Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2c81b1a0-b8f3-37d7-b1bc-43b8bc79cd9d.roa
File:                     2c81b1a0-b8f3-37d7-b1bc-43b8bc79cd9d.roa (raw, json)
Hash identifier:          T1pu7b/0K3pkSbnHdSFYnrTopdsUWh3e50eesVLlDoo=
Subject key identifier:   2B:12:24:96:F2:DF:C3:FF:B1:4A:DE:E2:BC:F0:7F:F6:49:E2:FF:8F
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847802661AF548B9EA71C0BFE00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2c81b1a0-b8f3-37d7-b1bc-43b8bc79cd9d.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:35c0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:61:af:54:8b:9e:a7:1c:0b:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=0b8b02e8-6ead-431d-b569-6dcd6ea8b506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:e7:c5:a2:d1:8b:67:a4:e3:e7:0d:79:8b:
                    fa:2e:6c:43:ba:4c:d4:35:3e:a5:92:af:2d:6f:5b:
                    a9:e8:ad:c5:46:e9:43:1f:42:bf:91:df:40:48:ee:
                    76:0b:fb:b6:88:aa:15:41:75:93:cb:83:a8:ec:d8:
                    64:b0:07:4d:0e:03:f3:ad:08:f9:9c:92:24:b8:04:
                    ed:3d:49:a0:48:4d:ce:76:2d:6b:23:f6:13:16:d6:
                    6b:25:f5:b5:fc:4c:ab:92:4c:0c:f5:3f:9c:ee:3a:
                    16:54:d1:69:32:a8:91:0d:09:5c:b5:30:b6:94:43:
                    53:9b:95:1c:52:57:61:40:ec:93:a9:a1:b5:1f:31:
                    28:59:28:d7:ea:62:fd:75:10:8f:4a:1c:ab:56:73:
                    92:33:8d:55:0f:f3:4a:71:e0:96:ca:33:55:7c:e0:
                    d2:c4:af:9a:95:af:44:87:3c:97:73:ad:51:d3:22:
                    c5:ad:f0:c3:68:03:e6:55:fb:6a:9e:f5:73:19:a2:
                    c9:bd:da:05:32:c1:d0:84:2d:c6:7c:8f:2f:43:c0:
                    15:f4:94:02:48:47:49:6a:93:4b:4e:d3:f5:c8:9e:
                    af:67:ed:8b:d5:41:76:8a:18:25:f1:52:57:58:5d:
                    4c:72:9f:71:b1:4b:ac:bb:56:a4:a6:61:60:b2:31:
                    9e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:12:24:96:F2:DF:C3:FF:B1:4A:DE:E2:BC:F0:7F:F6:49:E2:FF:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2c81b1a0-b8f3-37d7-b1bc-43b8bc79cd9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:35c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:5d:0e:30:e7:37:ff:f5:12:4d:7a:bf:35:94:d1:1d:87:98:
         f5:d4:fc:0a:73:90:5d:2a:e6:b5:48:ac:27:af:8f:81:79:2f:
         f0:a7:ea:53:3d:b8:fa:af:1a:e2:7d:97:19:60:d8:4c:86:be:
         51:fa:64:7a:45:78:53:98:2b:e8:17:ed:ba:b6:94:95:1f:e5:
         b8:18:70:cf:db:2e:bb:d8:e6:2e:a5:90:9a:c0:98:22:e3:16:
         04:3d:e5:ee:5e:11:87:7d:ec:71:bc:51:39:2e:80:4f:12:df:
         95:44:07:a3:e0:79:3c:81:aa:b3:fd:03:45:06:27:24:94:93:
         6e:d6:46:7e:44:42:11:86:eb:82:cf:41:c6:ea:78:09:0a:a6:
         be:cc:25:a0:52:10:00:ff:c1:1f:fa:3a:ca:55:5c:d0:55:57:
         e9:46:46:53:f1:dd:05:87:ac:7b:05:35:36:13:28:cf:ae:6f:
         c6:a7:e3:32:0d:05:28:45:fb:bb:d8:3e:47:69:c5:e1:ed:81:
         21:98:f6:8f:c0:43:1f:6d:5e:90:11:f0:2b:d3:03:38:b9:f6:
         f7:1a:38:91:75:a4:55:c1:bf:1b:b1:f4:ff:a0:ee:5f:58:bd:
         e1:fe:84:9a:87:34:fe:7a:cb:d2:3b:94:12:3c:e2:1f:fd:c6:
         ea:a7:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:45 2024 by rpki-client on console-fra.rpki-client.org