Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71fd2f9d-1382-35e2-b95d-d43b5e2678f0.roa
File:                     71fd2f9d-1382-35e2-b95d-d43b5e2678f0.roa (raw, json)
Hash identifier:          xtWwtiWIR0fSH0i4ZalqEHDLgRlBDVY4WyZWQtDrINI=
Subject key identifier:   06:A4:B3:50:41:4B:8B:59:6D:0E:48:77:E4:A4:F3:06:9A:99:02:F0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858458F47C2589692CC76BD4B87C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71fd2f9d-1382-35e2-b95d-d43b5e2678f0.roa
Signing time:             Tue 16 Apr 2024 01:31:15 +0000
ROA not before:           Tue 16 Apr 2024 01:31:15 +0000
ROA not after:            Mon 15 Jul 2024 01:31:15 +0000
asID:                     36902
IP address blocks:        2001:470:2da::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:47:c2:58:96:92:cc:76:bd:4b:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 16 01:31:15 2024 GMT
            Not After : Jul 15 01:31:15 2024 GMT
        Subject: CN=389afb82-30ee-4802-9052-48f28857ad99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9a:af:38:4a:6c:e4:94:12:14:4a:38:11:9a:
                    29:e5:c6:35:bd:23:da:d1:37:c6:76:8e:de:74:81:
                    f8:05:83:c5:9d:72:d8:e9:82:a0:a0:77:fa:34:e7:
                    8c:0c:59:82:df:1c:cc:1e:26:ff:8f:5b:a7:14:7f:
                    b7:b4:3b:bb:a5:3c:b1:52:b5:b2:eb:b1:db:a9:f3:
                    55:5a:b7:9f:09:3a:c7:b5:08:6b:c4:d5:0d:f5:d1:
                    5b:8f:a5:e6:08:4a:79:ad:b2:30:d4:45:66:76:f7:
                    15:af:28:ac:80:98:58:bf:c1:f6:36:42:fa:2d:41:
                    e4:05:9e:5b:0f:cf:37:0f:6b:9b:37:88:19:1b:5b:
                    c8:c3:3c:fe:d6:18:40:f2:e2:1e:87:aa:14:8d:1e:
                    92:f1:f6:4f:2a:13:86:1f:89:09:2d:6d:18:83:73:
                    5a:65:c5:ea:6a:5f:e4:ce:86:d4:9a:19:0a:1a:ec:
                    a4:a1:ee:97:67:13:c4:9a:0c:07:18:a3:88:98:e4:
                    11:40:9d:47:a1:5e:ef:3f:3c:16:69:46:c9:b5:f4:
                    0b:75:fc:b3:ef:a7:9d:15:33:ae:1e:83:b5:72:d2:
                    88:c0:94:05:e1:2a:c0:71:69:1e:da:ce:5e:d9:d1:
                    f3:93:0f:9b:96:90:f3:66:57:52:61:6f:8f:39:6a:
                    c6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A4:B3:50:41:4B:8B:59:6D:0E:48:77:E4:A4:F3:06:9A:99:02:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71fd2f9d-1382-35e2-b95d-d43b5e2678f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2da::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:8a:ac:90:13:68:2e:0a:7c:28:40:e6:7e:d2:72:cb:77:83:
         6f:f5:35:c3:89:9b:c0:14:fa:3e:f3:32:bf:ba:6e:b1:af:08:
         8b:ac:ac:5c:2d:6e:a4:83:53:78:4c:46:3b:ec:5b:33:ca:ee:
         e4:45:1d:0e:04:85:2e:6a:80:be:3e:34:58:41:5a:c5:f2:69:
         ac:c2:23:a6:05:21:27:e8:4d:e7:be:56:88:d4:0b:8b:a8:eb:
         25:e2:1e:d5:97:6b:94:78:b5:9e:0a:9a:9a:9d:e2:9c:e4:45:
         59:b4:e4:c7:96:51:50:1a:7e:04:2b:c6:38:0e:53:d9:af:12:
         6d:10:82:86:fe:a5:60:6f:53:97:e0:06:20:b9:96:6b:09:8c:
         03:a2:a4:93:c5:12:ac:84:38:f6:41:e4:ae:c3:6e:3c:b1:4e:
         7b:dc:ee:5f:c6:76:5d:fd:5e:e0:d5:dd:65:40:ff:19:1d:b1:
         37:d7:68:4f:ba:d8:e2:a4:d2:1e:8e:ec:78:ae:d6:05:48:00:
         b9:f7:c0:2a:97:96:ac:0e:14:cb:c0:6a:d5:54:6f:6b:c9:36:
         8c:7e:9c:3e:73:d3:63:08:18:d8:5a:60:96:ee:1b:96:f3:d2:
         50:0e:77:0a:8b:a7:d7:3c:42:13:79:8c:c4:83:0f:ac:2c:29:
         fd:c3:b9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 13:11:05 2024 by rpki-client on console-ams.rpki-client.org