Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/78227487-250e-3c99-bdc6-68ed28292eac.roa
File:                     78227487-250e-3c99-bdc6-68ed28292eac.roa (raw, json)
Hash identifier:          ptgYPTa5nSghO7JQtHpNUfdsiW7tIqe6VbAiMSeSfIk=
Subject key identifier:   54:71:AE:47:2D:81:09:EC:DD:8F:AE:B5:00:52:E5:58:20:B0:34:5B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584770CB99C7F47E7A67545A7EA0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/78227487-250e-3c99-bdc6-68ed28292eac.roa
Signing time:             Sat 05 Oct 2024 13:00:42 +0000
ROA not before:           Sat 05 Oct 2024 13:00:42 +0000
ROA not after:            Fri 03 Jan 2025 14:00:42 +0000
asID:                     398668
IP address blocks:        2001:470:33a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:70:cb:99:c7:f4:7e:7a:67:54:5a:7e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct  5 13:00:42 2024 GMT
            Not After : Jan  3 14:00:42 2025 GMT
        Subject: CN=1f0670f8-e4bb-4478-83cb-45108c892bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c4:a7:cb:fa:d8:b4:47:38:27:cd:eb:d5:2a:
                    7e:66:f3:05:e0:0c:99:ec:75:6f:a3:91:11:4b:23:
                    51:28:e2:6c:5f:90:c8:7f:ea:0c:29:77:9c:a9:9f:
                    2c:23:53:09:9b:4e:09:bc:5d:e5:c1:61:fe:c3:7c:
                    d9:45:33:30:3f:6c:f4:17:0c:e7:7c:af:06:5c:03:
                    05:19:01:49:cf:39:bd:ea:c6:64:e6:36:ad:ec:f1:
                    54:21:a9:ac:3d:89:03:3c:04:96:ed:e4:c2:57:1d:
                    6c:d6:47:64:3d:7c:2c:16:2a:15:2f:fb:3f:32:59:
                    1d:cf:25:09:1e:7b:4f:9c:ee:1a:03:de:70:e1:4f:
                    a2:a8:2c:45:90:e1:d9:ab:57:f5:76:78:9b:e7:0b:
                    74:27:c2:53:a9:46:e2:01:6d:da:ff:f4:d9:ae:bf:
                    46:95:8d:f9:17:8b:c2:b1:ed:2f:f6:de:41:49:be:
                    da:7c:e7:ba:58:b3:6d:fd:61:94:e8:15:e0:09:35:
                    3b:04:de:d0:cd:6d:4f:f4:91:7a:2c:19:3c:d1:d5:
                    fc:7c:2a:90:07:e4:02:0d:d1:07:e9:b1:b2:19:06:
                    df:ae:4e:b5:dc:58:0e:38:1b:78:d4:5c:a9:ee:fd:
                    2e:ea:19:ad:4a:d9:84:88:64:ab:d7:ac:54:e7:ee:
                    77:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:71:AE:47:2D:81:09:EC:DD:8F:AE:B5:00:52:E5:58:20:B0:34:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/78227487-250e-3c99-bdc6-68ed28292eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:33a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:5e:fd:54:bb:c9:26:52:1a:80:39:09:7f:93:f0:fa:5e:76:
         54:a5:24:96:db:38:6e:3f:a3:25:85:06:d1:16:7a:01:6a:91:
         c8:e1:93:bb:f6:f2:db:4a:cd:6b:52:c4:6f:4c:13:0c:b5:fa:
         b7:16:0d:93:84:73:e9:ee:3c:f5:fb:e2:df:c7:07:e7:09:96:
         63:58:27:dd:d3:60:df:d9:e4:a8:f6:bf:5e:36:7b:92:9a:6d:
         03:c4:42:b4:cb:6e:bb:9a:29:fa:13:22:66:08:22:1b:b2:f4:
         eb:22:8a:22:9c:05:2b:59:18:f9:31:cf:94:87:3b:06:9c:c5:
         15:af:cc:91:2c:c4:87:ec:11:e1:e3:36:bd:f9:36:0a:a8:c2:
         ed:5a:18:84:70:07:7b:bc:9c:b8:26:e2:4e:2a:29:d8:34:63:
         fb:a9:c3:cc:8e:75:f5:14:8d:00:92:cd:b6:f3:2e:2f:04:b0:
         23:05:e2:82:fd:7f:19:a8:8b:2b:0d:01:be:d8:7a:46:4a:bc:
         f6:3d:ee:96:62:9a:17:50:30:9d:7b:11:d2:0f:83:2d:54:6c:
         1b:8b:ec:47:04:db:13:25:ca:c4:d3:f3:66:18:2b:38:99:65:
         43:cc:b5:39:4a:a7:1d:77:4e:f2:13:6d:a9:8a:b8:ac:a7:e9:
         4b:7c:0b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:36 2024 by rpki-client on console-fra.rpki-client.org