Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7976e54e-670a-3597-9ccd-88ccc4997071.roa
File:                     7976e54e-670a-3597-9ccd-88ccc4997071.roa (raw, json)
Hash identifier:          ELHM9wiQ0QdayMyAC0lQnzlEtD7atwtuGbQ6fjNLdvY=
Subject key identifier:   CE:18:8A:37:6B:74:BB:9B:EF:F2:40:E4:82:B4:0F:D7:DD:A6:B9:A7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D01293F480A693CC841F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7976e54e-670a-3597-9ccd-88ccc4997071.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     198690
IP address blocks:        2001:470:17c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:12:93:f4:80:a6:93:cc:84:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=5e70ed2b-8070-433e-bfdb-49ef2278a5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:46:9d:4b:6a:c4:8d:01:8c:41:c1:ea:21:56:
                    d5:17:b5:e4:ac:92:e6:64:d5:29:c9:c5:a2:ae:41:
                    f3:4e:a0:e4:d5:39:68:38:60:f0:a6:88:b1:9a:d9:
                    60:34:91:72:2d:c2:a1:af:ea:5a:b8:f9:12:0c:43:
                    ca:93:16:06:ae:99:fe:d2:6a:e0:f6:1d:29:f9:a9:
                    bc:b0:38:91:7a:e9:89:e2:00:cf:53:56:6c:6a:23:
                    73:dd:b0:ea:82:c2:ac:68:79:17:a5:31:27:98:87:
                    8e:c3:3a:c2:d0:fe:f4:92:55:a6:06:7f:c2:29:c3:
                    3f:3b:c4:c9:34:24:dc:74:8d:e8:7a:be:ce:81:d2:
                    69:54:b7:3e:ae:0a:96:56:77:da:16:67:21:b1:48:
                    d6:c6:c4:a3:31:91:91:ac:c5:aa:89:5f:c9:ac:f1:
                    9a:43:a0:9a:6b:62:97:ef:ce:fb:fe:85:d0:e8:70:
                    31:cb:74:94:9b:fe:e0:c6:9a:d3:ce:97:23:a8:59:
                    59:24:c0:0f:23:63:e8:73:ec:73:a0:d7:21:82:0d:
                    60:39:7d:78:0e:0a:c6:4e:f5:e3:e6:c7:16:34:ea:
                    c1:bc:d2:50:d6:cf:36:ae:4a:c4:eb:c1:5f:a3:72:
                    d5:40:2b:66:5d:37:eb:19:ec:43:af:60:c2:46:f3:
                    bb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:18:8A:37:6B:74:BB:9B:EF:F2:40:E4:82:B4:0F:D7:DD:A6:B9:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7976e54e-670a-3597-9ccd-88ccc4997071.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:17c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:5f:fd:df:aa:65:40:41:27:b6:67:25:7d:df:55:42:bf:74:
         de:c5:68:d8:55:b0:c1:40:34:58:a8:4a:58:e2:1f:8f:7e:3d:
         77:1d:c1:da:97:04:b0:93:1d:e4:d8:49:dc:b6:fe:c1:86:3b:
         42:f3:b2:eb:cb:26:b0:da:32:4e:9a:44:62:6a:fe:82:3c:e7:
         ad:14:28:d7:9b:7c:31:72:22:bf:9a:8c:6c:0a:e8:dc:7f:d7:
         3f:bc:e0:7a:f3:ea:88:e6:87:04:00:d9:14:0e:da:0b:8b:93:
         c8:dd:d5:ec:28:04:10:9f:07:bb:b0:d9:8b:fc:6c:76:17:20:
         75:b6:82:08:18:ce:7b:9d:e2:96:1f:f2:a4:2e:d7:95:ce:05:
         a4:1b:00:bc:92:41:61:5a:d8:37:46:2d:f7:04:11:ec:0a:ca:
         39:2b:d2:6e:37:59:de:74:e5:f6:bd:cd:b4:2c:33:a9:09:6f:
         50:16:27:43:c2:7e:9b:b4:be:84:ed:24:be:c4:c4:ef:63:fa:
         64:80:bb:ea:19:39:bd:13:fb:76:7b:5a:d4:a7:60:b4:52:a0:
         c7:b7:64:cb:44:88:5e:15:5f:94:45:9d:a6:58:96:5a:70:d0:
         11:f4:d7:e3:63:7f:b3:97:9e:78:d2:83:5c:1e:b3:40:7e:69:
         8c:7f:75:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 05:13:24 2025 by rpki-client