Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d56da04-c6ac-3625-ae32-26c688e9b28b.roa
File:                     4d56da04-c6ac-3625-ae32-26c688e9b28b.roa (raw, json)
Hash identifier:          mVmymPxZ55ZwyiCqKgy+HZAMYIBa1xX28XW9YdoFVxE=
Subject key identifier:   82:96:EF:72:59:36:73:74:19:4E:B7:A8:74:CD:95:59:E2:FC:B1:6D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B6122DF3676FA9859EFE0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d56da04-c6ac-3625-ae32-26c688e9b28b.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     31942
IP address blocks:        2001:470:21b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:61:22:df:36:76:fa:98:59:ef:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=08bdbc45-6c87-4b03-bc7a-c303aa999097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f0:9f:8f:db:c5:0f:16:8c:92:4f:da:16:f5:
                    c3:05:4e:e6:2a:0a:ac:6f:8e:e4:03:6e:9d:3b:95:
                    62:a8:28:1a:b9:91:22:36:dc:c0:3a:64:a6:d1:ff:
                    d8:79:b4:9c:27:09:23:ae:34:08:a4:3a:3b:87:de:
                    d5:70:25:53:51:31:f5:1c:df:bc:5c:46:ee:78:41:
                    17:35:50:58:4e:c0:76:21:68:49:c9:2c:dd:5f:34:
                    b0:35:6e:b5:11:f9:8b:bd:4b:7a:58:92:f4:73:b7:
                    00:6b:f7:5e:d6:7c:98:5b:62:68:15:72:ff:60:16:
                    a3:fe:c6:a2:18:de:e8:fb:6a:2a:1a:f8:67:c1:30:
                    47:78:af:58:5e:84:b6:6f:0f:cd:c0:65:b9:97:1a:
                    b1:8e:b5:61:9f:14:d6:02:08:b9:17:b4:bc:47:8a:
                    f7:49:38:a7:96:06:f8:b3:2e:38:6e:1b:3b:30:46:
                    f0:8f:3a:b8:8a:73:87:bc:fa:a1:68:40:47:34:42:
                    28:1d:2a:5d:9c:30:7b:a2:fb:3e:89:16:41:ed:60:
                    7b:21:64:a3:85:bc:f3:54:0a:88:6f:13:78:5d:2e:
                    5d:7f:ad:22:36:5e:86:b2:fd:7f:8a:1e:09:f8:f9:
                    b2:49:67:4b:be:dd:cb:da:7a:03:92:ac:7c:0a:db:
                    2e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:96:EF:72:59:36:73:74:19:4E:B7:A8:74:CD:95:59:E2:FC:B1:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d56da04-c6ac-3625-ae32-26c688e9b28b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:21b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:9e:77:9a:f1:2e:4f:ca:9b:76:a5:4b:3e:ed:37:10:e9:3f:
         ee:b7:59:ec:ae:2b:ac:f5:05:07:1d:3d:a8:d8:0b:94:7d:21:
         fb:9b:65:72:1b:c5:a3:f2:bf:7f:d1:4a:25:17:9d:dc:dd:94:
         fe:aa:d2:67:02:c1:99:91:3a:74:ae:3d:db:5c:0e:6e:15:f7:
         55:04:65:6a:e9:ee:c0:42:fe:bb:6f:05:03:e9:b2:bd:8f:5a:
         8e:d1:28:31:99:b8:97:40:f9:c5:5b:6d:87:16:b4:69:87:c9:
         ee:64:ab:c8:6b:da:2e:6c:5c:69:e4:73:57:df:25:20:96:35:
         0f:12:bd:cf:0a:c1:16:50:24:ca:4c:18:49:95:4d:18:b9:ce:
         7a:1d:65:b2:bc:b7:4d:37:c6:a8:42:26:ce:02:94:ba:98:bc:
         01:78:f3:89:b7:f3:3e:f9:f3:2e:77:fe:ef:5b:2e:f0:33:af:
         3f:58:88:5e:fc:15:82:f9:3a:65:04:03:b3:c2:6a:b9:02:6a:
         3a:8f:f1:40:95:54:e8:18:f2:c6:af:85:9a:aa:f6:74:88:94:
         a4:5d:68:d2:97:27:26:eb:81:54:13:16:b7:5e:aa:fc:69:e3:
         5f:94:b3:60:8b:e5:cc:b4:b3:f3:ca:96:54:ea:be:e7:cf:8e:
         a5:29:cd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:22 2024 by rpki-client on console-ams.rpki-client.org