Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98098871-0880-3a51-9494-3246e74cd5ac.roa
File:                     98098871-0880-3a51-9494-3246e74cd5ac.roa (raw, json)
Hash identifier:          RdODgqAqf3EwXvKjpFGOCJ+4thyEIqOQxcg/XWs58wE=
Subject key identifier:   90:80:06:7A:B2:B2:0B:17:C2:FB:2D:99:B3:95:FA:6D:C2:34:6B:23
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584843BEA7C9126A50A6CDFA4800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98098871-0880-3a51-9494-3246e74cd5ac.roa
Signing time:             Fri 20 Dec 2024 02:30:12 +0000
ROA not before:           Fri 20 Dec 2024 02:30:12 +0000
ROA not after:            Thu 20 Mar 2025 01:30:12 +0000
asID:                     12025
IP address blocks:        2001:470:21f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:43:be:a7:c9:12:6a:50:a6:cd:fa:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec 20 02:30:12 2024 GMT
            Not After : Mar 20 01:30:12 2025 GMT
        Subject: CN=6a9398fe-ebe5-4ba8-95a9-f55a7ad1d179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:80:93:3c:d7:d2:c3:98:ec:82:a8:d8:51:36:
                    f7:36:65:1c:7d:7f:ea:8b:fa:f0:38:25:a9:a8:0b:
                    f6:c1:a3:a8:e4:26:37:31:5a:11:4b:2d:c3:d7:5d:
                    59:74:78:03:57:a5:63:ce:b4:09:09:c4:cc:77:59:
                    05:b2:b0:10:59:49:29:b5:77:fd:30:26:fa:39:e0:
                    68:1b:5f:f6:96:8a:30:a9:f6:3e:7e:4a:1e:4f:83:
                    72:6a:8e:31:9c:ac:1d:6d:79:38:c3:b0:e8:38:c1:
                    9b:11:a4:77:cd:c8:d6:d5:75:7d:e0:92:fc:b4:40:
                    cb:ab:9a:14:86:0a:58:8c:90:29:f8:7f:a4:c6:55:
                    26:60:9c:c8:49:ee:26:83:6c:6a:04:8e:b5:07:ed:
                    a8:97:85:b9:9d:17:83:35:44:0e:48:c4:23:c6:07:
                    74:48:73:b6:ab:a6:48:95:2b:5a:e9:14:03:6c:8e:
                    89:44:86:60:8f:1d:14:ff:63:8c:fd:2a:63:02:02:
                    9e:2f:93:2b:b6:4d:8f:c3:92:f7:f8:1d:a0:4c:24:
                    a7:e7:56:59:33:9b:ac:aa:51:2b:6a:5e:69:bd:cc:
                    22:7e:69:62:cb:67:f3:61:2b:63:39:32:c4:8f:65:
                    bd:00:56:62:ba:c2:f6:25:0c:80:6b:0d:7e:ba:ad:
                    54:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:80:06:7A:B2:B2:0B:17:C2:FB:2D:99:B3:95:FA:6D:C2:34:6B:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98098871-0880-3a51-9494-3246e74cd5ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:21f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:82:3b:d0:be:3a:6c:3c:62:60:ad:f1:68:52:50:68:2b:c3:
         9f:c8:84:3a:ff:6c:38:99:f1:c3:f6:b7:d5:1e:ac:99:77:d1:
         ec:6f:e8:d9:21:e1:3a:94:9c:3d:e5:94:b2:09:36:e6:02:b7:
         7c:e0:0b:e0:ed:a1:7e:86:04:09:da:36:a6:d3:55:47:a3:cc:
         cc:b6:16:c5:8a:ae:09:28:de:03:ee:19:b9:e0:89:45:bb:f4:
         9a:ab:56:f1:13:87:2f:4f:75:79:29:fc:02:00:82:79:23:bb:
         d0:fd:e8:3d:53:ae:55:66:ca:66:c0:0f:96:63:ff:1d:d0:6c:
         ab:da:d1:9a:ed:2b:71:7c:c5:a6:f2:ab:f0:89:04:44:32:2c:
         c3:c1:51:33:e0:b0:bc:a6:c4:a2:68:04:84:86:c5:f7:bf:d0:
         c0:ad:7b:ff:ba:4a:36:2c:39:f9:98:07:3d:16:2d:b6:f2:77:
         ac:36:9d:9d:6e:ac:eb:27:db:4f:da:3e:08:01:92:92:6b:b8:
         4b:1e:98:41:60:4e:56:66:19:86:63:76:a8:00:27:a8:80:5e:
         98:26:40:6c:23:fd:79:47:85:40:14:54:27:d2:c3:dc:5b:95:
         4d:1b:e3:be:b4:f7:c4:ff:e9:8e:e1:8a:e0:af:6d:bf:c5:90:
         49:97:62:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:48:21 2025 by rpki-client