Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e19f2a9b-81ed-32c6-91b1-94953deb933a.roa
File:                     e19f2a9b-81ed-32c6-91b1-94953deb933a.roa (raw, json)
Hash identifier:          FAdmtmGN3ilGqGa0vXpB7VPvx26tcr2XZ72WbNvPXp4=
Subject key identifier:   33:D7:A3:70:5F:02:3B:80:13:DB:40:3C:D3:4D:E8:C9:51:32:FC:A2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D00315F07628E8B5A6C260
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e19f2a9b-81ed-32c6-91b1-94953deb933a.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     30092
IP address blocks:        2001:470:2c4::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:03:15:f0:76:28:e8:b5:a6:c2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=1483dc0e-dde2-4669-b19b-a20c69d1c59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:8d:6d:bd:34:65:38:83:a1:8c:38:8d:54:
                    12:f1:ac:5f:35:9b:a4:38:14:7a:4a:01:c6:3e:db:
                    e9:98:9b:73:f5:5c:a3:eb:0e:09:75:08:af:6e:36:
                    e6:7e:84:68:a1:2c:3c:f9:4f:3b:b5:cd:4b:c0:99:
                    f9:68:eb:34:40:99:4d:96:cc:88:6a:ce:42:4f:77:
                    6b:2c:e7:52:18:9e:7a:34:f4:3c:72:00:a9:46:cf:
                    5e:23:b8:23:15:13:ec:8e:11:7f:93:d8:42:93:6c:
                    2b:5c:32:8b:80:73:a4:47:ac:8a:a4:76:95:b6:22:
                    4f:f7:60:59:70:16:91:c4:48:85:94:19:f8:70:77:
                    8b:be:53:51:4f:4e:36:23:19:1f:ac:b2:fe:5f:ed:
                    e7:fb:a7:96:7c:20:ab:4d:6c:fe:90:d7:51:ec:16:
                    5f:17:3b:a5:5d:d2:ae:27:08:1f:4b:1e:1f:52:5b:
                    60:e4:b5:dd:ab:93:dc:20:bf:f5:b0:9d:8b:2d:16:
                    14:2b:21:10:e3:9e:08:4b:37:35:34:f0:bd:7a:f0:
                    6d:67:83:1a:01:a8:64:3d:43:19:79:54:4e:b9:5a:
                    40:68:8b:d7:12:b4:e3:9c:eb:cc:3f:ea:54:1b:d7:
                    d6:d7:a5:02:a4:24:9d:d7:d7:81:55:e6:23:2f:4e:
                    66:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D7:A3:70:5F:02:3B:80:13:DB:40:3C:D3:4D:E8:C9:51:32:FC:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e19f2a9b-81ed-32c6-91b1-94953deb933a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2c4::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:eb:80:a0:cd:7a:08:90:8d:7a:2e:ba:d5:1e:d0:e7:59:6d:
         4b:f4:53:e7:3c:c6:98:cd:24:b5:a2:2b:1b:23:f0:74:8f:69:
         a1:2c:6d:aa:0d:11:30:12:f6:5d:e7:17:27:69:10:0f:dd:11:
         ab:61:be:e3:f6:bb:33:11:0f:c5:9a:91:e7:0b:70:d0:4a:f3:
         90:5d:14:ac:c9:36:12:94:a7:77:c8:0a:92:72:df:20:85:e0:
         b5:86:f9:00:c7:07:61:81:15:da:b3:f1:73:87:61:78:df:08:
         87:fa:23:7b:bf:b3:f6:97:db:72:41:d2:4e:6a:fa:eb:5e:51:
         5f:c4:9f:71:bd:ce:c7:00:83:14:8e:64:b8:6b:64:cd:56:71:
         49:34:ed:da:6e:e9:67:d0:99:bf:b9:2a:cb:51:4f:8b:58:48:
         ee:45:6c:ca:f7:80:5d:13:87:83:5c:22:42:12:3d:7e:2a:e7:
         97:8c:43:57:3e:93:35:be:24:cf:a5:87:9d:82:77:98:f0:c4:
         f4:0a:4c:db:ba:8f:fa:3c:47:0c:38:a2:d8:36:20:20:bc:96:
         f5:9f:6e:65:a9:07:56:f9:f0:e8:88:ec:d2:33:e7:80:00:ac:
         e1:38:0f:dc:a0:9b:7c:ea:ef:68:15:db:c4:bb:18:26:d7:e0:
         ef:f5:19:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:31 2025 by rpki-client