Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/269c5529-e73d-399f-ad46-f50e0a8f9c08.roa
File:                     269c5529-e73d-399f-ad46-f50e0a8f9c08.roa (raw, json)
Hash identifier:          CPe/OVIPXS4NBA/RyozTuPzkayFfrZfDohretaxxeBs=
Subject key identifier:   73:3E:1C:03:7B:60:EC:7F:AC:F6:D3:CC:55:4D:14:E3:65:E0:FE:0C
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858478026919C27A097933D1CAF20
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/269c5529-e73d-399f-ad46-f50e0a8f9c08.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:2090::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:91:9c:27:a0:97:93:3d:1c:af:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=086eff5a-ef39-42c9-813e-1e5d28d32185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cb:b9:b6:a7:2e:22:5b:e9:22:53:ea:37:48:
                    18:3e:4f:22:6d:41:c9:26:54:2b:13:89:16:ff:30:
                    fa:93:6c:bc:23:49:92:d8:a3:0e:8b:34:c6:3f:8f:
                    82:3f:59:89:c1:83:a3:0e:36:51:30:56:74:bc:e2:
                    ca:8a:bc:70:89:26:fd:18:61:a6:d0:53:68:44:50:
                    05:b0:a9:bf:6c:90:df:6a:ee:e3:af:97:b5:56:0b:
                    86:ce:1c:e1:23:20:10:72:60:28:8e:1e:d2:8d:90:
                    89:41:cd:94:5a:ad:b9:45:49:1b:8d:6b:dd:b8:2c:
                    69:cd:6d:76:a2:69:a9:81:0d:f6:cd:12:3a:06:dd:
                    d7:d2:00:5e:a7:79:df:df:1d:88:d5:ea:5b:2d:b5:
                    1c:f0:10:7c:51:af:89:7c:ff:39:60:db:66:e7:7b:
                    30:56:46:0f:81:c4:29:a2:ef:e8:64:26:e2:c0:3f:
                    c9:e2:25:60:5f:b8:06:3e:7e:50:67:a2:8b:a0:bd:
                    90:f8:1b:44:74:bd:ad:9e:30:b3:22:7c:b0:7b:4f:
                    87:0c:1a:3b:6e:80:dc:e0:c6:f8:fa:fa:db:07:73:
                    38:44:e1:26:25:9b:01:ab:c8:c3:aa:5e:73:b4:37:
                    8d:73:04:22:82:d9:82:8f:ad:87:40:57:6c:b1:08:
                    72:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3E:1C:03:7B:60:EC:7F:AC:F6:D3:CC:55:4D:14:E3:65:E0:FE:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/269c5529-e73d-399f-ad46-f50e0a8f9c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:19:a5:f6:5e:8a:0a:7d:6d:69:bb:99:35:96:39:94:86:81:
         9c:0f:5e:fb:6d:89:3a:cc:76:fd:07:a4:91:f2:88:00:8a:92:
         b8:82:c4:1b:4d:d6:d0:a3:b2:59:b6:e3:59:f3:26:b9:dc:1b:
         c1:62:13:2c:65:3b:40:25:dc:79:81:89:62:a5:a5:ac:ff:0a:
         e0:41:06:a0:a6:f2:1a:96:58:e4:e7:dd:42:96:a9:24:51:43:
         b4:dd:50:b1:0b:d7:9b:48:4c:e9:27:7a:30:3b:42:00:ba:60:
         8b:98:fb:f6:36:6c:76:f5:4d:d9:b2:c3:59:8b:0f:d0:1e:11:
         fa:00:ad:4d:b2:36:da:8f:d5:9c:b9:0e:31:c4:50:4d:0b:6f:
         da:08:3c:e8:7f:af:58:88:4c:36:ca:ce:ee:ce:1a:05:05:43:
         de:5e:0d:71:b0:a6:f1:09:41:1f:42:fc:25:e0:13:28:c0:06:
         4d:39:90:5d:fc:13:71:05:56:8a:ef:82:aa:25:bb:d3:b8:23:
         f0:74:b5:3e:e8:1d:63:77:2f:69:2d:e3:12:9f:d3:36:24:f7:
         a7:b2:c5:fe:1d:ef:dd:fe:ab:71:27:08:de:9c:b2:d4:64:7e:
         45:a1:11:04:26:a1:55:68:db:b5:74:11:18:56:4a:43:6e:c5:
         5b:27:eb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:45 2024 by rpki-client on console-fra.rpki-client.org