Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89971666-a17e-3ad6-b043-431dcf7cb1fb.roa
File:                     89971666-a17e-3ad6-b043-431dcf7cb1fb.roa (raw, json)
Hash identifier:          GZ/90n3A0GqAjpOdmKd/L7bbMKLOJFRB/iTpakayVhQ=
Subject key identifier:   E4:55:A3:D9:B7:75:37:AD:51:9C:37:45:E4:59:53:B0:78:48:A4:78
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844FCD4788239EA76352DF00740
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89971666-a17e-3ad6-b043-431dcf7cb1fb.roa
Signing time:             Fri 23 Feb 2024 14:30:57 +0000
ROA not before:           Fri 23 Feb 2024 14:30:57 +0000
ROA not after:            Thu 23 May 2024 13:30:57 +0000
asID:                     30886
IP address blocks:        2001:470:2a1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fc:d4:78:82:39:ea:76:35:2d:f0:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 14:30:57 2024 GMT
            Not After : May 23 13:30:57 2024 GMT
        Subject: CN=9e67b210-22de-4f6a-b00f-f48ce0a83e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:55:5d:b2:e4:36:78:4f:e9:b6:8e:f2:e9:15:
                    cf:60:43:f9:59:82:3d:c9:9b:2c:23:55:81:1f:9b:
                    f7:a7:44:d0:b1:35:9d:30:26:25:ed:e5:25:1f:c7:
                    09:01:d8:33:8d:20:18:e8:e5:a1:58:2a:24:3d:b8:
                    3f:34:23:f9:cc:06:b3:68:91:c0:9e:b3:25:f2:29:
                    09:fd:73:34:d1:02:bb:bd:24:98:2a:7b:ce:e3:a9:
                    20:f3:d0:7c:71:e8:fd:6f:aa:df:f5:e1:4a:41:91:
                    b3:dc:b1:8b:ef:46:f6:58:c1:6d:6f:2c:0b:86:bb:
                    9e:ae:cc:40:6c:8f:e0:4f:58:37:ee:85:31:8e:66:
                    00:99:9b:df:78:f3:ce:4a:de:eb:47:12:7e:20:28:
                    05:74:a8:46:86:18:2f:96:ae:04:f1:43:44:9d:8f:
                    73:ab:f5:66:d9:9d:ba:8d:e4:de:5d:56:09:0a:bd:
                    03:b5:3d:44:1d:0a:51:b3:48:18:85:a9:3b:1e:9f:
                    e3:ed:4d:bb:ac:45:e0:18:af:11:38:0b:4d:11:ad:
                    94:98:0e:9f:74:99:fc:f6:f2:db:a7:d3:48:61:5d:
                    75:81:32:91:76:e6:5c:96:45:d2:8e:87:6a:c1:98:
                    f5:be:25:d7:2b:88:9d:a3:57:d4:9d:d9:a2:c9:3f:
                    9f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:55:A3:D9:B7:75:37:AD:51:9C:37:45:E4:59:53:B0:78:48:A4:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89971666-a17e-3ad6-b043-431dcf7cb1fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f7:e1:5e:3b:2d:fe:5a:3b:88:03:3b:b3:bd:ab:29:be:c7:
         c3:2a:d4:18:95:be:ee:97:cc:33:63:a2:ae:ab:5d:cb:b9:70:
         50:95:09:4e:65:bc:db:79:86:42:c4:b8:0c:62:60:a0:32:b2:
         ac:33:c2:06:bf:82:02:e8:9a:30:b7:5f:94:95:4f:68:e0:c9:
         fa:29:3f:1b:14:d3:cb:00:7b:a0:4c:4c:ed:7b:fb:3e:7c:07:
         1c:35:15:63:5c:9a:43:ad:46:7e:73:ad:93:4b:22:76:8d:e0:
         99:77:9a:08:c4:88:d5:a6:63:09:4b:f7:6b:e4:74:0f:4f:38:
         fe:4d:c7:78:60:9a:da:b2:f7:66:ba:9e:d1:45:07:fc:11:d9:
         2f:ac:45:56:3a:5c:6d:c3:34:56:21:55:29:9b:bb:11:19:86:
         f2:3a:a8:cf:06:9b:29:86:79:e6:3f:8c:24:40:10:0d:57:98:
         f0:3c:94:70:16:b8:f9:ec:3c:cc:52:59:5d:38:95:b1:bb:2a:
         b0:d2:c0:7f:a8:44:b8:d0:c2:e9:6b:b5:da:73:ef:82:16:93:
         ba:95:08:c4:ba:3a:65:30:9b:f1:dd:dc:04:ce:e5:62:26:47:
         3c:6c:d7:82:51:f6:d4:08:38:fe:67:a0:74:ab:37:73:df:aa:
         d4:39:e3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:20:37 2024 by rpki-client on console-ams.rpki-client.org