Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4c832ea9-477b-3b2c-9269-c40ea6c82506.roa
File:                     4c832ea9-477b-3b2c-9269-c40ea6c82506.roa (raw, json)
Hash identifier:          qqwbd7V4Xg2UWElq5SZqJ6SmZxUGdij8LBYKnRphTK0=
Subject key identifier:   24:F5:B0:8B:F8:2B:61:49:AB:52:46:49:10:99:CE:9B:BC:AF:46:6D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B60474FD95BC546355BB8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4c832ea9-477b-3b2c-9269-c40ea6c82506.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     11597
IP address blocks:        2001:470:20b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:60:47:4f:d9:5b:c5:46:35:5b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=646734b3-41d5-40c5-a5a0-c97b8b5f9230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d1:9f:cb:06:ab:ca:76:fe:16:68:3d:27:1e:
                    2e:94:52:c0:0e:5a:f8:59:98:c2:2e:92:62:00:8b:
                    db:4e:fc:b1:45:e7:0c:0f:97:19:2d:04:28:14:02:
                    b7:ba:cf:78:ba:e6:2c:90:41:6c:b9:58:46:77:54:
                    07:1f:57:cc:6f:13:24:05:e4:95:3c:96:f3:b8:73:
                    db:4b:11:3e:bd:6c:40:13:fc:4b:71:2e:61:a5:ed:
                    c4:6d:f2:56:90:74:23:9b:cc:2b:53:88:2f:cf:a6:
                    21:3c:71:03:b2:49:e6:78:e0:0a:bf:80:b2:55:0c:
                    67:ac:e4:da:c3:6e:5b:5d:01:43:fd:4b:fe:95:45:
                    d3:6d:35:1e:78:09:cb:7b:f2:52:45:2e:dc:5a:b7:
                    43:3e:c4:c0:ec:26:72:29:e5:d2:f8:c6:ee:f6:d9:
                    be:50:5d:2e:76:8d:9b:a3:53:4e:44:f9:36:0e:da:
                    03:ec:08:22:60:43:9d:12:3d:88:bc:74:a7:c0:48:
                    89:ff:e6:99:ba:47:d3:ba:9a:7a:e3:88:d6:8d:1b:
                    62:a4:94:5a:92:e3:3e:ba:b9:4a:63:e9:94:ca:a8:
                    5f:c0:66:ee:5d:56:92:1b:50:42:67:dc:37:d1:d9:
                    50:df:67:32:a9:43:da:8b:d2:65:0d:ba:75:c2:af:
                    74:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F5:B0:8B:F8:2B:61:49:AB:52:46:49:10:99:CE:9B:BC:AF:46:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4c832ea9-477b-3b2c-9269-c40ea6c82506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:20b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:78:c6:6c:14:4a:e1:25:fa:2b:b3:51:7b:fe:6b:88:85:62:
         69:0e:af:e7:70:7d:cc:fc:b8:e2:85:00:83:16:30:8a:b6:87:
         3d:e3:88:fe:4a:a4:a6:57:4a:3c:f5:d3:34:1f:84:36:18:51:
         9c:80:d0:76:03:44:5d:03:0d:f9:28:a3:dc:e4:b0:27:8b:e1:
         80:36:2d:e2:ff:2c:3f:56:f4:0d:3a:ae:d0:2a:a7:fa:1a:b8:
         f5:eb:ec:87:ae:1b:8b:15:4a:f7:34:6c:16:5c:cb:09:95:1f:
         f0:63:9a:c0:1f:d5:31:7f:21:30:f4:da:5d:17:60:59:ba:51:
         6c:e3:44:9a:a6:b5:06:3a:e1:6a:67:04:c8:82:70:c6:06:c1:
         0a:e3:5b:73:0b:e0:f3:83:f5:4d:e0:34:1a:81:f9:d1:02:d7:
         e9:ef:43:04:c9:57:a1:34:69:f4:70:39:2f:79:6e:a2:c7:57:
         23:06:4d:db:a8:b1:ba:12:15:16:1f:61:23:dd:f7:f9:30:06:
         4a:ff:1f:91:c7:f8:85:77:b8:a1:92:b0:03:f7:e3:4f:a5:2e:
         ac:07:07:69:f2:e4:7c:49:86:9e:a6:9c:08:59:41:2b:59:74:
         c3:db:e7:29:63:f4:43:3e:d8:92:32:8d:62:a3:62:36:89:e8:
         3a:c8:42:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:35 2024 by rpki-client on console-fra.rpki-client.org