37:c0:
         94:63:ed:94:19:73:ec:d2:27:8b:89:a2:cd:61:dd:fb:a1:80:
         72:20:a8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:49 2025 by rpki-client