Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5bd12cb1-5a18-398c-88d3-05a2e9a19f8e.roa
File:                     5bd12cb1-5a18-398c-88d3-05a2e9a19f8e.roa (raw, json)
Hash identifier:          TL+FFHTo6wRNig68E+9afaJWQFRZGMyH0RBW5zcf06M=
Subject key identifier:   AF:23:94:C6:B8:51:9D:40:9D:06:26:E4:E2:AD:C2:BD:4F:6F:68:2A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B548F5DEFA19D3278C900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5bd12cb1-5a18-398c-88d3-05a2e9a19f8e.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     20318
IP address blocks:        2001:470:168::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:54:8f:5d:ef:a1:9d:32:78:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=116d2e43-1e4f-42ae-b7cf-19a58d6f2b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b3:2d:57:1e:89:a5:c6:42:d6:b9:e7:f3:01:
                    10:61:75:db:11:4c:d0:3f:06:ea:ae:a3:05:b1:78:
                    84:c5:c2:d5:2c:ba:96:2b:49:83:46:e5:b2:6d:68:
                    7b:17:a9:8d:30:2b:10:e4:5f:9e:53:7e:d4:04:22:
                    fa:1a:cc:be:73:c9:6c:31:2e:f5:51:25:23:a8:63:
                    9b:81:9c:52:21:79:b6:3d:ae:f6:43:e4:a9:4d:af:
                    25:9c:3b:32:6b:79:dd:b9:52:e2:be:20:6e:ca:4a:
                    3a:53:e1:f4:ce:65:2e:f8:c1:6c:4b:3b:e9:35:07:
                    6b:a7:31:44:29:6d:f5:33:b3:f1:28:3e:4b:08:94:
                    94:11:56:e8:ed:50:e8:bd:8b:c5:40:e7:04:d2:16:
                    1c:dc:d1:aa:3b:2f:be:23:58:14:db:5f:58:3c:c6:
                    cf:ee:cf:ab:8d:ef:b8:ab:40:eb:10:a9:b9:ec:4d:
                    80:8c:69:bc:7f:75:eb:87:fd:74:1e:68:2b:90:93:
                    1e:45:9f:60:cf:b3:fc:80:f9:51:a5:13:f0:b2:6e:
                    a2:79:d5:f5:e1:47:0d:9c:8e:8e:83:7e:d6:b0:f1:
                    66:80:3a:8f:c0:3f:2f:cc:8f:57:c6:7f:ad:51:94:
                    49:b3:fe:e7:d2:e6:57:89:49:d6:e3:46:08:79:39:
                    ce:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:23:94:C6:B8:51:9D:40:9D:06:26:E4:E2:AD:C2:BD:4F:6F:68:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5bd12cb1-5a18-398c-88d3-05a2e9a19f8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:168::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:0c:71:0d:c4:95:14:b9:c2:70:f2:ff:ca:00:76:cf:72:75:
         ed:b9:9b:9d:9c:ba:26:76:29:e8:7a:62:0e:8b:c6:31:5f:57:
         f6:44:26:63:bc:c5:91:8a:a7:e7:a0:e4:a6:c7:8b:f4:a9:2b:
         61:77:15:dd:98:40:72:9c:31:3a:c2:7b:40:98:57:ed:1f:08:
         55:48:dc:66:a0:c9:45:12:ed:80:e0:71:81:a0:c6:79:da:ad:
         b0:fa:6b:b8:a2:c0:e7:27:70:f5:36:ba:0c:61:93:f4:44:87:
         74:8d:73:68:ec:e7:14:2a:7f:8d:68:07:2a:eb:97:d0:ad:7f:
         69:a8:69:de:52:4a:0a:06:8e:00:6d:62:97:e2:17:2d:c5:ab:
         42:46:a5:1a:f1:57:07:81:f9:8c:3a:8b:53:51:e1:6a:ca:ad:
         70:b7:1c:de:fb:7e:16:53:b9:36:f8:53:ff:69:37:a4:98:bc:
         bb:21:e5:0e:89:d4:bd:0e:f5:cd:b0:74:ea:a5:c8:39:15:54:
         9e:d7:b0:de:68:01:6c:df:00:f7:15:30:c6:3e:4d:8a:41:75:
         81:48:15:ea:d5:32:08:1d:5e:a9:05:f6:df:03:65:02:53:b0:
         ab:74:a5:9b:95:05:5a:be:aa:e0:1f:0d:a3:2f:ef:e2:0b:71:
         00:38:de:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:36 2024 by rpki-client on console-fra.rpki-client.org