Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6b0b8956-b6d8-3839-b972-20e76b928708.roa
File:                     6b0b8956-b6d8-3839-b972-20e76b928708.roa (raw, json)
Hash identifier:          7hIeuF9uef66B0nHbQEaaws22+f2xKCFp78yYpuPhk8=
Subject key identifier:   A9:3D:D9:00:E1:21:58:D4:FC:5A:BA:25:29:F4:6F:9D:9E:DA:FF:76
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B5358344BDA4A6B350500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6b0b8956-b6d8-3839-b972-20e76b928708.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     32872
IP address blocks:        2001:470:a6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:53:58:34:4b:da:4a:6b:35:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=09f282f0-d691-4eb1-bcad-4f6c03a75cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:74:cf:77:51:a0:db:5e:42:6c:06:65:41:31:
                    21:4a:d8:88:04:f1:10:af:8f:84:d8:4d:aa:f1:8c:
                    e5:88:b2:10:1f:2a:b5:b0:71:41:e8:29:91:b5:69:
                    e2:f3:90:ca:72:85:3f:fd:2f:b7:dc:48:94:45:fa:
                    ee:94:ff:be:a3:b2:3b:4f:57:2a:91:ea:63:a8:c2:
                    76:ce:44:09:1f:42:04:a1:67:0b:4a:7a:61:be:6e:
                    14:15:d4:9c:99:41:10:7e:33:19:9c:99:97:1a:43:
                    0e:df:23:e2:89:06:06:1d:af:10:cc:ae:6a:bc:9f:
                    a1:f5:11:75:ea:db:be:76:c8:06:ad:5f:a3:1e:54:
                    bd:c5:56:6f:04:81:4d:57:7e:88:76:24:77:06:b3:
                    ce:54:79:35:e5:2e:64:d8:d2:04:73:80:ee:5d:34:
                    e2:f5:b9:6b:7a:8f:84:45:64:47:50:27:17:8c:0b:
                    5a:74:de:dd:0b:b4:91:a5:c7:f3:ab:d0:2b:2e:95:
                    19:0b:6a:23:33:f2:d0:9c:0b:54:06:2b:cc:bc:40:
                    94:b0:d6:d6:a4:0f:6f:ec:99:8f:d6:3c:47:98:ce:
                    a2:5b:9e:13:13:81:11:8b:d7:24:35:12:56:90:08:
                    27:fd:01:ce:c4:26:2d:1b:35:70:7f:82:d5:5d:fd:
                    33:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3D:D9:00:E1:21:58:D4:FC:5A:BA:25:29:F4:6F:9D:9E:DA:FF:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6b0b8956-b6d8-3839-b972-20e76b928708.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:a6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:48:7f:7b:59:54:fd:e4:cf:cb:00:0e:30:96:b1:e0:4a:22:
         78:df:c2:74:0d:be:b4:84:a2:84:24:64:86:3d:bd:f0:1e:2f:
         f6:16:3d:10:1f:58:f2:28:3b:8c:0c:db:9f:6d:9d:c2:3a:b3:
         f1:7b:fc:4b:b4:e1:b5:a7:5b:5f:54:42:26:9f:4d:99:97:9a:
         42:40:ea:46:af:e5:c8:ec:3b:70:71:11:5e:0d:18:77:17:0a:
         1f:bb:2b:e5:36:6d:87:58:aa:11:c4:fe:eb:f1:bc:6e:12:4c:
         68:94:76:69:ff:fc:ef:87:b6:57:95:91:14:9e:31:51:16:8a:
         ff:b5:b9:c1:67:e7:c9:13:dc:41:ef:fb:4a:e7:94:f5:d1:01:
         64:59:5c:25:d1:7c:9b:08:42:a7:bb:cd:17:21:df:8f:9f:03:
         64:91:65:85:8c:7b:32:66:6c:00:9a:bd:ba:e7:03:32:05:75:
         8e:9e:c2:58:5d:84:72:5b:fc:83:79:ec:a6:be:32:d2:99:e7:
         3b:63:5c:6a:cf:ff:76:1f:b8:d8:b5:a3:5f:94:29:31:f4:75:
         93:a2:46:b7:da:8b:b0:78:f1:b4:a2:3a:78:d4:5a:c2:a5:6d:
         97:96:ec:0a:87:8c:56:9c:0e:73:31:66:ab:05:dc:74:ee:10:
         1e:df:5c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:23 2024 by rpki-client on console-ams.rpki-client.org