Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6ef87e7b-7c80-3fad-a5ac-96bea4eab44e.roa
File:                     6ef87e7b-7c80-3fad-a5ac-96bea4eab44e.roa (raw, json)
Hash identifier:          YLhIX/tABk7iN02gdWUjdyhXj6wqBfByOMTgdQ0FxkY=
Subject key identifier:   47:BC:BA:3F:83:2E:EA:A5:88:75:8C:BA:12:D9:48:50:DF:83:8D:53
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858478CB67B9FBFBA163927D93AC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6ef87e7b-7c80-3fad-a5ac-96bea4eab44e.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     42624
IP address blocks:        2001:470:2e4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:7b:9f:bf:ba:16:39:27:d9:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=74638638-60d2-4923-b261-a7f97ca1b9ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f6:d0:99:c4:8d:57:8a:76:97:bd:12:e7:47:
                    c3:43:32:a0:51:06:1a:54:6c:d6:34:0b:d3:e7:f3:
                    85:5d:18:db:38:e5:97:dc:61:77:94:7d:22:09:92:
                    38:90:f3:d7:45:8c:69:15:2a:07:29:bf:91:f5:62:
                    e3:1d:23:70:2a:07:a7:11:43:ba:cc:7c:90:c6:c6:
                    2f:72:8e:a7:54:d8:57:88:67:2a:1d:87:4f:50:48:
                    e7:91:ed:0a:46:b7:21:36:5b:97:ad:75:e3:ac:f7:
                    cf:54:62:4e:d6:38:0d:87:84:78:30:c4:98:24:69:
                    fa:00:30:31:2f:6b:a6:ea:d7:56:5c:ab:cc:cc:5e:
                    ed:c2:f7:d5:64:37:49:78:d2:bb:95:1b:8c:91:d4:
                    0a:1c:88:3e:07:3d:34:3d:2e:d1:03:1e:a9:d8:e3:
                    b5:2f:9b:02:e1:74:64:d2:eb:3f:7e:f0:06:97:47:
                    66:23:f4:83:53:20:9e:fc:01:cc:40:14:dd:f5:19:
                    51:2c:fe:59:9c:6f:42:5b:2f:bd:da:31:ed:78:1e:
                    db:a0:09:3f:4e:0a:0e:b6:b6:64:29:81:9f:19:9c:
                    65:2c:13:06:87:92:ab:7f:a5:e9:f2:cc:ce:0d:c8:
                    3e:01:cb:c8:c5:84:41:d8:0b:0e:be:10:b5:1c:45:
                    8b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BC:BA:3F:83:2E:EA:A5:88:75:8C:BA:12:D9:48:50:DF:83:8D:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6ef87e7b-7c80-3fad-a5ac-96bea4eab44e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2e4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ec:a8:74:7c:5f:01:01:0f:18:c3:25:6e:ad:1c:22:b2:85:
         f2:4f:22:db:bd:96:f3:e7:8d:33:53:48:5b:f9:83:5e:14:2b:
         80:8f:e2:f4:05:00:32:3d:76:de:17:8e:ba:4a:6b:10:60:65:
         b2:8a:ed:f0:88:2f:28:b3:39:6a:b4:75:af:d0:a1:1f:e0:7b:
         ad:23:35:d6:93:22:88:9e:2e:ab:24:93:fa:00:48:9a:c5:e5:
         8e:13:ad:d6:1f:7b:37:3c:dd:db:75:48:a9:4c:f7:cc:32:c6:
         0f:16:ac:86:19:92:c8:ba:db:20:b9:d5:91:3b:f7:2f:0f:57:
         18:2a:08:f6:b8:5d:92:6f:69:38:b5:cc:b1:2a:44:e7:9c:84:
         d4:42:51:6c:5e:d1:04:6c:33:db:1a:49:6c:a8:31:8c:7b:fa:
         f8:3d:5d:a5:97:97:84:6a:72:b6:47:6a:2f:13:43:72:14:9f:
         85:35:1f:82:9a:15:ce:ca:cc:d1:e2:14:81:99:d9:c3:45:28:
         b5:6a:bc:ee:50:f0:70:07:94:25:3f:e4:23:a7:71:18:83:d9:
         51:98:49:25:4c:6d:af:04:3c:06:c8:02:96:6b:fc:54:7b:24:
         3a:df:1d:ac:e9:3d:f7:59:cf:a5:4d:de:e0:01:52:a6:92:51:
         bf:1f:67:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:23 2024 by rpki-client on console-ams.rpki-client.org