Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c34ffb78-a4e3-3fb6-9573-584a9537344c.roa
File:                     c34ffb78-a4e3-3fb6-9573-584a9537344c.roa (raw, json)
Hash identifier:          0AHycBhE/RweIEX1es6GwgN6r2l/A3VRnSCdGkIXN0w=
Subject key identifier:   2D:9D:72:EA:1F:C9:4C:2F:80:77:E6:FB:BA:CF:4C:3E:EA:AA:99:16
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F8955115BDFE49B677FAB900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c34ffb78-a4e3-3fb6-9573-584a9537344c.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     136758
IP address blocks:        2001:470:cc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:51:15:bd:fe:49:b6:77:fa:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=47945de6-0756-451a-b62c-4e751713d8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ed:d6:10:0e:ad:ef:a3:53:5b:06:13:65:10:
                    67:98:c7:79:89:75:92:10:a1:4b:b6:76:84:a3:ce:
                    00:0c:80:00:60:9c:ee:17:da:f5:31:5f:18:0b:d2:
                    0d:27:d2:8d:f6:d7:a2:a4:8d:5a:65:9a:7b:4a:d5:
                    73:d3:eb:6d:b3:67:06:96:ec:7c:5f:2b:44:f5:1b:
                    14:45:34:09:49:84:93:c1:82:21:33:4d:2e:a0:b3:
                    f9:69:0c:27:e6:55:97:e9:d7:5c:59:01:62:95:ad:
                    ae:cf:df:87:7c:e9:92:b3:54:83:fe:af:1c:59:eb:
                    b4:89:c5:f2:2c:4e:0f:30:35:81:a4:14:1b:a0:13:
                    d1:cf:9a:57:05:29:9d:41:94:f0:c1:02:5b:ca:14:
                    52:83:dd:78:56:b0:4a:df:14:72:52:38:43:a0:cb:
                    b4:27:8c:28:b9:90:ec:0f:f6:26:d7:f1:ce:ae:8a:
                    29:7b:be:c9:ca:d9:25:8c:b5:47:60:82:77:dc:29:
                    d7:ca:b2:7e:00:02:77:29:8e:20:78:f3:bd:e9:fe:
                    50:3e:19:55:a8:f8:16:56:a8:2d:43:55:cd:eb:3c:
                    35:ef:28:6b:f1:20:78:af:07:54:4f:24:b8:61:6f:
                    6d:d2:c5:5b:8a:89:57:20:3e:4b:9f:48:2f:4a:ea:
                    04:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9D:72:EA:1F:C9:4C:2F:80:77:E6:FB:BA:CF:4C:3E:EA:AA:99:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c34ffb78-a4e3-3fb6-9573-584a9537344c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:cc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:2c:e8:e7:dc:2d:42:83:7d:2e:db:30:72:a1:53:76:41:38:
         6d:81:8c:d6:3b:78:70:8a:9a:17:18:0d:1b:2e:c7:ca:fa:ac:
         7f:57:87:6b:ff:1d:6d:0e:aa:8f:6f:0a:e0:fa:c5:df:54:ba:
         eb:f6:98:2b:9b:54:9d:31:ec:9d:dc:df:a6:1a:6f:d9:20:50:
         41:5f:63:fb:f4:38:5c:07:e6:83:65:74:07:a7:3e:a9:28:2d:
         c9:d7:e9:86:ca:e7:b2:cc:17:d5:fb:35:09:1f:53:98:35:94:
         b8:a7:8f:b9:67:91:1b:c7:d2:9a:57:15:7d:30:07:7a:70:8d:
         27:d7:58:c1:37:67:e6:64:dc:03:b6:36:e0:77:65:6c:5c:c1:
         64:c5:5c:25:85:5b:75:23:56:63:59:bb:5c:c9:04:85:10:47:
         bb:2a:ff:6f:ba:2c:a9:ea:e5:06:36:73:e9:9b:2e:9a:bd:c9:
         c7:c7:09:c7:a2:b1:f5:5c:e8:e2:5e:a4:22:63:67:b4:82:a4:
         e7:f5:00:c4:ca:e4:f3:b0:3a:4c:0c:74:e6:32:03:73:cb:58:
         e6:1e:63:f7:b7:e6:a3:09:05:09:99:d2:42:b8:ed:58:7f:34:
         d2:38:f5:1d:49:58:89:76:9a:82:77:38:8c:a1:db:2b:3e:02:
         1d:82:d0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:17:11 2024 by rpki-client on console-fra.rpki-client.org