Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3b5053d-8f50-3980-8d43-1d9a8b953ab5.roa
File:                     f3b5053d-8f50-3980-8d43-1d9a8b953ab5.roa (raw, json)
Hash identifier:          prxPtSv72tgZc4mXof8o6g5ER0Ssb6UPDxKdrqPckZU=
Subject key identifier:   96:0D:81:7A:64:2A:71:37:EA:58:F4:97:CC:28:16:17:26:5E:E0:B7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584795251B85E23572DA8694EBC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3b5053d-8f50-3980-8d43-1d9a8b953ab5.roa
Signing time:             Fri 18 Oct 2024 13:30:10 +0000
ROA not before:           Fri 18 Oct 2024 13:30:10 +0000
ROA not after:            Thu 16 Jan 2025 14:30:10 +0000
asID:                     198847
IP address blocks:        2001:470:3af::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:25:1b:85:e2:35:72:da:86:94:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 18 13:30:10 2024 GMT
            Not After : Jan 16 14:30:10 2025 GMT
        Subject: CN=fbbe5b0b-0345-4845-bfe4-e33c498acc56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:31:53:b1:17:b0:b7:4a:fe:f8:ec:ae:20:ad:
                    4a:7a:c5:87:12:ff:8c:46:17:61:e4:6b:9a:2e:91:
                    63:fa:ad:d5:f2:88:10:eb:2b:5c:d5:19:2e:7e:a9:
                    41:c8:48:f0:c5:c8:38:07:7b:1b:98:be:ea:6e:07:
                    9b:ac:66:e7:4b:dc:79:28:a2:af:dc:42:b4:83:99:
                    2f:17:06:17:8c:98:eb:be:f0:71:01:de:a0:36:24:
                    51:5f:71:dd:f6:57:8a:1f:c8:5b:97:e1:9d:a1:54:
                    7f:77:71:f0:c7:d5:91:8f:bf:1a:f9:9a:16:ad:65:
                    6e:10:a8:06:81:eb:f3:ea:76:74:05:d9:89:18:f0:
                    35:7d:9f:79:5a:ff:f1:95:58:ef:06:47:3c:39:33:
                    a4:4a:3e:aa:7e:3e:cb:34:bb:2f:17:31:40:90:ed:
                    38:23:ec:dc:32:b3:ba:20:a0:ff:fc:16:59:32:40:
                    ea:fb:99:a3:9e:df:5c:37:56:a7:c6:be:18:2a:35:
                    29:80:07:14:2d:1e:25:dc:e6:4f:38:35:75:7e:73:
                    da:20:b4:0a:35:d9:40:1a:af:0c:d2:dd:08:3a:eb:
                    e3:d3:a1:82:72:d6:1a:dc:9c:09:0d:b7:40:88:02:
                    31:ac:8e:6d:43:0d:93:60:71:10:5c:eb:6d:0f:db:
                    83:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0D:81:7A:64:2A:71:37:EA:58:F4:97:CC:28:16:17:26:5E:E0:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3b5053d-8f50-3980-8d43-1d9a8b953ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3af::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:c1:b0:52:b7:01:8b:69:b5:82:48:36:b3:eb:95:1e:36:1d:
         cc:13:df:3b:b4:fc:c9:7b:4b:01:87:37:dc:52:9e:d1:c7:d6:
         ee:c0:b1:ec:4b:4b:e0:b2:3e:1e:d6:de:a2:d2:87:43:52:0e:
         7b:33:c6:d9:26:c2:43:02:9b:02:3a:83:5d:b1:06:3d:52:98:
         5d:c3:db:46:0d:65:68:73:3a:e4:3c:3e:e2:f1:eb:3f:dd:0b:
         97:64:f2:12:96:80:81:50:97:2e:b2:5a:17:4f:27:c5:59:1d:
         19:2e:e4:12:85:29:e3:49:ce:b4:d5:55:0b:28:1e:2a:fd:d8:
         33:e6:f8:b4:75:c1:98:9f:60:be:29:1e:1c:b4:bb:a0:8d:f8:
         0e:7c:17:ce:17:fa:81:ed:ac:19:c1:cc:5e:15:9d:b6:7c:25:
         56:07:a2:2c:a2:9f:f8:a7:85:1b:8c:bb:90:13:60:b0:cb:3f:
         21:1b:6f:30:62:e0:70:20:8a:3f:dd:7d:5d:98:d4:a1:54:eb:
         50:85:ab:3f:3d:90:d3:a2:8c:9e:ba:f9:7d:8c:48:47:50:6e:
         4a:a4:0a:0e:07:b4:ee:20:2d:6f:a7:6c:66:27:58:03:45:73:
         37:cc:50:ec:ee:1c:7c:0d:76:b3:dc:0f:c1:2b:18:d1:1e:ac:
         9e:54:e9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:31 2024 by rpki-client on console-ams.rpki-client.org