Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/50b3f2ee-8ef0-3550-b89e-0bb588694e9e.roa
File:                     50b3f2ee-8ef0-3550-b89e-0bb588694e9e.roa (raw, json)
Hash identifier:          7eXlJ0i+Ou83m+/N8T9i87VZPDENiuVkDIxmvNbm0MY=
Subject key identifier:   11:DE:8E:5E:26:FB:A7:D8:BE:61:9B:3D:14:39:74:FE:E1:22:52:79
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F895725CD555B68B6B66A380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/50b3f2ee-8ef0-3550-b89e-0bb588694e9e.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     26073
IP address blocks:        2001:470:10d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:72:5c:d5:55:b6:8b:6b:66:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=53d0b104-5386-4dd9-98fc-7e661947bede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bd:e1:fc:85:e3:60:2a:60:d1:90:3b:11:a6:
                    a7:06:f3:d9:f6:a5:f5:65:20:d4:83:65:13:1f:6e:
                    59:3a:44:f3:1a:b3:cf:df:85:16:15:b8:3b:b9:6c:
                    e4:6c:2f:fe:94:21:6e:b8:bf:a2:28:6f:fc:16:77:
                    ae:8f:30:27:1f:50:86:f4:b3:56:c4:fd:bf:e1:e8:
                    a6:69:63:9d:8d:e2:ee:2c:f4:99:54:38:1c:70:d9:
                    ed:0f:0b:79:8f:4e:e2:94:7c:82:62:ed:3d:3d:0f:
                    59:96:56:45:b6:f2:f8:a4:b3:40:f2:bb:81:da:14:
                    45:c4:5c:60:8e:99:d4:94:75:02:7b:94:29:61:ce:
                    0a:87:c8:76:38:12:e6:7a:ca:63:34:8e:02:5b:12:
                    e2:5e:f7:cf:1c:88:29:e1:68:d5:cc:65:1f:ff:ea:
                    75:fe:92:25:ed:70:77:65:40:8f:7f:b0:3f:bf:72:
                    03:0e:0f:ec:33:9c:2a:66:67:fa:83:70:6d:ad:70:
                    32:c7:5e:1c:90:77:b4:d2:7d:79:21:94:bd:42:af:
                    e6:d5:91:4e:df:b4:5d:90:b5:f3:1f:c3:44:59:9f:
                    15:ab:76:4d:48:eb:b6:31:24:96:d5:41:de:e4:ce:
                    7d:b1:8d:ac:20:2b:2c:53:1c:8e:8c:d5:f3:f3:c9:
                    85:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DE:8E:5E:26:FB:A7:D8:BE:61:9B:3D:14:39:74:FE:E1:22:52:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/50b3f2ee-8ef0-3550-b89e-0bb588694e9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:10d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:14:29:6d:a7:c8:a3:87:e2:26:29:14:a6:50:7d:fa:16:9c:
         6c:96:3b:f3:de:73:39:2e:7c:9e:b5:c4:e1:e8:c7:31:df:9a:
         89:ee:fa:cd:59:e9:72:15:87:1a:e1:fa:f8:a7:e9:f4:a8:b0:
         43:af:14:22:d0:c3:ea:b7:bc:a0:cd:f9:c4:91:ef:26:88:97:
         35:d9:7f:06:62:9e:f8:e5:15:df:78:56:83:f3:e6:c9:6b:37:
         20:31:73:5f:b3:b3:ed:0f:e2:43:6a:ff:c8:da:ea:4b:8e:4f:
         2c:4f:bd:ca:0d:eb:29:b1:89:51:f7:cc:c7:77:bf:eb:fb:bd:
         09:5f:e3:53:a1:4e:13:82:fc:8a:46:51:81:bb:76:bd:36:12:
         ee:e6:48:2c:93:77:6c:cd:a9:fa:78:fa:17:10:5d:98:92:d3:
         54:fb:0c:e3:b1:c4:43:17:8f:96:94:18:fb:f8:6c:4d:f6:56:
         9d:6b:78:7f:ed:44:68:9c:6c:45:38:e5:3f:63:b6:c5:b0:04:
         55:4e:9f:f1:01:0b:22:66:75:da:f9:bd:e1:17:cb:47:21:70:
         ba:5b:bc:dd:04:8e:e7:48:22:ce:71:19:98:b0:0b:37:61:ef:
         45:68:79:f7:27:45:1e:54:12:82:c4:4e:fd:7c:de:7b:62:24:
         31:8f:14:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:28:38 2024 by rpki-client on console-fra.rpki-client.org