Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98ede81b-b24a-3190-8a33-12806a1d7e56.roa
File:                     98ede81b-b24a-3190-8a33-12806a1d7e56.roa (raw, json)
Hash identifier:          eYs9J+t3Rv8RXa0ePWi2XeJoKt8OeDlhGiImajS7MOg=
Subject key identifier:   95:0C:C0:8F:73:39:EA:70:B5:FC:87:75:44:F9:78:C8:84:D5:E0:17
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFEB60968F7E4D28153AC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98ede81b-b24a-3190-8a33-12806a1d7e56.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     32397
IP address blocks:        2001:470:16::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:eb:60:96:8f:7e:4d:28:15:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=0cf9eb84-95ea-46bc-8aa2-6219cb33dfaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bd:45:05:e3:a4:a4:0e:dc:ab:0d:99:cb:d8:
                    bb:41:e0:7b:b0:90:07:e4:d3:a7:ce:a5:cc:53:aa:
                    5c:74:1c:27:a9:27:c3:60:4c:00:e6:7a:a1:46:51:
                    e9:f5:88:7e:68:68:17:2a:9d:89:be:fe:ab:e5:b0:
                    a2:4a:98:7a:5d:88:d0:53:1b:5d:aa:39:8b:95:8f:
                    e7:5c:0c:6e:3d:23:14:20:ec:9f:c1:08:20:03:c5:
                    d0:5b:1f:41:03:86:bc:f8:f7:20:95:0e:f2:a8:d3:
                    bd:68:c1:24:bf:7b:2e:f5:9b:96:40:3b:ff:37:e5:
                    ed:e2:95:5c:12:41:81:64:4a:23:c9:f5:d5:09:57:
                    8f:a3:02:d8:1e:64:24:c7:1a:9d:49:2f:5f:10:4b:
                    d8:99:ad:88:b3:b5:4c:b8:68:d5:1b:a2:89:a2:38:
                    6f:14:48:84:f5:9f:dc:b9:b7:ca:95:b9:56:df:c8:
                    9d:7c:d5:2e:fd:e2:22:88:2f:d9:f4:da:d2:8e:3f:
                    33:68:39:a1:50:c5:49:f1:01:00:ad:57:34:29:7b:
                    f4:c4:40:e0:57:84:ff:11:67:ed:c1:61:fd:9f:67:
                    32:4d:24:0e:da:df:7a:d0:56:c0:c5:32:53:2d:09:
                    ff:39:87:1b:60:b6:f9:a4:63:02:99:54:cb:d5:6c:
                    2f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0C:C0:8F:73:39:EA:70:B5:FC:87:75:44:F9:78:C8:84:D5:E0:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98ede81b-b24a-3190-8a33-12806a1d7e56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:16::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:b0:6a:39:ce:1d:f0:89:e1:02:0e:70:73:a2:7c:dd:df:ca:
         08:73:a1:86:02:f1:97:c3:d9:d2:b1:77:d7:da:92:63:34:d6:
         75:a2:ea:c1:8c:6b:3e:9e:ef:d8:3e:11:52:6d:7f:43:ef:96:
         5f:53:05:4a:a6:16:fa:5e:21:0c:db:bf:84:d9:a7:23:49:13:
         ab:33:3d:0e:7a:3e:17:51:75:07:58:f2:f5:03:ea:a6:28:e1:
         84:37:ce:af:ef:c2:92:f1:0b:0f:10:51:ba:cb:87:91:a7:88:
         9c:1c:3b:80:04:b7:52:52:50:18:dc:a8:3b:aa:2e:40:a1:69:
         92:72:60:b7:45:3a:7e:f5:ff:df:d9:32:47:67:23:d5:77:51:
         43:5e:40:c1:f2:29:9f:ba:b3:7e:04:ea:14:ba:a6:4e:c0:b6:
         84:76:ef:b5:34:23:42:ea:9d:23:db:ac:e7:5f:ff:17:b0:38:
         37:03:32:6e:8e:ca:0a:a0:6b:c5:7b:3e:ce:6b:84:a0:ef:da:
         71:79:9d:f3:87:40:b6:26:05:8f:e7:cf:af:41:0a:2e:b8:81:
         3f:6c:5b:0a:41:d5:6e:97:0c:eb:fe:76:77:7c:1f:41:04:c4:
         be:e7:51:d7:90:0f:39:38:db:9c:4c:34:56:2a:8a:0d:ec:81:
         86:92:19:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 7 12:12:20 2025 by rpki-client