Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fd0cb8cd-dfcd-33e8-96eb-d6867e44d42c.roa
File:                     fd0cb8cd-dfcd-33e8-96eb-d6867e44d42c.roa (raw, json)
Hash identifier:          FBmZEHLNK+ib4d9WS7u4dPnPV3Pbwl15UyXIs18GIqo=
Subject key identifier:   04:78:A4:17:2A:7F:98:04:3B:31:D4:77:D8:A1:11:D4:2D:65:83:04
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B50389892C2A1648D9E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fd0cb8cd-dfcd-33e8-96eb-d6867e44d42c.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     400719
IP address blocks:        2001:470:109::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:50:38:98:92:c2:a1:64:8d:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=0a9344c9-62a1-4877-84b9-ac6af3317c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0e:46:12:21:ec:23:ca:0e:4b:19:83:fd:0b:
                    9a:b7:4c:aa:c2:52:db:f1:64:26:be:06:60:b3:b3:
                    16:ca:8f:1d:49:07:42:e4:e3:30:d6:7a:ba:d0:78:
                    22:d9:10:31:3e:4f:de:f2:7c:98:6c:28:68:ce:e9:
                    54:14:02:e4:81:6c:ec:c9:92:56:ab:3d:cb:8b:26:
                    c7:78:2d:e9:ca:45:11:94:ba:58:4f:1a:f8:43:ec:
                    d1:f3:ac:ef:c2:40:23:d7:5f:23:f7:b2:e6:05:7d:
                    25:8c:44:f6:0d:e3:d8:82:7f:c1:da:12:b0:4e:7b:
                    ad:62:ca:6b:72:f3:e8:60:15:00:18:fb:0e:04:b4:
                    cc:81:53:ef:ac:90:43:dc:3f:1e:b6:ec:67:93:db:
                    53:bf:08:c2:90:ad:4a:06:c4:f2:e8:68:ad:70:57:
                    85:bf:84:0d:74:68:fd:d8:27:ad:96:cb:6b:16:d4:
                    99:fa:27:83:7d:dd:18:5f:d7:22:9e:37:6a:3f:bc:
                    d8:2a:5c:9b:b7:e9:52:d6:7d:b2:ac:e3:24:a9:17:
                    c4:01:f2:40:18:e4:c9:3c:8e:36:72:ab:35:e8:97:
                    33:2b:8b:0a:c5:09:1f:ad:d3:dc:93:6d:38:5e:95:
                    e4:2d:e3:08:33:c5:bb:06:94:a0:ae:bc:ee:b5:41:
                    8b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:78:A4:17:2A:7F:98:04:3B:31:D4:77:D8:A1:11:D4:2D:65:83:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fd0cb8cd-dfcd-33e8-96eb-d6867e44d42c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:109::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:43:34:88:1b:ab:ed:1e:59:46:1f:40:78:df:94:48:12:5c:
         ba:29:bc:92:ac:f1:3d:b4:53:dc:20:e5:3f:15:53:fc:b4:21:
         e2:d7:ea:c1:1e:1b:84:8b:97:44:19:6f:83:94:18:f8:87:5e:
         89:8a:3a:f7:50:9e:84:b5:c8:da:e2:60:51:58:27:0d:51:63:
         d5:64:11:8a:e4:9b:05:4d:84:7c:1b:11:2e:99:a8:be:83:2c:
         8a:a5:ec:ad:08:7e:db:80:ed:0a:93:54:2c:5e:c3:ce:87:4f:
         9e:94:9c:46:73:dc:2c:a4:ad:82:ef:ab:87:fd:5f:cb:06:84:
         63:f1:70:13:11:05:d9:64:63:f5:53:7e:22:2a:bd:21:b3:b2:
         2d:0d:c8:d2:62:cf:f2:23:53:20:d3:af:4b:04:cd:d4:22:a1:
         46:be:b9:75:42:1a:1e:2d:a0:d1:a1:68:07:56:12:0e:42:e0:
         64:e4:9a:5a:21:98:6b:09:bc:a5:5e:f7:0c:cd:69:3b:ea:a3:
         1a:47:53:cf:57:cb:96:8f:58:21:dc:8e:98:ad:64:4d:03:02:
         eb:c5:13:db:e7:30:2e:a9:ee:d3:24:1c:df:22:49:45:fe:48:
         dc:88:69:33:a3:96:07:28:98:94:e5:af:1d:ee:5d:1d:2d:af:
         5c:86:7d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:31 2024 by rpki-client on console-ams.rpki-client.org