Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9e1d4bdf-b2a4-329f-a78c-4701acf892ae.roa
File:                     9e1d4bdf-b2a4-329f-a78c-4701acf892ae.roa (raw, json)
Hash identifier:          f894dyR/Gb85y4yPxDFdb23t5J570kgI84c2G1vEaiY=
Subject key identifier:   CF:3A:D5:31:D3:00:E3:75:CC:FC:4B:A5:DF:25:A9:E8:7B:68:C8:57
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B5EE107D9E3B6F4EC7C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9e1d4bdf-b2a4-329f-a78c-4701acf892ae.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     398113
IP address blocks:        2001:470:1f8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:5e:e1:07:d9:e3:b6:f4:ec:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=944315fd-b9c2-4cee-9707-24705071c4e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e9:ed:a5:b1:d6:d3:f1:e7:7d:48:c0:6d:fa:
                    f8:2d:32:de:30:1a:37:98:ad:2e:41:8e:a5:19:6e:
                    69:12:1f:42:40:e1:49:da:4a:c8:91:67:75:6d:2d:
                    a9:b8:12:55:9a:c5:de:04:b4:2d:48:14:c6:95:82:
                    54:57:be:1e:58:0e:c4:32:16:97:5a:28:e8:80:05:
                    32:0a:ec:f7:5c:b6:da:ea:da:2d:6c:c8:62:70:83:
                    02:c4:15:0e:14:6a:26:39:68:b8:ed:28:42:3c:12:
                    03:4f:91:9d:8b:c9:31:76:94:3a:69:95:04:d4:a6:
                    cc:3a:6f:56:62:85:de:a0:d2:e5:6d:1b:0a:02:b8:
                    df:1d:db:59:cc:40:be:10:6c:f3:f9:95:29:fc:48:
                    2e:c1:c5:54:71:32:dd:c0:46:21:a1:0b:09:b1:59:
                    fa:6c:45:ab:31:da:b1:fb:2f:ff:9f:1b:4e:ee:a7:
                    48:f5:35:66:62:31:fb:b7:4e:af:74:7f:e5:2c:23:
                    1b:81:02:70:0b:8d:83:e9:3e:e9:14:a9:84:9c:2f:
                    e5:be:1b:48:be:9f:59:68:41:5c:14:10:1a:f6:1f:
                    99:96:4e:f4:93:07:f2:a4:18:35:a2:d0:29:2f:c5:
                    2a:43:11:c6:5c:0f:bf:7a:81:9a:22:1b:f4:0b:30:
                    a1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3A:D5:31:D3:00:E3:75:CC:FC:4B:A5:DF:25:A9:E8:7B:68:C8:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9e1d4bdf-b2a4-329f-a78c-4701acf892ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1f8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:d3:7f:29:48:49:03:34:54:26:98:f6:90:37:f1:00:4f:ac:
         f5:39:ba:3d:56:a3:2b:0f:e7:ba:f9:31:76:9d:7d:6c:59:65:
         4f:61:14:f6:24:06:ba:51:fd:6a:f5:b7:f7:f2:33:6b:2e:4a:
         a9:b1:5e:5e:b3:b5:64:b4:4b:99:38:a9:e4:9c:b9:ad:fa:79:
         bd:35:89:da:5b:5b:2d:21:d0:25:b2:d0:41:85:41:76:84:d2:
         73:de:01:59:f0:38:e8:da:71:78:26:66:b1:cf:98:93:af:5f:
         db:4e:cd:b9:e3:18:77:d4:25:5d:60:20:94:49:6c:9c:ab:6e:
         f9:6c:20:18:4a:4f:d9:ae:e7:c9:7a:06:af:22:6a:ea:6d:a0:
         b6:ea:eb:84:b3:37:79:a4:f4:92:45:50:1f:14:dc:c2:d3:ab:
         fd:bf:68:c0:be:2e:1a:ed:66:c5:6a:b4:1e:b0:d7:3f:81:70:
         49:0b:6d:7c:7d:cc:f4:83:0d:a5:23:a5:55:d2:77:ff:89:9d:
         84:e5:b5:aa:12:41:4d:d0:c7:e7:b6:ac:c1:06:0d:52:86:ab:
         a1:d7:27:1d:be:ac:cd:f6:18:2b:9b:5a:a6:dc:86:62:5e:71:
         23:47:cd:3e:0c:bc:03:9e:68:8a:fd:7e:a6:f2:a5:56:ee:85:
         02:87:25:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:29 2024 by rpki-client on console-ams.rpki-client.org