Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44f4385f-c6de-3739-9741-6b6d2d22c00b.roa
File:                     44f4385f-c6de-3739-9741-6b6d2d22c00b.roa (raw, json)
Hash identifier:          6AevEChtEyBnlNgXY8/wjcWZeYHb0pUyzub/zfYQZA4=
Subject key identifier:   6A:D7:24:BA:4D:BC:B8:C5:22:08:C9:94:5D:A8:DB:63:9C:80:80:3B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845AB3261C783F88020F34298A8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44f4385f-c6de-3739-9741-6b6d2d22c00b.roa
Signing time:             Fri 26 Apr 2024 01:30:49 +0000
ROA not before:           Fri 26 Apr 2024 01:30:49 +0000
ROA not after:            Thu 25 Jul 2024 01:30:49 +0000
asID:                     22299
IP address blocks:        2001:470:2eb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ab:32:61:c7:83:f8:80:20:f3:42:98:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 26 01:30:49 2024 GMT
            Not After : Jul 25 01:30:49 2024 GMT
        Subject: CN=9528ca2d-fe9a-4310-8e68-8235c4b3bf73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:b4:ec:77:bd:9a:2e:34:97:f5:1d:d3:e6:
                    58:14:7d:68:fc:70:58:0f:2e:25:47:df:de:8f:28:
                    cc:d6:d6:20:3f:87:2d:be:ed:a2:43:df:86:25:c0:
                    5e:69:06:b9:2c:7d:90:57:cf:73:62:f7:5c:f2:0d:
                    95:83:44:e3:89:d9:e0:17:f6:52:94:87:e2:39:ff:
                    4e:9f:af:dc:0f:3e:d5:b4:32:cc:f6:58:b8:cb:05:
                    b8:67:07:b2:de:55:bb:de:9d:c3:21:1f:36:25:14:
                    7d:4e:84:ca:ba:bc:67:37:f1:46:49:1b:e1:ea:88:
                    05:30:ff:8a:18:a8:6b:ff:94:0e:ff:31:e6:dd:1c:
                    f8:81:25:ce:41:ed:f4:8c:6a:74:70:ad:e2:9b:50:
                    9f:25:cf:7b:f6:53:6d:e8:ee:6e:93:06:9b:6f:af:
                    de:3a:f6:48:ef:eb:5e:22:9c:bb:3a:cc:75:92:e6:
                    0d:bd:5b:67:79:08:9c:bc:f0:59:8f:d8:03:e7:01:
                    57:ba:8c:c1:79:81:fc:3b:62:e7:3b:be:21:4a:92:
                    74:6a:1d:42:13:39:7f:b4:a9:ff:93:13:00:81:bf:
                    57:d9:8e:dd:52:99:4a:11:5d:2b:4a:57:ef:ac:d7:
                    20:fc:ae:33:8b:da:7e:27:2d:ba:57:f2:50:c6:ba:
                    50:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D7:24:BA:4D:BC:B8:C5:22:08:C9:94:5D:A8:DB:63:9C:80:80:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44f4385f-c6de-3739-9741-6b6d2d22c00b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:7a:0c:df:fa:b1:65:c3:aa:7d:10:26:33:6f:94:fa:66:de:
         a4:a1:77:f0:98:c9:dc:d9:5f:df:11:83:a9:df:c5:5c:b4:1c:
         40:4f:20:ce:79:41:db:f8:f1:02:80:a4:7a:a5:53:c5:dd:e3:
         01:e0:82:57:67:48:ed:b1:bb:69:69:28:97:8d:17:56:41:aa:
         d9:b1:34:10:26:48:ea:80:89:f9:43:aa:5d:c6:70:ce:a4:de:
         07:bc:80:f0:0c:5a:01:10:29:de:59:d3:22:02:7e:7f:71:16:
         72:f5:ee:89:5d:25:16:e3:fb:61:cb:b3:e9:88:e6:07:8e:d4:
         51:08:9f:2b:a0:26:17:d9:30:34:fb:8b:49:4e:24:92:6c:a2:
         6e:15:4b:f3:9d:61:85:5a:48:c0:57:5a:50:ad:2c:55:d6:47:
         4f:ff:b3:fb:48:c5:da:d6:82:55:fd:38:13:25:e3:35:5f:49:
         82:74:96:d7:a4:b8:e1:a2:25:50:d2:09:39:78:bf:bb:c2:12:
         6c:02:61:cf:ef:05:da:e1:b7:6d:8e:7e:66:f4:4e:68:41:cc:
         61:45:17:a8:17:a0:99:95:9a:d8:21:7d:87:31:7c:1d:9e:f1:
         f0:0d:c2:2a:a7:39:93:91:8a:62:dd:8d:90:b2:f2:53:96:70:
         f4:01:5a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:47:26 2024 by rpki-client on console-ams.rpki-client.org