Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9e802e7e-7b99-3d87-b7f0-223b83103386.roa
File:                     9e802e7e-7b99-3d87-b7f0-223b83103386.roa (raw, json)
Hash identifier:          ecS3YG0isGnCEwLtQct6VnMeZWAOKGhylKw67mY4+eM=
Subject key identifier:   48:02:92:99:6C:3D:DE:F5:86:3A:BD:E0:5F:3E:E8:A9:3D:88:68:6B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584589A316DE7E2D33DABB46E1F0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9e802e7e-7b99-3d87-b7f0-223b83103386.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     31769
IP address blocks:        2001:470:172::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:16:de:7e:2d:33:da:bb:46:e1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=da801e8f-4286-4e6b-aaf2-67084ee776ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7e:54:e2:32:ca:63:2f:88:0b:36:24:e7:38:
                    ed:12:a2:5a:c7:34:50:55:34:e8:bb:24:8e:db:fe:
                    66:68:d0:21:f5:fe:d0:15:14:29:df:99:cb:3b:5f:
                    3a:b2:1a:d2:4a:b6:61:90:fc:0b:cb:98:1d:bb:7f:
                    78:15:37:24:6e:b1:ff:91:34:79:39:a0:22:ba:d0:
                    de:41:89:01:c2:20:94:82:9d:c0:9d:9a:55:d1:2f:
                    2e:f7:6e:2f:3e:91:70:5a:08:dc:c3:42:f6:17:28:
                    92:b5:bf:f2:75:8c:07:63:2e:26:07:70:f3:00:f4:
                    55:e1:91:4e:b5:aa:d0:80:a5:00:b0:e2:d2:d8:ff:
                    02:53:42:ce:1e:46:1d:c4:9b:a3:3e:1c:08:90:43:
                    ab:e3:7c:d6:df:e6:50:9a:c3:8b:57:72:8f:ba:f2:
                    12:fb:6a:7e:d7:fe:27:ad:46:0e:c9:4b:c3:6b:ae:
                    ec:aa:4e:c3:54:af:2e:12:c6:9d:eb:ac:e6:01:27:
                    73:71:b1:97:45:8b:84:b8:db:7e:49:91:14:3c:b3:
                    86:41:20:9c:5d:48:e2:6b:8d:73:a1:bc:c1:a7:fb:
                    88:0f:5f:d2:99:97:d0:2d:fc:50:e8:3e:ef:ef:7c:
                    dc:6d:ac:0c:e6:84:d8:60:81:b8:e9:87:f4:ee:3d:
                    88:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:02:92:99:6C:3D:DE:F5:86:3A:BD:E0:5F:3E:E8:A9:3D:88:68:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9e802e7e-7b99-3d87-b7f0-223b83103386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:172::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:53:22:1b:1d:1f:9d:a6:a7:e3:a3:cf:98:c1:87:69:59:e6:
         fa:22:40:4d:51:ba:f6:e9:b1:4d:c5:11:6c:25:33:57:b0:06:
         a3:6f:89:86:08:4b:53:8a:05:76:89:b8:60:36:39:aa:1e:f7:
         23:e3:18:5e:11:79:97:0d:9b:b2:dd:c5:e1:f9:ae:38:d8:8b:
         cf:fe:66:b5:14:24:57:58:e2:93:3b:6a:86:61:4a:03:c0:88:
         c4:95:7d:fb:e0:ae:c9:20:bd:a1:69:c3:57:46:39:60:c3:83:
         67:d1:4a:95:4e:89:7c:3c:8b:9a:f2:d3:cb:96:76:c4:44:81:
         bc:e8:8d:16:3b:68:fb:98:4d:b0:bd:fa:54:d3:fb:cd:31:dd:
         56:4f:03:a2:c6:67:43:49:5d:ee:39:cb:1b:d9:5a:6a:01:30:
         92:fe:07:98:34:e6:98:9b:72:1a:32:c6:85:e2:18:8d:95:8a:
         fb:98:b0:36:6f:ad:c5:ec:df:4a:86:92:26:db:dc:35:d2:5f:
         99:8b:6a:4a:b8:68:94:74:2a:d9:72:2f:ca:af:df:bf:90:55:
         38:b1:0f:0f:b5:65:1b:17:00:5d:13:74:0d:2b:3e:fb:c5:15:
         fc:78:ce:b7:43:05:64:bd:c8:4b:e7:e3:49:b1:ff:85:fd:5d:
         43:23:c7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:30:37 2024 by rpki-client on console-ams.rpki-client.org