Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/835a41ff-9bee-3873-b8d4-1d2218cae8c3.roa
File:                     835a41ff-9bee-3873-b8d4-1d2218cae8c3.roa (raw, json)
Hash identifier:          1SGI85AOd0hCeiwsqcW+ay4CbMA3ETpvtYUoe7RSLn4=
Subject key identifier:   A4:BD:D2:8A:15:21:63:50:C7:DD:48:C4:C3:CC:D9:73:03:C0:A6:0A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B795D9E13E6BBDD7B5B80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/835a41ff-9bee-3873-b8d4-1d2218cae8c3.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     393667
IP address blocks:        2001:470:b0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:79:5d:9e:13:e6:bb:dd:7b:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=902a4db1-610e-4390-9d20-3c8c1ce56dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:de:1c:9b:18:22:94:70:32:43:9f:2e:16:ac:
                    58:8e:01:88:23:9d:47:16:26:fe:da:8f:9d:a3:45:
                    3d:e9:6a:23:f8:b9:5a:09:ca:16:d6:ad:33:40:c7:
                    1a:58:43:bd:f4:16:5a:df:2f:8e:90:08:2d:a6:32:
                    bf:8f:ac:b9:0f:dc:1a:63:fe:fa:d0:fb:d2:f0:e6:
                    8d:37:db:1a:d5:c2:0d:e6:58:ae:16:22:98:d1:1b:
                    ed:35:2e:bf:8d:14:59:ae:57:08:73:48:71:5c:75:
                    71:ad:19:41:32:37:e0:0c:3e:63:e7:a2:69:2e:2f:
                    82:b7:d6:4b:5b:9d:4e:c1:77:4e:a8:de:8b:5d:6a:
                    1d:37:43:30:d2:64:62:60:d9:a1:91:f7:93:c9:16:
                    de:9a:30:45:f9:b3:c9:6e:65:9a:83:3d:c0:da:a3:
                    7b:7a:8f:af:43:d6:55:b1:6b:72:24:18:14:9f:95:
                    29:6f:a6:6b:8d:33:6a:27:6e:c7:53:91:5e:ed:8c:
                    f2:ec:49:0e:47:fd:3d:2d:27:89:e2:2d:96:3f:2a:
                    9a:fe:51:d0:97:e4:a0:a0:48:aa:38:ea:1b:f1:c9:
                    31:55:89:d2:04:8b:cb:d2:b9:41:5c:3d:ea:e0:42:
                    11:8d:97:b5:cc:3d:28:72:8c:25:2a:b7:29:b3:bb:
                    35:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BD:D2:8A:15:21:63:50:C7:DD:48:C4:C3:CC:D9:73:03:C0:A6:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/835a41ff-9bee-3873-b8d4-1d2218cae8c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:b0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:37:dc:62:f2:ac:d2:6f:ce:0e:6b:68:4b:ac:8d:5e:05:08:
         db:af:06:96:90:2a:db:46:eb:62:9e:6a:94:40:e9:0b:cd:70:
         56:76:11:3d:79:60:20:2e:82:0f:57:dc:fc:4f:c8:8c:e7:d2:
         ac:1d:d2:f3:84:37:ca:ff:87:e5:92:b2:27:c4:8c:44:23:0b:
         96:6d:8b:b7:98:fc:94:7c:78:60:c1:57:e5:f8:83:7f:c6:3b:
         ed:1e:12:a9:38:b3:9c:fd:89:0e:2c:c9:cb:ce:5c:51:04:9d:
         92:01:46:84:aa:f2:b1:fb:ea:9e:48:ca:44:6e:94:ad:c8:fe:
         ac:5f:2c:9b:c7:2b:13:5c:19:9e:93:07:1b:a8:45:9d:50:ef:
         c3:99:28:5a:8a:3f:fa:a4:aa:14:11:55:e0:37:57:ac:9e:ab:
         12:e2:77:06:ff:a6:55:20:f6:7a:f3:f3:ee:bf:fb:d1:ae:b6:
         20:e1:08:93:b9:cf:56:62:56:8c:6c:55:65:fc:c2:73:6f:6d:
         41:4c:64:c7:af:bd:c5:52:a4:a2:c1:34:1e:0d:74:46:99:9a:
         39:67:9c:42:cb:36:df:48:39:fb:38:74:ab:1b:16:80:cd:bf:
         71:81:1a:17:00:65:70:de:e2:04:23:d5:c1:59:ae:50:46:df:
         fa:3a:be:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:37 2024 by rpki-client on console-fra.rpki-client.org