Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1b80d55-b116-3a71-85ff-f4cb8de4935e.roa
File:                     a1b80d55-b116-3a71-85ff-f4cb8de4935e.roa (raw, json)
Hash identifier:          RMdOIhj/tqP83/whJ20xa+MiHMSbZIXWnKf73pn/bBY=
Subject key identifier:   0E:C3:8A:08:43:73:B6:AD:47:D3:A1:F5:47:3C:F5:A2:BB:51:A4:A2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845025AC94FCCCA63F48EE42C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1b80d55-b116-3a71-85ff-f4cb8de4935e.roa
Signing time:             Sun 25 Feb 2024 14:00:34 +0000
ROA not before:           Sun 25 Feb 2024 14:00:34 +0000
ROA not after:            Sat 25 May 2024 13:00:34 +0000
asID:                     32578
IP address blocks:        2001:470:23e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:02:5a:c9:4f:cc:ca:63:f4:8e:e4:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 25 14:00:34 2024 GMT
            Not After : May 25 13:00:34 2024 GMT
        Subject: CN=9b48751a-b0c5-41d1-a583-2f58adf85dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:81:73:e8:10:d8:ba:15:b0:79:79:cc:11:69:
                    28:44:28:f8:35:74:86:00:e1:af:62:0c:07:23:6a:
                    7d:2b:67:4d:2a:93:d3:a4:b8:d0:64:8e:2a:f8:64:
                    6c:f8:a8:d4:8e:0c:08:ae:be:2c:9c:1e:f1:6c:32:
                    f6:0e:7f:c2:ef:76:2a:47:e4:4f:ae:5b:e6:67:53:
                    81:c6:43:59:b5:e3:07:5d:4f:d9:98:1b:e3:f8:9e:
                    1a:bc:9d:fc:43:07:9c:3e:43:f7:2b:60:c1:7f:6d:
                    c0:70:be:e4:b4:53:f3:2e:cc:bc:41:9c:b0:ec:c3:
                    41:67:29:bc:74:fe:c9:f3:bf:54:3c:bd:23:4a:ae:
                    30:4a:20:64:83:42:9a:11:f5:2f:e6:16:52:22:58:
                    ce:a8:0c:fb:ba:c9:9a:f8:81:23:3d:4d:b4:d7:a9:
                    98:29:e7:79:9e:8c:18:1c:a7:45:97:ea:71:0d:2a:
                    fb:2b:ee:c6:06:67:56:df:2f:07:7f:75:88:bc:80:
                    78:c3:a1:a3:37:8a:2b:69:64:1f:e3:09:ac:42:41:
                    96:35:b4:b8:fa:29:95:7f:06:52:35:09:4a:c5:3d:
                    29:6f:a3:28:ed:06:f6:60:28:cb:ef:4e:d7:c7:89:
                    24:d9:e7:db:f5:85:93:b3:63:18:bb:4c:e2:c7:1a:
                    7b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C3:8A:08:43:73:B6:AD:47:D3:A1:F5:47:3C:F5:A2:BB:51:A4:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1b80d55-b116-3a71-85ff-f4cb8de4935e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:66:1b:58:2c:82:eb:39:06:11:57:d1:43:5c:e5:d2:bd:e1:
         d7:f7:47:5a:fa:90:bb:b9:30:5e:9b:23:e5:2b:35:40:2e:88:
         64:50:66:73:9b:96:81:25:7d:a4:4a:dc:17:63:ce:11:b3:66:
         6c:c5:8e:6a:c4:aa:2b:9b:84:b1:f3:af:31:e6:7b:8c:b1:a3:
         98:1c:33:79:df:8e:aa:07:93:6e:72:42:57:2e:6c:4e:a8:63:
         21:50:e5:ff:df:01:aa:81:63:81:1a:99:e4:4d:79:9c:25:c9:
         99:36:ae:32:bd:8a:d8:4e:f4:b3:e3:06:00:3f:8f:32:1a:04:
         0a:f7:c9:15:b0:0c:03:de:30:53:8f:58:1a:88:96:ab:ff:7f:
         57:99:02:79:c0:f4:88:e3:50:01:2d:a4:d1:36:92:78:df:4d:
         86:9e:31:74:ac:15:ec:35:fc:e1:be:18:8f:97:28:af:64:1f:
         ba:3a:64:29:7c:01:dc:7e:bc:b5:81:40:f7:18:da:bc:4e:31:
         dc:8c:06:40:32:c1:bc:9e:fb:52:2e:ad:8c:16:4b:ab:5d:e2:
         b5:6e:1d:55:12:86:82:e7:95:0a:86:87:45:de:6f:4b:0f:5d:
         bd:97:8c:13:ba:26:a9:05:30:d4:4b:65:ed:23:12:00:7b:e5:
         54:51:85:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:56:15 2024 by rpki-client on console-fra.rpki-client.org