Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3feb7b3c-376f-3720-b133-99587846c604.roa
File:                     3feb7b3c-376f-3720-b133-99587846c604.roa (raw, json)
Hash identifier:          JksbbU6KRp+rJp93gLPfq4ZNhD44bjfeuBfxg9UYDP8=
Subject key identifier:   03:00:E0:09:7A:78:53:CF:3D:E0:4B:A1:D1:72:2F:89:11:8F:1F:44
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D01BC64EA6337AAD1983C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3feb7b3c-376f-3720-b133-99587846c604.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     49984
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:1b:c6:4e:a6:33:7a:ad:19:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=47a8a5ed-f599-486d-adb9-3e60eaa77ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:00:d7:44:d2:24:fc:42:d1:cb:43:db:4c:b8:
                    88:de:c6:a1:80:70:2a:9f:ea:a3:bc:3f:8a:df:0a:
                    57:96:b1:26:b3:f4:09:90:c0:3d:6f:cd:8b:11:a3:
                    eb:d0:0e:07:01:fc:62:0e:0d:3a:8c:99:6f:a3:dd:
                    bb:1a:77:2a:67:2e:fd:79:d9:23:32:9b:8d:8e:74:
                    4c:16:f3:cd:34:72:f8:a7:a8:a2:32:a7:aa:54:37:
                    74:1a:67:33:3d:0e:25:4c:ea:6e:11:8c:a3:fa:08:
                    b2:42:5d:0b:6e:2b:f7:59:40:24:1f:d9:9b:15:a8:
                    15:2e:28:d6:05:a3:91:32:13:0e:8b:8e:44:9f:ed:
                    81:d6:21:6f:22:3f:e7:0d:a8:bc:8f:59:59:f7:53:
                    a9:d4:13:c7:03:78:93:94:fc:78:bc:e7:a1:07:ff:
                    f0:ab:db:88:a1:ca:cf:6a:62:20:ad:22:1b:a5:63:
                    4c:3b:d7:10:d0:ed:4c:77:a5:a7:ca:d9:01:2c:1b:
                    e0:3e:97:f5:bb:e7:a5:64:73:f3:12:4c:59:1b:25:
                    70:af:f1:8d:69:7c:37:2d:82:74:49:45:cb:24:26:
                    a0:57:c0:4c:92:f8:02:0d:d3:59:e9:b2:1f:67:e0:
                    2d:4b:f8:f2:14:81:74:fb:04:3d:0b:6a:05:de:8c:
                    5a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:00:E0:09:7A:78:53:CF:3D:E0:4B:A1:D1:72:2F:89:11:8F:1F:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3feb7b3c-376f-3720-b133-99587846c604.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ee:9b:a3:2e:59:a4:f5:a5:19:de:6e:6c:d2:bc:17:e7:f2:
         df:39:dd:a3:1a:b8:ec:1a:11:28:68:59:79:b8:23:2f:f7:6d:
         35:5a:b0:dd:ba:0e:75:3f:54:c9:62:f5:92:1e:1e:76:29:30:
         f3:6a:2f:a7:18:bc:4c:d1:59:ee:1c:0c:a9:b2:e6:ce:1a:80:
         1a:1a:ab:35:63:00:3b:79:de:b0:96:fb:79:c5:49:32:89:f6:
         b7:b4:13:65:6a:dd:97:98:03:b9:94:60:38:b8:f6:06:b8:6f:
         33:c7:34:61:dc:a5:cd:a5:0d:f6:ed:6c:76:3c:f0:08:11:81:
         ce:66:40:4e:5a:1c:7b:46:3c:0a:7e:47:2a:c3:13:6c:26:e0:
         60:77:ee:48:c9:dc:85:08:84:18:73:2b:d2:76:63:83:a4:6a:
         af:32:ec:8a:f4:62:83:26:51:a3:33:8c:38:e9:a8:39:0d:ed:
         6f:ea:16:2f:8e:89:6d:d0:07:97:4e:81:f3:a8:7d:97:76:6a:
         cf:5e:00:26:01:ce:b6:a8:a6:b4:66:5f:ac:da:60:eb:98:5b:
         ec:d6:f7:01:4e:37:4b:21:ad:8d:b8:3e:76:dd:9f:e5:ae:89:
         38:e7:5a:d3:4d:06:96:48:34:69:1a:22:17:a6:42:df:4f:20:
         38:d3:93:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:48 2025 by rpki-client