Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2fd8ba5-c4c9-3165-aa4d-3110dfb2a46a.roa
File:                     e2fd8ba5-c4c9-3165-aa4d-3110dfb2a46a.roa (raw, json)
Hash identifier:          PD9YZ3Yx5H2Bu2mLX8qgcsplQuhccYyctXmPyW7Dtqc=
Subject key identifier:   58:A7:FF:E2:6F:B4:58:43:38:38:2D:BD:2B:EF:BF:BD:5F:E7:17:66
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B5C9C6633C70A3C37ADE0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2fd8ba5-c4c9-3165-aa4d-3110dfb2a46a.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     6204
IP address blocks:        2001:470:1d7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:5c:9c:66:33:c7:0a:3c:37:ad:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=ba654796-5764-4b29-91c9-8e2f3b75a4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:db:f6:06:d0:2a:70:14:cb:ea:62:a9:a3:63:
                    98:d2:ea:a7:b0:71:73:56:38:5a:99:9e:50:f0:6f:
                    0c:9c:9a:54:40:4f:20:ed:5f:77:1b:79:3c:7b:7e:
                    0e:9d:a4:51:93:bf:0c:b7:d1:3d:85:ac:64:a1:f0:
                    76:94:a2:c9:25:50:d4:ca:d3:8a:12:a1:5a:ea:91:
                    ef:5e:3d:a7:5e:8a:ec:cd:42:cc:ff:0c:83:85:28:
                    2a:bf:30:ae:6e:6a:8f:41:7d:01:58:49:d5:04:e6:
                    16:ef:fb:be:fe:6a:1b:63:c5:a2:a0:42:5a:3b:5f:
                    50:b0:ec:56:a3:97:57:bb:09:64:e9:81:13:38:22:
                    7e:e0:40:77:18:ff:7d:1a:f7:c3:7b:95:33:4b:d0:
                    f0:e5:2b:b0:b6:43:e6:5c:8c:9b:b9:95:bf:2f:ef:
                    ca:5f:b4:1e:1d:5e:84:64:8c:c5:60:1b:45:64:6f:
                    8e:a8:f8:e3:06:19:a2:20:d0:8c:15:24:46:b3:13:
                    f0:57:05:55:18:64:da:c1:db:40:4d:a4:22:7c:2a:
                    39:ac:39:3a:a0:93:c9:aa:1b:77:67:d1:43:8c:51:
                    70:bb:d7:ab:26:2d:87:45:72:63:b4:70:d9:7b:4d:
                    ff:0c:9e:11:60:25:7a:8e:a8:9d:36:1a:83:27:b6:
                    11:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A7:FF:E2:6F:B4:58:43:38:38:2D:BD:2B:EF:BF:BD:5F:E7:17:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2fd8ba5-c4c9-3165-aa4d-3110dfb2a46a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1d7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:40:0e:66:51:80:2e:f0:65:f7:d6:6a:62:54:96:f1:42:10:
         23:e4:f1:54:e4:6c:e6:f1:31:41:9f:93:e6:d3:aa:c2:66:de:
         79:91:a6:d6:7f:21:22:1e:2e:b0:ea:a6:d2:de:9a:70:76:40:
         2e:ee:dc:cb:64:7e:51:ed:a1:22:3e:09:01:7a:8b:e3:b4:2f:
         5a:8d:b7:dd:8a:a0:0c:01:f8:67:ff:94:dc:cd:f7:d1:49:62:
         90:f9:57:de:1c:b3:7d:92:52:5e:91:4b:af:eb:64:b3:2b:6b:
         c2:1f:16:d5:5c:bf:36:1c:b7:6f:21:f1:3d:5a:dc:33:f5:fe:
         65:86:62:fe:50:96:df:95:5c:68:ba:48:62:e9:ee:5e:c5:0c:
         1c:05:1a:ee:af:be:bb:d4:80:9c:53:3d:a9:f9:00:ca:98:b3:
         7b:4c:fe:2e:5b:b8:4b:8b:ed:89:03:32:a6:d7:4b:6f:9f:d1:
         88:75:ca:6a:a5:fb:f2:18:56:e5:fe:2f:98:03:0a:84:8d:91:
         da:09:0b:14:78:53:79:27:13:70:2a:0a:c2:ff:74:94:8d:f2:
         7b:3b:36:f8:a4:6e:1f:a5:b8:8e:12:0e:28:85:97:5c:6a:d1:
         c7:88:13:97:22:17:15:04:6b:e2:36:2c:c6:5b:a8:02:00:f4:
         69:c7:dd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:40 2024 by rpki-client on console-fra.rpki-client.org