Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/96fa2b02-8935-3fca-ae3d-cd0eb366dfc7.roa
File:                     96fa2b02-8935-3fca-ae3d-cd0eb366dfc7.roa (raw, json)
Hash identifier:          REXfJHOecXvS5z0rUkttgiNP+EKQPYLUdVLhAmzbS1s=
Subject key identifier:   3F:2C:03:AC:F7:5F:0C:9E:E2:CC:CF:2F:18:A4:57:9B:AC:D4:A0:4F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285847D834C3B11B4B41221F182600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/96fa2b02-8935-3fca-ae3d-cd0eb366dfc7.roa
Signing time:             Mon 11 Nov 2024 14:00:39 +0000
ROA not before:           Mon 11 Nov 2024 14:00:39 +0000
ROA not after:            Sun 09 Feb 2025 14:00:39 +0000
asID:                     34774
IP address blocks:        2001:470:363::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:34:c3:b1:1b:4b:41:22:1f:18:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 11 14:00:39 2024 GMT
            Not After : Feb  9 14:00:39 2025 GMT
        Subject: CN=86592b02-60f0-4878-adb5-5d3f2d087b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6f:17:d3:a5:0d:c1:69:ad:06:6a:52:61:80:
                    7e:12:91:15:81:aa:51:18:8e:64:2d:3d:24:93:b2:
                    23:9e:0b:fc:2b:f8:75:94:50:86:96:4e:af:fc:21:
                    9a:4a:1c:ba:c0:49:5f:d6:0b:5a:87:25:f4:44:1e:
                    27:75:5c:af:76:18:be:99:50:ec:18:c6:c8:37:5d:
                    7f:33:6c:23:e1:4b:5a:7b:fe:05:4c:22:6a:1e:93:
                    38:00:62:ce:d3:86:65:37:79:52:f7:ba:13:00:da:
                    50:d6:3b:64:c5:5a:5a:bd:e6:89:a1:c0:7d:99:86:
                    79:c8:ad:bf:55:5d:46:40:77:a1:24:4a:c5:e6:1c:
                    3c:43:87:f9:8d:37:7c:5d:2c:8d:9a:a6:55:c2:6a:
                    44:49:99:fc:98:53:68:9c:f2:7f:4e:d9:3c:f5:25:
                    31:5e:1f:b5:f1:39:17:59:57:16:a6:c1:6d:bd:c2:
                    03:22:87:57:c8:64:ef:89:c7:eb:1f:a9:73:59:7c:
                    0c:25:94:2b:82:82:c7:fd:12:8d:c7:34:ad:07:09:
                    5c:59:70:0a:0b:0a:fe:e5:f2:02:2d:4e:12:bd:85:
                    5d:3b:87:fd:6b:29:77:d5:01:0b:77:c8:92:30:4f:
                    7f:14:99:ca:8d:ab:ae:ae:bf:9b:43:b1:35:0f:9a:
                    aa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2C:03:AC:F7:5F:0C:9E:E2:CC:CF:2F:18:A4:57:9B:AC:D4:A0:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/96fa2b02-8935-3fca-ae3d-cd0eb366dfc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:363::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:13:10:1a:f2:e9:51:df:95:d7:cc:c1:98:20:ee:92:90:c9:
         fb:38:5f:01:0c:3b:ed:82:2f:6d:56:61:86:bc:33:02:e6:03:
         52:d2:67:30:ed:56:26:88:e2:af:93:fe:bf:ac:4c:d0:c6:2a:
         a0:28:cc:81:16:4f:61:27:c1:0b:87:11:78:f0:e0:eb:e5:74:
         d3:17:da:e7:37:50:f9:41:cb:48:56:15:12:34:a9:eb:e4:09:
         27:ba:23:13:f2:44:fd:68:aa:ef:c3:9e:9c:f0:04:c4:16:c2:
         31:c1:24:d6:77:24:c0:74:8d:a6:65:0b:34:71:e4:24:76:c5:
         a6:fd:52:06:16:a5:20:3d:8a:d4:fe:61:56:7d:9b:a3:71:92:
         e8:ec:08:00:92:67:74:b1:78:45:8e:91:e3:55:a5:50:ee:a9:
         28:21:3f:97:21:b0:17:96:1c:00:c9:ff:e5:c5:a7:96:c4:ee:
         b5:ef:0d:e9:a3:00:61:06:3e:e9:7d:9f:34:74:57:c2:f1:8f:
         19:4c:ae:64:d0:af:5a:46:25:0a:ac:7c:5e:37:16:ca:6e:15:
         18:ab:45:a3:95:2c:cd:44:85:ae:4e:54:70:51:e1:0a:7d:c0:
         22:35:95:db:9f:3e:17:26:a6:a2:a6:1a:c5:f3:49:bf:db:80:
         38:81:1c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:29 2024 by rpki-client on console-ams.rpki-client.org