Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa
File:                     5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa (raw, json)
Hash identifier:          1j/UJtPCGdLL9xtictD16vFe2zUTvuOYM3XfCFTNWZs=
Subject key identifier:   01:FB:E3:47:85:85:CF:51:C4:24:B7:51:8D:0A:74:49:7E:95:52:DF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B669FFCE662B89BB3AAA0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     45960
IP address blocks:        2001:470:243::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:66:9f:fc:e6:62:b8:9b:b3:aa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=b9bb4ce6-49a8-4264-9e25-f69c2906f0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:67:a8:cf:f3:d6:2e:c4:88:15:50:2b:96:2a:
                    01:41:75:79:69:8b:87:19:18:1e:37:61:7f:97:a4:
                    d5:dd:ce:6f:69:4f:64:8b:94:bf:1c:8f:43:85:e1:
                    76:1d:39:86:a0:f8:9b:48:f7:40:bc:78:58:06:21:
                    5a:2f:9b:82:79:50:f5:87:a5:82:84:19:40:b8:f8:
                    2c:61:f8:16:1b:98:56:b8:32:a8:42:b8:4e:e7:ba:
                    32:fb:d1:ab:d0:9d:ab:32:36:bb:0c:aa:49:3f:fb:
                    4e:7d:ba:72:66:26:21:e4:d7:66:7a:2a:0d:97:f4:
                    50:08:05:c2:c4:a5:9e:a9:53:4f:f1:2c:7f:1b:eb:
                    7f:ba:72:eb:58:31:81:13:e5:7e:cc:c0:e7:42:bb:
                    3a:13:27:8c:2c:a5:62:8e:04:69:a5:a8:cb:1d:a7:
                    5f:63:94:9f:20:f3:83:e2:a3:90:11:a8:73:f2:d6:
                    0a:88:e6:b7:55:46:2c:1f:37:50:ee:9c:6a:0a:14:
                    41:65:56:29:0d:d8:1e:c2:38:ac:f4:3e:da:51:47:
                    08:79:22:ed:31:e3:5e:03:d0:5e:77:68:34:fe:75:
                    4e:16:b0:64:97:bf:70:f0:1c:fa:92:79:b0:3f:74:
                    09:4e:45:62:0f:16:e5:fe:f8:5f:7c:f2:34:6d:f8:
                    05:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FB:E3:47:85:85:CF:51:C4:24:B7:51:8D:0A:74:49:7E:95:52:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:243::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c8:63:09:e8:9e:4b:91:c9:00:7f:75:e5:78:04:bc:23:27:
         ac:8d:d7:db:7d:cf:0b:13:cc:bc:9d:a1:7f:55:8b:c2:2d:8f:
         ed:0e:6c:83:5b:d1:b3:b3:a3:af:7f:dd:3d:4c:dc:83:ee:6d:
         da:db:a3:08:c5:87:7b:77:fb:a9:04:ff:56:f2:02:6e:8a:b0:
         6e:be:41:8f:bb:dc:6c:71:e9:27:e5:51:cc:99:1a:74:4a:fa:
         2f:6a:ff:ca:11:e5:42:ab:85:98:00:77:d7:5e:11:5a:d5:97:
         70:9e:aa:10:8f:23:11:9a:98:a1:cf:09:74:96:e8:21:d9:d0:
         37:95:6b:24:e2:af:21:3d:26:10:6a:d4:4b:ad:d1:fb:6c:d4:
         c0:17:52:63:65:21:03:35:b0:2a:f8:fe:a4:cd:ba:74:8e:6b:
         6e:fd:d5:6c:56:4e:0e:46:e6:f1:ac:91:2f:a9:82:12:b3:dd:
         d9:ac:aa:be:ab:7a:49:f7:d5:2a:08:59:6f:a7:ce:3c:6c:e2:
         b8:c5:92:33:63:6a:ae:a8:be:1e:bf:9e:c9:fe:26:4b:82:d8:
         f5:7a:77:01:47:cf:f4:f9:b9:3a:87:25:f0:39:9b:43:f1:69:
         49:4d:e3:00:1c:ed:4f:32:56:6e:6b:ed:2c:1e:e9:f9:e1:5e:
         07:36:67:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:35 2024 by rpki-client on console-fra.rpki-client.org