Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba507904-601f-3c1d-8158-f5c297c1052e.roa
File:                     ba507904-601f-3c1d-8158-f5c297c1052e.roa (raw, json)
Hash identifier:          PZbFT5xZDcP3+acCWPNRZiaqrzF8J/wY4nNuaxFI7QA=
Subject key identifier:   06:ED:C8:DF:EF:84:D6:A6:52:C4:D2:AD:81:34:E2:45:9A:A0:1B:9A
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858475910C470D64762E79E622F00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba507904-601f-3c1d-8158-f5c297c1052e.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     1225
IP address blocks:        2001:418:7:4::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:c4:70:d6:47:62:e7:9e:62:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=3eb8b1cf-db97-44eb-93ed-f9d76c5075f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fe:ef:60:cb:a5:2c:8d:c7:96:49:a6:f9:4e:
                    57:f0:a1:cc:d9:bc:39:1c:90:66:6c:30:a8:d0:59:
                    a1:a7:fa:44:39:4c:b7:d9:e1:8c:b1:e6:08:ab:7e:
                    9a:66:07:04:5d:88:13:ad:b1:ff:47:af:ca:69:ec:
                    b9:ce:d6:03:e4:57:27:27:9d:7a:2b:e5:73:6f:83:
                    15:c0:ac:97:4a:f3:6a:67:0e:aa:2a:f1:1d:4d:82:
                    1f:38:89:76:24:c0:55:7d:d4:55:0d:4d:9f:f3:77:
                    f1:22:5b:47:63:d3:a9:8a:a2:18:7e:3f:fd:4c:4e:
                    e1:12:1c:86:37:27:9b:92:79:e7:73:8e:f1:d6:af:
                    86:42:6f:95:ea:81:b9:8f:2a:31:24:02:fd:e8:d4:
                    b8:9e:43:bf:f4:e4:cf:56:e8:59:4a:a2:7d:03:15:
                    99:26:73:b6:3f:96:67:b6:ae:6e:6b:7d:c5:df:aa:
                    e7:bf:47:d7:a5:4c:05:8d:b7:2e:ed:d5:60:66:49:
                    52:af:49:a3:5b:14:02:49:b5:f7:08:47:13:01:08:
                    76:74:aa:2c:fa:4d:80:cb:c7:7a:46:d1:23:6d:54:
                    99:bc:56:b4:1c:3f:4e:dd:64:a8:38:b3:6a:24:93:
                    b5:80:50:d4:08:94:84:bd:87:db:8a:c8:ee:de:62:
                    43:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:ED:C8:DF:EF:84:D6:A6:52:C4:D2:AD:81:34:E2:45:9A:A0:1B:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba507904-601f-3c1d-8158-f5c297c1052e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:7:4::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:fc:fc:d2:78:1a:54:10:07:e7:f9:1a:d3:56:9a:c7:c8:76:
         32:64:0e:b1:7c:67:40:2f:28:2d:6e:34:6c:be:de:cd:d7:84:
         33:08:ba:8d:3f:8e:1d:39:91:ff:a4:45:fa:8e:9a:f2:5d:f3:
         14:85:4e:33:e2:2e:de:dd:fe:2a:fb:47:c7:62:4e:af:96:f5:
         25:e5:38:1c:09:c1:fa:b0:7f:be:3e:87:56:4e:87:9c:c8:f6:
         d4:a1:fe:45:66:9f:c0:78:1a:08:91:d4:0e:94:fb:62:a3:07:
         29:11:7c:a6:95:26:fd:a9:a3:32:7c:59:ce:0a:d3:43:06:bb:
         03:85:a0:d9:1b:2b:e0:1e:d4:7c:9a:72:74:29:5b:34:9f:36:
         d1:dc:60:85:8c:7c:67:d3:c9:3a:34:e4:d3:82:19:53:d0:3a:
         bf:97:75:81:d4:f7:20:d2:d5:ee:dc:24:fe:8b:28:a7:3a:82:
         9c:a9:27:ea:63:fa:0b:38:d0:da:17:31:5e:14:72:6b:87:8d:
         e5:d8:9d:e2:66:5e:20:2b:0b:98:7c:f7:ff:cd:8d:96:35:41:
         13:80:f5:24:b5:aa:fb:ef:42:ef:30:b2:5d:ba:2f:a3:12:53:
         4e:1a:63:a6:f5:08:4b:e7:2d:1a:dd:d7:5c:d7:40:a1:8a:a1:
         fe:dd:d3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:17 2024 by rpki-client on console-ams.rpki-client.org