Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66ca3204-0138-3e44-ad0c-2a123cf1c20a.roa
File:                     66ca3204-0138-3e44-ad0c-2a123cf1c20a.roa (raw, json)
Hash identifier:          GCKZeTUjDa0sCXAbo1QESMmUoDzYveffhFZksatIO7U=
Subject key identifier:   1D:E0:4F:B7:F7:AB:E1:44:E3:27:4A:B2:6A:B8:02:02:E3:9D:F4:69
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285847A74A8F742F205DE6E5318D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66ca3204-0138-3e44-ad0c-2a123cf1c20a.roa
Signing time:             Fri 25 Oct 2024 01:30:10 +0000
ROA not before:           Fri 25 Oct 2024 01:30:10 +0000
ROA not after:            Thu 23 Jan 2025 02:30:10 +0000
asID:                     31989
IP address blocks:        2001:470:2f8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a7:4a:8f:74:2f:20:5d:e6:e5:31:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 25 01:30:10 2024 GMT
            Not After : Jan 23 02:30:10 2025 GMT
        Subject: CN=1260c96a-beb7-4395-827f-e2de4ffd360b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:da:b8:c7:63:d6:58:3c:43:98:99:74:40:f3:
                    c8:38:45:4a:5a:59:f8:f8:0a:e0:81:4d:d1:78:6e:
                    13:f7:ad:e8:09:8f:59:b2:15:ee:c4:1d:05:dc:fc:
                    87:4b:a8:33:8c:53:79:f8:49:a9:a7:e7:27:a5:98:
                    65:6b:de:ce:c8:36:78:5f:a3:2b:d9:9b:67:4b:35:
                    b6:d6:11:11:bb:1a:dd:86:76:b8:5e:46:55:31:75:
                    ac:a0:12:63:8f:e2:4c:09:4a:da:37:ce:5c:3b:05:
                    9d:e5:e4:de:53:c1:a7:1b:01:e8:30:26:c3:c7:34:
                    50:d7:38:7d:2d:38:c5:dc:97:af:50:70:c3:23:96:
                    eb:32:9f:18:08:ff:81:1d:46:29:83:22:4a:59:6b:
                    a0:2c:17:61:91:d3:35:69:ec:03:25:e8:f7:28:4a:
                    a4:6b:30:be:26:e8:9f:f9:40:33:3e:c9:38:31:0d:
                    27:ef:da:59:28:29:7c:4e:f9:66:06:e2:94:1d:c6:
                    c8:a8:a2:91:60:72:04:09:8c:4e:f1:92:02:70:cd:
                    45:36:98:3c:5f:ab:2b:20:0a:72:3e:3c:0f:2a:be:
                    25:a5:18:04:3d:ce:fd:d6:6a:ea:15:a4:ca:7c:60:
                    86:c1:9f:ee:fe:af:a3:12:17:19:1a:82:47:34:ee:
                    0c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E0:4F:B7:F7:AB:E1:44:E3:27:4A:B2:6A:B8:02:02:E3:9D:F4:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66ca3204-0138-3e44-ad0c-2a123cf1c20a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2f8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:75:45:d0:92:c6:83:6a:4f:58:72:ef:ee:4c:16:3d:74:31:
         1a:c6:60:f6:66:a2:09:85:fd:49:e2:9b:7e:f4:bf:64:5a:ef:
         1c:bf:cd:f4:c1:71:74:f2:8d:92:48:d5:17:79:12:2b:16:c2:
         c4:11:f5:72:37:e7:f1:c3:bf:79:67:4d:e3:b8:83:d4:ab:cb:
         bc:ea:aa:d7:cb:21:5a:b6:86:37:c4:9f:42:ab:c5:16:a4:7b:
         fd:60:d5:e3:1b:2c:ca:95:f9:9a:cf:39:39:72:87:76:82:88:
         8e:6a:e1:56:90:9e:53:7e:06:d8:71:37:32:a5:30:f7:39:46:
         4c:15:8c:30:dc:c7:92:e1:36:77:70:8a:d2:27:0c:d9:23:10:
         ca:02:a6:df:4e:fb:53:2d:d1:73:66:0f:c5:d0:fe:6d:dd:95:
         22:99:82:70:28:97:47:0e:b4:87:05:e6:c1:24:c7:5d:ee:ee:
         33:6e:eb:12:0f:af:c1:b4:a0:c1:20:80:ca:8d:54:9d:f7:93:
         94:f6:0d:07:fd:5b:77:8f:36:c5:db:f2:c4:30:fc:2f:53:54:
         97:32:51:83:9b:82:12:f2:1e:c1:2e:6b:69:cd:db:b7:bd:74:
         b6:46:a5:c2:77:cd:1c:bc:c9:67:a1:02:61:64:65:75:58:d7:
         b9:95:91:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:36 2024 by rpki-client on console-fra.rpki-client.org