Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eac7121b-872d-36f1-9d7c-8c85f26f7c15.roa
File:                     eac7121b-872d-36f1-9d7c-8c85f26f7c15.roa (raw, json)
Hash identifier:          RhUYB9byIERrvEOCrsHfZLdmteORYYexIZHgpGDwnvo=
Subject key identifier:   DC:87:C2:35:51:7B:E1:C3:A5:BE:77:06:1A:8C:EE:37:79:F0:CF:DD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F89571DB4189AF3D954C5E20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eac7121b-872d-36f1-9d7c-8c85f26f7c15.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     26679
IP address blocks:        2001:470:5f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:71:db:41:89:af:3d:95:4c:5e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=01dc37aa-c296-46e4-8f1f-e5353816bff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:78:ab:2a:b5:45:a2:42:4a:c3:8f:6f:9d:e4:
                    ab:ba:66:6f:69:b0:f2:dd:22:25:62:71:06:2d:14:
                    06:54:12:2c:72:18:47:b9:5c:eb:e2:af:df:2a:75:
                    12:cf:32:f7:61:ab:06:98:6a:97:ff:e6:b4:d6:a5:
                    26:03:af:27:e4:1c:fb:05:00:3d:fc:aa:46:d1:b2:
                    93:50:03:d9:f7:24:41:bc:2d:4d:4e:67:26:d5:d5:
                    d4:28:40:53:4f:e7:1b:c9:43:1a:e3:29:46:02:34:
                    97:91:5d:2d:2a:0e:2c:11:2e:2a:c7:b1:19:d2:c0:
                    c3:38:72:e4:ee:3b:89:a5:2f:af:24:8d:ce:f8:65:
                    fe:e5:aa:94:63:4c:61:85:90:bf:3e:3f:7e:23:51:
                    fc:f8:57:5f:6c:11:da:e1:eb:c3:d4:27:3c:43:ab:
                    8c:27:37:3c:3b:57:37:7e:70:5e:d9:ce:2b:31:c6:
                    cd:b1:12:f8:e1:ea:06:26:6f:8a:5f:78:e7:2d:89:
                    6d:c6:85:86:7a:df:30:60:e7:6f:c1:3c:ce:3d:63:
                    eb:06:67:ba:01:f0:85:64:23:d2:4a:3e:d2:f1:3d:
                    51:4a:1d:b3:f2:20:4e:47:b5:74:0e:ab:c1:d6:62:
                    6c:53:57:4d:d0:7e:db:0d:0d:f5:0b:a1:51:85:90:
                    03:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:87:C2:35:51:7B:E1:C3:A5:BE:77:06:1A:8C:EE:37:79:F0:CF:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eac7121b-872d-36f1-9d7c-8c85f26f7c15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:5f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:08:4f:f9:2c:20:fd:c9:02:4d:ca:83:90:72:9d:25:51:d0:
         a3:78:f4:3c:87:6c:b3:8b:c2:8d:c1:24:48:a9:a7:15:46:3d:
         cf:5c:ec:5d:43:74:b6:e1:c3:5d:6c:3d:18:26:39:74:e4:06:
         23:3d:01:72:0c:1d:62:24:af:69:da:dc:ba:b7:9c:c0:2d:52:
         28:dd:8a:f1:ed:31:f9:5d:b9:44:1d:4c:10:2e:5a:0a:bc:04:
         ad:f8:dd:71:9d:a5:e0:2c:4a:5d:12:18:1b:d6:6c:eb:eb:9b:
         60:f3:5a:df:4a:42:f3:42:ab:ee:6e:a1:1c:08:de:cc:b2:e4:
         95:66:bd:31:55:85:1b:75:fe:44:0f:15:18:24:75:1a:2c:c3:
         f1:18:3d:a3:32:93:ec:35:b6:bb:5d:00:20:03:5e:44:68:58:
         37:f4:0d:8a:e0:aa:be:3b:3b:66:13:16:9d:44:20:ee:6a:e2:
         66:df:2d:7e:ff:c1:eb:f2:71:dd:95:92:a4:6e:42:2f:c3:07:
         31:70:8d:71:d0:07:33:39:25:6c:08:c5:0f:a2:be:3a:43:01:
         1d:8c:02:af:88:79:39:5a:e6:42:c5:74:95:95:d2:f8:46:92:
         9c:8a:f2:05:bf:f1:0f:6d:39:cc:20:54:78:a2:0d:b2:7d:8a:
         5c:c0:13:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:02:19 2024 by rpki-client on console-fra.rpki-client.org