Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a7e6665-051a-3732-8c18-434f495e2ab7.roa
File:                     2a7e6665-051a-3732-8c18-434f495e2ab7.roa (raw, json)
Hash identifier:          i0txYeHsv4MPshBoJUpkKnVN4Sibu9jF5t4b7W1JASg=
Subject key identifier:   A0:E2:F6:4A:6E:67:6D:66:42:4B:DE:70:13:97:AD:AA:A4:D2:8D:32
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780267443BC9CCA9680EFBDC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a7e6665-051a-3732-8c18-434f495e2ab7.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:3600::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:74:43:bc:9c:ca:96:80:ef:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=dbfa7656-7aeb-482d-af11-d4329a652454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ba:cf:93:db:22:bf:0c:ad:49:63:d9:13:98:
                    3c:5a:d4:3b:d7:9d:e6:17:4b:cc:f1:ac:43:64:90:
                    ce:3b:94:13:6e:81:24:8e:bf:3c:55:d4:a9:f1:b9:
                    c7:be:19:e4:77:af:e6:aa:e8:ff:b1:09:29:07:b9:
                    74:43:9f:70:ba:d7:88:92:fd:65:d4:c5:ab:38:eb:
                    3d:de:0c:f2:45:ad:ad:36:1e:72:ea:54:10:c8:a1:
                    7d:b0:7e:12:83:5c:a3:8e:d9:66:f9:77:70:e8:e9:
                    5f:24:07:89:31:0e:9f:84:71:1c:4a:10:db:b9:a6:
                    00:58:49:95:81:87:bb:28:dc:c7:86:35:5d:2e:a4:
                    36:8c:68:cb:7b:92:67:de:3f:7d:20:35:8e:e0:26:
                    2e:a0:fb:39:de:e3:00:9e:ab:c8:f1:c8:a4:f8:54:
                    f3:3c:23:5a:d0:4d:a4:c8:a5:94:3b:ff:92:ff:17:
                    a4:ef:f2:19:df:d1:8b:8c:c0:7b:59:3f:d9:d7:a1:
                    7f:4e:96:97:3c:e0:34:72:b5:a4:cb:0b:0d:44:a6:
                    a6:b7:98:72:53:b1:94:34:15:98:ef:5f:eb:7c:51:
                    6a:6a:01:6c:39:34:9f:10:9a:e9:1a:0a:de:76:05:
                    0e:cb:c2:0c:bd:ba:09:4d:07:30:a6:52:fa:d0:99:
                    9d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E2:F6:4A:6E:67:6D:66:42:4B:DE:70:13:97:AD:AA:A4:D2:8D:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a7e6665-051a-3732-8c18-434f495e2ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3600::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:2f:7f:1f:77:a7:dd:8f:23:e0:bd:97:a0:54:99:7e:50:59:
         a2:88:20:89:3d:1f:3b:7a:2e:1a:22:eb:35:cc:6a:9b:98:c2:
         32:dc:0b:7d:09:92:2c:1a:04:40:fa:57:75:72:e7:a6:1b:60:
         ca:b2:81:f3:a5:62:59:6e:ef:9c:78:c8:fb:0d:08:4c:2a:6b:
         54:0b:4f:39:7e:f2:36:2e:a3:e2:7b:c3:f3:3c:74:df:d1:89:
         fd:f8:b7:84:97:0f:79:ce:72:e1:84:fc:50:10:2e:f1:7b:83:
         c0:41:08:b1:25:f9:03:aa:d1:a8:90:7d:dc:a7:ca:02:73:6f:
         7c:ec:5c:f2:1d:47:3f:3b:db:80:8b:b5:15:31:2b:60:eb:77:
         2b:15:27:ad:cf:9a:91:f7:0e:d8:d1:2d:ff:84:01:4e:5a:40:
         2a:77:25:0d:dd:0e:ff:da:10:15:10:de:12:63:f0:6e:a4:69:
         13:8b:e5:ab:dc:d0:f4:76:b1:ef:77:f2:8a:ce:bb:18:77:32:
         4e:80:99:31:b8:cc:e2:7b:65:98:b5:d3:b1:45:fa:91:dc:7d:
         92:8c:65:6a:25:41:4c:63:ac:10:be:23:16:e8:50:3f:91:3a:
         67:ab:4c:b4:be:08:9a:a1:18:9a:b9:06:3c:1e:42:37:c5:49:
         ba:bb:0a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:46 2024 by rpki-client on console-fra.rpki-client.org