Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8fa8ae8-3abc-3342-b382-d200fdf1521b.roa
File:                     d8fa8ae8-3abc-3342-b382-d200fdf1521b.roa (raw, json)
Hash identifier:          WUUwtKkfju32Gh71dCKqKD2lS3FzLzn73lAsu0gydqw=
Subject key identifier:   24:A1:34:FD:84:72:AC:05:D9:DA:E4:53:D8:6D:D1:F3:88:48:20:3B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F89561F3883BA01D80C43FB0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8fa8ae8-3abc-3342-b382-d200fdf1521b.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     394330
IP address blocks:        2001:470:b3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:61:f3:88:3b:a0:1d:80:c4:3f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=a0b9a97d-5706-4171-9fc9-8b888b1f6502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:43:bb:77:3c:4e:fd:cd:42:b8:23:97:0f:92:
                    2c:38:6c:29:6b:01:ac:f2:18:19:50:fa:fe:8d:02:
                    c5:4b:91:de:14:bc:9b:c7:d8:a3:10:0e:ff:63:5b:
                    aa:13:b2:c6:4c:fd:e0:c7:7d:dd:12:7a:06:c4:65:
                    75:c5:83:56:82:38:00:da:d7:06:b6:9a:d4:85:2a:
                    53:05:f2:66:b2:ac:bc:0a:e3:e9:9d:8a:65:95:cb:
                    86:de:ae:02:58:ed:13:70:05:ef:19:a1:b4:78:d1:
                    78:29:98:05:16:ff:df:29:06:39:d3:30:37:1e:8f:
                    52:ad:2c:53:e1:b3:7c:98:90:ee:df:23:5f:56:fd:
                    aa:92:78:a7:1a:68:6c:ca:83:53:db:a8:4c:41:aa:
                    71:a9:40:46:61:d1:3c:ac:20:99:63:eb:69:69:48:
                    9b:78:7f:63:e0:1b:13:e3:86:07:61:3f:be:60:e6:
                    20:94:2a:80:df:ee:4f:4b:14:c9:b4:11:cf:7b:8a:
                    ea:20:22:62:86:f3:39:8d:63:7d:ae:3a:7d:47:1c:
                    35:a9:b2:7a:57:a7:8a:f2:aa:5a:17:87:94:99:e6:
                    40:11:ba:f7:7b:99:8d:d8:61:79:e5:b0:95:e5:7b:
                    72:f7:fe:c6:aa:ae:ae:c2:5e:b3:67:2d:ac:2a:a8:
                    7f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A1:34:FD:84:72:AC:05:D9:DA:E4:53:D8:6D:D1:F3:88:48:20:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8fa8ae8-3abc-3342-b382-d200fdf1521b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:b3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e0:23:36:10:c8:90:6c:04:d3:80:69:1a:53:7e:c6:84:41:
         f4:5f:41:48:de:bc:1b:5b:b7:a4:76:62:59:47:62:83:59:56:
         1f:b0:4a:87:99:97:7b:0b:3e:52:7c:97:33:5b:a0:fc:f7:2b:
         d5:d9:0a:f8:48:33:fe:5f:2e:36:e7:6e:50:eb:64:6b:c5:b2:
         db:3a:06:2a:06:f3:94:f8:3f:ed:0b:95:9c:5f:fa:02:ad:b0:
         2e:45:48:33:ab:38:fa:c4:86:44:87:d0:ee:56:84:a8:ab:56:
         68:a9:28:2f:8e:af:7f:77:cb:fd:b8:24:12:f5:27:36:04:f4:
         91:2d:39:9d:15:0f:a8:d5:e4:71:5a:c3:43:59:a3:a8:f9:7b:
         60:a6:c8:c7:1a:cf:cb:ac:a0:d5:ae:0e:38:fa:bf:20:2b:4d:
         56:6b:21:20:bd:b9:5b:f2:eb:44:9f:dd:97:03:43:d4:7a:ee:
         a9:97:a8:81:b9:27:ee:3c:84:5e:c9:39:db:f5:bf:bf:e4:2b:
         58:4c:4a:0c:43:e4:f8:8c:7d:1d:27:f8:67:4f:81:24:35:8c:
         b2:4c:bc:ee:1f:e7:5a:12:2d:05:58:d1:04:8f:d8:73:e4:29:
         0d:3a:1b:61:fc:ad:c2:ac:d2:8a:d8:8e:d6:3b:e6:5a:d2:89:
         30:37:20:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:50:44 2024 by rpki-client on console-ams.rpki-client.org