Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82945325-27be-3940-b66b-e46080d0a632.roa
File:                     82945325-27be-3940-b66b-e46080d0a632.roa (raw, json)
Hash identifier:          6T49U1SAxJtFOfMhkU8c7TBIBc08jWhv70y9Qn0vh+4=
Subject key identifier:   43:6D:A7:2C:9B:FB:F0:9C:70:B6:3D:A9:79:BC:EF:8C:C9:55:F8:77
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584812D54057D8E2B546E4658F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82945325-27be-3940-b66b-e46080d0a632.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     22612
IP address blocks:        2001:470:c5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:40:57:d8:e2:b5:46:e4:65:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=30dcbdb8-128e-4283-8bcb-481969b3d333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9d:a3:24:07:1a:47:5f:9d:c8:af:44:c9:33:
                    37:dd:55:16:c4:16:2f:90:89:56:6f:c2:fe:ed:02:
                    58:a8:1b:fa:e6:34:14:11:79:25:76:3b:19:3c:e5:
                    0d:99:bf:27:9f:4e:3a:6c:20:ae:46:55:09:f8:fc:
                    b7:d8:75:97:7c:f8:45:a0:e0:32:ee:f0:65:19:42:
                    47:9f:9f:18:fc:c5:de:1e:14:5c:4e:b8:81:43:b5:
                    16:58:28:24:13:0c:59:18:51:4a:8c:c1:e0:3e:29:
                    85:c7:a4:c2:a6:34:29:bc:32:e2:db:c0:c1:42:75:
                    7a:99:41:12:24:ec:1a:d9:ee:73:46:e6:8e:2c:69:
                    87:01:68:fe:2e:04:ef:bd:ca:9c:4a:15:12:70:27:
                    ef:24:81:1f:8d:d0:9a:4e:e4:cd:24:96:5f:64:7d:
                    bd:53:5a:38:8f:e6:f8:98:93:ae:51:b1:78:21:7a:
                    8c:14:28:ab:ef:b5:11:15:1b:2b:77:41:12:53:c6:
                    5d:8d:3b:96:ed:dc:86:0d:5a:c8:e3:38:8e:f3:df:
                    f3:c3:1c:7e:7d:6e:da:53:f5:7f:b3:7b:15:0b:b2:
                    20:01:f9:92:b0:2b:2f:06:59:9f:d3:62:1d:6a:21:
                    22:6e:5d:ab:cb:43:b2:eb:aa:76:7b:b7:64:27:ef:
                    96:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6D:A7:2C:9B:FB:F0:9C:70:B6:3D:A9:79:BC:EF:8C:C9:55:F8:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82945325-27be-3940-b66b-e46080d0a632.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:c5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:8b:7c:6b:2e:f9:92:d0:c1:73:0e:c9:d3:04:1b:ac:84:89:
         4f:bf:63:2e:da:2f:96:f2:da:35:6b:e7:91:60:3a:db:a0:d4:
         d5:e8:84:bf:8c:5b:67:3e:17:29:7c:87:50:55:05:42:e4:c3:
         aa:b3:38:67:d8:46:91:d5:a1:b2:6f:79:94:61:b6:46:d1:d8:
         43:d7:64:de:79:3c:09:6d:bc:fc:11:eb:07:e9:e8:7c:bf:ce:
         5b:f2:0c:d9:06:f0:a7:23:2b:36:84:de:51:76:80:9a:33:e0:
         38:c9:62:1d:6e:25:54:df:4a:2f:e8:c6:da:76:ab:7d:36:56:
         52:45:43:f6:be:b1:7e:cc:e6:07:cf:51:92:e8:14:37:44:48:
         6b:fb:6d:7a:72:1e:63:c4:0b:05:40:ac:db:4a:4f:4b:7c:d2:
         dc:bb:3a:52:57:b6:02:dc:22:ff:ce:7f:25:29:d2:d4:6d:e2:
         44:0c:94:8b:0b:cd:e7:e2:4e:66:75:4c:ec:67:60:f9:6c:fc:
         bf:86:3b:99:88:0a:29:45:89:91:59:08:df:05:56:57:4a:bc:
         ed:8c:0e:b4:33:5b:cc:6a:af:bd:28:ad:20:0e:10:d9:28:e4:
         76:30:74:0b:e8:cb:05:e7:73:37:b5:fb:79:44:76:99:bb:74:
         b9:bd:c8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 7 18:25:18 2025 by rpki-client