Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3203634-7f42-3052-b59a-4beee33d0ac9.roa
File:                     d3203634-7f42-3052-b59a-4beee33d0ac9.roa (raw, json)
Hash identifier:          bJ5Sv4WI+YgaExJX622u7WKlZjo64Q5KOiAcn6Nfelc=
Subject key identifier:   8F:41:7D:60:BE:FD:7E:F4:BA:1D:14:44:1C:78:0F:03:C0:30:FC:F0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845025AC84967D6C3D57D1ADE80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3203634-7f42-3052-b59a-4beee33d0ac9.roa
Signing time:             Sun 25 Feb 2024 14:00:34 +0000
ROA not before:           Sun 25 Feb 2024 14:00:34 +0000
ROA not after:            Sat 25 May 2024 13:00:34 +0000
asID:                     48957
IP address blocks:        2001:470:23d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:02:5a:c8:49:67:d6:c3:d5:7d:1a:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 25 14:00:34 2024 GMT
            Not After : May 25 13:00:34 2024 GMT
        Subject: CN=7d2229e9-d61a-4224-a785-0ed731400306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c4:d7:46:c3:98:57:82:89:b9:3a:32:f4:ad:
                    d6:47:7f:7c:82:ba:29:16:13:d8:3f:4b:52:b8:88:
                    31:6c:94:74:90:53:3c:c4:66:9f:d0:cf:36:05:0b:
                    df:04:18:ef:c9:af:06:c8:f3:c4:42:7b:ce:c8:11:
                    74:b7:52:0a:af:22:d0:5d:83:94:cc:f8:41:f7:e4:
                    46:b5:75:88:32:d4:8a:f6:c5:84:81:bd:e2:2b:24:
                    11:ae:cf:83:ca:c3:dd:94:c0:07:e3:d9:8d:a5:e3:
                    ee:79:a9:6d:90:d3:36:4e:64:dd:b5:6b:46:b6:ce:
                    23:4f:b9:73:b8:77:bd:f0:f1:79:20:ca:97:07:1a:
                    ae:b6:90:ee:89:76:e2:f0:0b:be:4b:52:6b:08:a1:
                    be:e4:aa:90:ce:f7:77:bd:23:c8:35:f0:6a:e3:d8:
                    b3:e6:6c:96:0f:db:04:ba:45:bc:5b:25:aa:32:e0:
                    19:49:de:b9:c8:1c:a6:3a:bf:20:05:12:c6:9f:96:
                    41:74:46:1b:99:3a:2b:1d:0e:02:2a:3a:e4:4b:1b:
                    6c:ba:fa:eb:41:e3:84:75:a9:7a:33:e3:e9:c9:15:
                    fb:32:af:03:b2:8e:cb:fa:c3:57:a7:58:3e:fa:41:
                    25:f6:b6:63:80:e6:56:04:b6:9f:0a:24:b5:bb:13:
                    68:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:41:7D:60:BE:FD:7E:F4:BA:1D:14:44:1C:78:0F:03:C0:30:FC:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3203634-7f42-3052-b59a-4beee33d0ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:9f:99:2f:bb:7d:71:fd:59:eb:21:b5:2b:d5:9c:27:18:52:
         b3:9a:90:13:50:51:a9:28:c4:ac:84:0c:17:a5:f5:e3:96:3a:
         09:90:cc:b7:20:3f:38:4e:32:e9:d5:41:0f:70:75:c7:41:06:
         ec:50:5d:f7:4a:c8:d4:c7:30:d8:b5:a2:e6:33:14:f3:21:6a:
         c6:54:76:98:b7:40:63:27:e4:b0:26:67:a0:ca:f1:f0:1f:ce:
         2f:be:a2:dc:8f:ad:43:37:bd:5f:d7:5c:70:7f:44:19:36:6f:
         e4:f5:c7:ab:10:87:77:b1:1e:98:ff:b6:a3:a4:9e:b5:d1:3b:
         4b:29:0e:8b:95:5f:26:98:24:9e:86:95:f7:06:68:a5:b6:cf:
         cf:93:39:02:c8:db:c9:68:38:19:3e:85:5d:db:f7:f1:b7:d0:
         5f:7a:38:a6:d7:19:ee:ef:03:9c:6e:86:d3:77:7f:f8:c4:22:
         b4:40:f9:90:21:07:07:43:ab:13:95:21:fc:44:b9:17:b2:1a:
         e7:1f:5e:1e:c9:05:89:88:31:25:87:e7:1c:e0:16:e5:93:fc:
         0a:96:28:8a:a0:2e:3c:51:36:76:23:15:e5:27:f7:4a:94:c5:
         d9:79:58:c6:fc:a4:51:1e:45:9a:eb:d6:ed:7c:64:bf:b6:ce:
         5b:e6:31:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:28:41 2024 by rpki-client on console-fra.rpki-client.org